Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa
File:                     4545cdb9-209d-3cc9-9074-490c2687d75d.roa (raw, json)
Hash identifier:          8Bcuya4pqagARKmemzKxdCF+y3UVoW9D41oZLR/fMuE=
Subject key identifier:   09:28:99:11:CC:E8:D1:D2:58:C8:2A:D4:A1:F0:06:7C:9B:7F:BB:F0
Certificate issuer:       /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
Certificate serial:       010D0C9F4328584C8A0C1ECC1856E4CE7A453580
Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa
Signing time:             Fri 16 Jan 2026 02:00:31 +0000
ROA not before:           Fri 16 Jan 2026 02:00:31 +0000
ROA not after:            Thu 16 Apr 2026 01:00:31 +0000
asID:                     3663
IP address blocks:        50.116.128.0/18 maxlen: 24
                          63.135.128.0/19 maxlen: 24
                          64.246.240.0/20 maxlen: 24
                          70.40.224.0/19 maxlen: 24
                          74.213.208.0/20 maxlen: 24
                          96.126.0.0/18 maxlen: 24
                          108.167.192.0/18 maxlen: 24
                          142.11.0.0/18 maxlen: 24
                          173.254.128.0/19 maxlen: 24
                          173.254.160.0/20 maxlen: 24
                          184.95.64.0/18 maxlen: 24
                          192.173.192.0/18 maxlen: 24
                          198.190.64.0/18 maxlen: 24
                          199.115.224.0/22 maxlen: 24
                          206.40.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8a:0c:1e:cc:18:56:e4:ce:7a:45:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
        Validity
            Not Before: Jan 16 02:00:31 2026 GMT
            Not After : Apr 16 01:00:31 2026 GMT
        Subject: CN=e7931f15-8fdc-4875-bf85-60d61695881b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c9:24:78:5f:9f:46:df:e8:c9:e6:24:5a:c7:
                    fe:e2:bd:f4:8f:82:f1:f9:9a:c6:20:68:f9:75:05:
                    86:71:57:08:13:21:b3:01:b6:34:a8:7c:60:b9:2e:
                    94:42:e4:f4:c6:bb:5a:58:2e:5b:b9:01:6e:74:2d:
                    da:69:1f:21:6b:31:24:70:e7:d7:ff:12:b0:50:13:
                    e6:ae:78:e0:a1:74:13:95:47:a5:35:b5:e9:a0:e2:
                    7c:77:c8:42:a7:ee:11:45:0b:9e:5f:db:79:e8:ae:
                    30:52:c9:bf:c0:c1:19:0e:28:27:33:d8:55:0e:97:
                    29:6e:a9:ef:cb:78:00:8c:b5:d8:26:d3:b9:55:42:
                    c2:6f:4a:98:d2:9b:bb:7b:0e:0f:c8:e1:d7:2e:02:
                    78:d7:fd:d7:e6:45:19:45:e9:16:bc:8b:ee:74:9c:
                    97:ad:ab:b0:bd:94:f9:db:b5:e6:d1:36:5f:b5:1a:
                    b0:cd:59:76:45:ef:62:e8:85:90:c0:f9:35:7c:c8:
                    71:af:89:88:53:c3:20:a7:02:38:a7:03:ab:18:cf:
                    5c:a7:21:0b:73:3b:52:68:37:d7:80:bd:2c:cc:cc:
                    68:6e:b7:d8:c0:17:a5:a6:e9:dc:62:30:6e:2d:f0:
                    be:2e:7b:c0:79:f1:a8:25:ce:d2:19:1f:79:4e:4a:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:28:99:11:CC:E8:D1:D2:58:C8:2A:D4:A1:F0:06:7C:9B:7F:BB:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl

            X509v3 Authority Key Identifier:
                keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.128.0/18
                  63.135.128.0/19
                  64.246.240.0/20
                  70.40.224.0/19
                  74.213.208.0/20
                  96.126.0.0/18
                  108.167.192.0/18
                  142.11.0.0/18
                  173.254.128.0-173.254.175.255
                  184.95.64.0/18
                  192.173.192.0/18
                  198.190.64.0/18
                  199.115.224.0/22
                  206.40.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:86:ec:58:c1:81:57:8f:3d:97:2c:31:ba:62:5b:5e:14:e6:
         85:1c:2f:06:ae:5c:a9:fe:e1:03:c4:ee:b2:eb:42:b9:54:a7:
         4a:cb:1a:ac:71:3b:34:a6:04:99:9e:c6:37:15:c3:55:07:0d:
         17:14:dd:2f:72:e7:bd:bd:8e:0e:55:58:96:b8:b5:da:96:bf:
         2b:9e:ed:9e:2e:90:f3:92:e4:d1:1c:f0:85:54:c1:60:c8:3f:
         16:33:1f:27:ca:e6:90:03:7e:f9:38:3c:aa:34:88:8f:ce:37:
         d0:16:bf:ee:97:6b:00:45:b7:5a:da:8d:c4:6a:fb:00:bd:9e:
         11:14:d8:34:c3:36:12:52:65:c0:5f:66:07:da:69:e6:c8:38:
         9d:78:a4:5f:19:14:60:65:1f:04:08:b2:84:91:8b:b0:5d:73:
         69:68:ef:1e:a6:ab:45:b4:e8:6e:05:79:0e:94:0c:4d:6a:3d:
         08:07:1e:58:8e:b0:75:93:6e:f1:57:ea:c8:8b:a7:20:9f:d8:
         a2:96:8c:dc:7e:10:76:9b:ee:c2:2f:54:c2:d9:9d:3f:6b:83:
         6f:b0:3b:35:ef:0b:2a:68:39:4f:51:dc:03:21:d3:f6:9d:a7:
         d6:42:df:04:86:8c:0e:0f:c8:e0:1d:4c:bc:ba:4c:9f:dd:74:
         b3:6a:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:34 2026 by rpki-client