Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
File:                     4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa (raw, json)
Hash identifier:          z1V8juTX1WO8E+i6e+YpAymO3+r40lC6S9Lp6EtRlgM=
Subject key identifier:   27:DA:DF:2B:FD:33:44:02:86:45:EB:89:86:4D:E3:4D:A4:38:76:5B
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584CD13CA816DE4DAC9180C9E180
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     395092
IP address blocks:        64.28.236.0/23 maxlen: 24
                          172.96.136.0/22 maxlen: 24
                          2607:a680:3::/48 maxlen: 48
                          2607:a680:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:a8:16:de:4d:ac:91:80:c9:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=a057c0b1-a3dd-4a92-9fda-60d8576dff8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:82:7d:d7:d4:25:ca:ff:37:47:05:2e:30:
                    1d:96:c4:3c:37:4e:86:ca:91:36:c7:f2:75:7a:8c:
                    e4:92:1e:93:56:c2:e5:5c:6e:8d:c4:a9:f9:9a:05:
                    c1:59:90:39:68:84:bb:10:78:ad:01:d8:97:82:88:
                    a0:c6:84:89:c7:15:48:f2:82:ac:b8:0c:e9:08:25:
                    28:8a:18:d6:2b:9c:e8:69:a6:93:73:f3:81:71:2e:
                    ec:f8:30:d8:80:f0:45:05:53:5b:52:5f:f8:b1:f3:
                    af:58:2f:e5:0a:c8:ce:78:1a:59:48:5f:cb:a2:5b:
                    84:ae:9e:52:b4:59:36:04:c7:7b:79:34:25:5e:8c:
                    3e:73:e5:4d:eb:dd:ff:2e:5e:52:2f:31:60:4c:9a:
                    12:df:af:97:9a:08:b3:c9:6b:f2:90:46:32:0e:9d:
                    d1:2f:7f:5d:75:f2:0d:cf:5e:4a:3d:36:06:1e:af:
                    81:e8:c4:91:d0:b6:b8:32:bd:a6:ba:21:56:27:0d:
                    59:34:98:f1:be:b0:62:07:6c:0b:28:22:d7:93:3f:
                    a2:dc:c7:4f:e2:24:d7:4c:79:4f:94:73:55:cb:a1:
                    e7:2c:25:08:4e:d9:fb:cf:84:7f:77:5e:29:1b:4d:
                    94:69:cc:54:88:9a:01:5d:80:3b:e9:65:10:b2:5d:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DA:DF:2B:FD:33:44:02:86:45:EB:89:86:4D:E3:4D:A4:38:76:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.236.0/23
                  172.96.136.0/22
                IPv6:
                  2607:a680:3::/48
                  2607:a680:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c9:f7:e2:b1:8b:ab:00:b4:77:1d:7f:19:8f:aa:0c:16:ee:
         2b:5d:28:7d:9b:ff:e5:06:2f:7f:94:e2:43:38:de:0d:ac:c2:
         5a:93:a1:5b:5c:56:54:21:15:5c:3f:9f:6b:a5:88:ee:d5:f6:
         44:e8:dd:ed:95:21:4a:b1:e0:c0:00:37:97:19:6f:43:83:a3:
         8d:f4:6c:77:0f:f9:e7:34:3d:9e:3a:9a:2e:88:83:ee:dc:58:
         df:89:30:c6:7e:cd:c0:af:6d:1b:c9:00:f3:43:b9:1a:c3:a5:
         d1:2e:57:fd:32:fb:97:32:79:62:ac:7a:b4:04:38:48:7a:c9:
         66:57:e5:25:d9:18:0a:f3:8c:e4:d4:a1:87:53:a9:32:69:ef:
         0a:8f:b9:90:6a:39:f6:a2:b4:61:56:39:cd:d7:e6:21:de:0d:
         17:be:e4:a8:8e:2f:a0:25:99:56:ac:27:92:2d:1b:ee:e8:92:
         50:59:c1:88:d3:31:00:60:62:af:b0:f8:b5:78:74:8f:45:f6:
         26:82:5b:16:39:ba:14:8a:ac:2d:e0:d9:a9:81:e9:aa:6e:86:
         80:e1:97:86:af:bb:30:f2:67:7a:31:8f:12:14:cb:dc:e3:94:
         7d:d2:21:db:79:d0:d6:e6:b5:8e:a6:2c:53:d3:dd:e8:89:fe:
         19:a3:2c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:40 2026 by rpki-client