Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa
File:                     cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa (raw, json)
Hash identifier:          pQZovvEtmDevgQhTOSAUWM4LkNzKupfFsQGUBr1g7pM=
Subject key identifier:   9F:F3:AF:58:5E:62:9E:1A:5A:87:05:5A:CE:7C:C8:7A:58:AA:83:35
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584CD13C9FB7EF90BBF052E3B480
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     395092
IP address blocks:        146.71.80.0/22 maxlen: 24
                          199.87.210.0/23 maxlen: 24
                          208.123.118.0/23 maxlen: 24
                          2607:a680:1::/48 maxlen: 48
                          2607:a680:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:9f:b7:ef:90:bb:f0:52:e3:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=60bbf01d-c475-4c40-b88a-e2e14c536544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:1a:dd:e2:cb:07:b3:5d:c4:c7:21:74:19:
                    f3:bf:f7:e9:9b:cf:9a:96:d5:67:ff:4b:5e:30:d1:
                    07:64:64:b2:f6:73:fc:c9:47:f7:97:90:2f:b4:28:
                    67:64:6d:76:ca:b3:26:fb:4b:69:38:63:20:43:5e:
                    3c:bf:0e:63:fa:5c:e2:a9:7c:30:99:77:b4:ab:68:
                    0f:b3:14:73:16:1d:65:72:41:ea:fc:39:58:ed:e9:
                    2e:e6:e5:01:61:c6:88:1a:c7:d3:9f:b1:7d:8a:b3:
                    b0:04:87:0f:d2:32:d9:d9:f6:ae:d7:3d:eb:0f:e6:
                    9f:08:28:ae:c0:c4:32:a0:ac:ef:9b:d7:66:bc:8e:
                    5a:11:b2:09:68:98:67:f7:45:0f:7a:73:16:20:89:
                    0f:05:65:42:18:0e:c1:dd:0d:a6:ea:a0:1c:1c:fe:
                    6f:a2:6f:96:2e:5d:76:a6:7d:70:45:76:bb:d9:b4:
                    b6:b5:3a:06:8b:42:a1:43:b0:a7:be:3b:61:6c:ff:
                    fe:f0:74:e3:70:8f:d0:21:6c:6e:3e:7b:b6:eb:33:
                    11:53:43:63:93:fa:4b:26:0b:a3:ed:c5:02:66:0e:
                    1f:2f:42:50:bd:ba:1f:b1:2f:e0:ed:0f:ae:09:3d:
                    2a:d4:67:43:2b:7c:f3:4c:3e:05:74:40:53:64:73:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F3:AF:58:5E:62:9E:1A:5A:87:05:5A:CE:7C:C8:7A:58:AA:83:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.71.80.0/22
                  199.87.210.0/23
                  208.123.118.0/23
                IPv6:
                  2607:a680:1::/48
                  2607:a680:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:4c:d1:60:4a:7c:ff:cf:52:df:a0:8e:89:24:40:3e:11:29:
         ba:72:25:60:a0:66:c4:75:89:a5:a2:c6:d6:7d:66:b9:f5:6c:
         22:f8:48:20:98:35:92:9c:31:bb:d6:a7:e3:9a:fa:05:cf:95:
         0b:53:f4:f3:4f:41:19:ad:df:14:fc:1d:11:99:d0:ca:fc:85:
         76:24:f2:e1:c0:1c:ec:87:7c:ab:c7:d5:32:dc:08:ba:e3:4a:
         4a:e2:85:77:a8:a5:73:2b:68:97:36:08:84:11:74:62:2f:21:
         4f:bf:0a:67:8a:e3:c1:ed:e0:04:85:9f:5f:40:3c:91:cd:fe:
         1c:c0:fa:32:9f:b2:62:56:c3:69:35:4c:18:87:34:d7:91:44:
         78:57:5d:d8:bd:73:84:6e:13:9d:b4:82:d7:36:52:15:64:82:
         25:9b:bf:07:1c:51:8f:ea:d5:5e:2c:c8:d5:b8:f9:61:b0:c7:
         6a:a5:4c:76:b2:13:2a:8c:6f:d1:36:14:8c:25:b6:e1:f6:4f:
         bb:31:c2:8a:e4:98:95:84:9e:18:24:3e:1c:8b:e5:84:46:e2:
         9a:11:21:e1:7c:71:a7:78:55:3f:a0:ce:be:72:6d:5a:4b:ac:
         86:b8:2a:2f:26:00:de:f7:17:7f:25:36:77:ac:74:b1:9c:fd:
         9f:a5:28:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:09:59 2026 by rpki-client