Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/3f66c13d-3ba9-3582-bd32-b5893c0dbdf9.roa
File:                     3f66c13d-3ba9-3582-bd32-b5893c0dbdf9.roa (raw, json)
Hash identifier:          /kRc4tcO/TJx3oGzUYKNN3YxH2PtJIuPs+G9RwyzefU=
Subject key identifier:   6A:4F:91:8E:46:F0:DE:C7:EC:4B:07:B4:24:9D:99:48:15:16:91:9C
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584D67DFFAE73EB8AA5C6003F040
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/3f66c13d-3ba9-3582-bd32-b5893c0dbdf9.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13370
IP address blocks:        63.135.48.0/20 maxlen: 20
                          63.142.208.0/20 maxlen: 20
                          65.49.136.0/21 maxlen: 21
                          66.172.96.0/19 maxlen: 19
                          74.116.180.0/22 maxlen: 22
                          96.46.16.0/20 maxlen: 20
                          104.193.236.0/22 maxlen: 22
                          136.143.144.0/20 maxlen: 20
                          140.106.224.0/20 maxlen: 20
                          141.164.112.0/20 maxlen: 20
                          162.118.0.0/20 maxlen: 20
                          166.113.32.0/19 maxlen: 19
                          173.209.160.0/20 maxlen: 20
                          199.36.88.0/21 maxlen: 21
                          199.114.208.0/22 maxlen: 22
                          199.181.247.0/24 maxlen: 24
                          199.204.200.0/21 maxlen: 21
                          199.244.28.0/22 maxlen: 22
                          206.130.128.0/20 maxlen: 20
                          2604:e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:fa:e7:3e:b8:aa:5c:60:03:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=f416e312-f7ff-448b-8e29-753bcaabfcf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:de:20:eb:60:5b:cd:f1:cc:a1:f2:2d:a3:d8:
                    9d:7c:cc:fd:3e:03:51:19:df:30:a4:78:27:5c:db:
                    a4:d1:80:61:10:81:ff:21:5e:69:3b:2f:b1:15:65:
                    8e:2b:ab:c3:ed:ec:c5:50:2d:6b:1c:b5:17:ba:74:
                    3e:e4:e5:ea:c7:fc:23:5d:af:17:8c:30:ea:0d:20:
                    cd:b7:6b:f4:c1:bf:02:fa:f9:db:c5:8e:c3:ac:cb:
                    dd:8a:1b:bb:cd:4f:2d:47:3c:30:c2:44:f8:e2:bc:
                    96:c1:4a:fe:cd:58:ba:ae:e3:82:78:12:8a:ff:fa:
                    0d:d1:d5:bc:3e:0a:59:9d:7c:12:42:30:fd:d2:6f:
                    50:55:66:c5:b0:f1:d5:e3:41:35:76:44:80:ca:58:
                    95:ef:82:8c:4f:bc:12:89:c2:04:0d:4b:95:15:55:
                    4b:67:56:22:95:ad:f5:af:18:ae:76:45:a3:f1:25:
                    83:85:bd:fd:db:54:4c:f3:59:8d:56:70:ac:85:5d:
                    d4:dc:67:3e:d8:83:45:13:04:ba:90:00:a4:24:0d:
                    1d:4e:22:66:ac:00:75:04:57:51:58:25:0b:c6:de:
                    5c:72:3f:0e:6f:8f:8d:10:39:00:ce:c4:89:e6:f2:
                    0a:83:75:a9:6e:32:d7:9c:1d:4f:51:45:fb:99:f0:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4F:91:8E:46:F0:DE:C7:EC:4B:07:B4:24:9D:99:48:15:16:91:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/3f66c13d-3ba9-3582-bd32-b5893c0dbdf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.48.0/20
                  63.142.208.0/20
                  65.49.136.0/21
                  66.172.96.0/19
                  74.116.180.0/22
                  96.46.16.0/20
                  104.193.236.0/22
                  136.143.144.0/20
                  140.106.224.0/20
                  141.164.112.0/20
                  162.118.0.0/20
                  166.113.32.0/19
                  173.209.160.0/20
                  199.36.88.0/21
                  199.114.208.0/22
                  199.181.247.0/24
                  199.204.200.0/21
                  199.244.28.0/22
                  206.130.128.0/20
                IPv6:
                  2604:e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:19:62:db:75:6f:00:b5:ba:40:10:f9:aa:44:6b:d5:4a:5d:
         81:4d:69:f1:9d:22:3c:d3:b1:19:d9:fd:73:21:4c:4a:03:cb:
         eb:9d:e1:e2:cf:98:2d:34:e4:8c:3a:5c:01:1b:9f:e3:6c:fd:
         f6:a7:13:ee:73:e3:c7:f3:08:77:29:1a:5a:3b:75:d2:4d:d8:
         93:ef:43:09:7d:c6:c6:6b:43:11:ab:35:9c:ef:b4:6e:1e:4b:
         f4:6d:fc:72:46:bc:26:a8:98:8c:69:fa:4e:4a:f6:e7:c8:8d:
         14:72:cc:b6:e6:22:a2:77:d5:c6:ea:da:6c:f1:00:69:6d:3d:
         3f:57:fc:98:c1:93:b7:5f:eb:ce:d3:c7:5e:6a:b7:c7:1c:69:
         cf:35:e3:ad:1b:1c:b5:3c:fa:5c:88:dc:c0:d6:6e:ca:cd:47:
         45:32:87:74:e4:fc:05:0d:67:a6:2a:d8:91:f7:5b:f8:48:ac:
         53:68:ea:9a:0a:a3:55:4d:94:8f:bd:cd:8a:33:d5:41:6a:1a:
         37:82:02:c2:83:d9:91:27:aa:99:b7:95:cf:96:ae:e0:1e:f8:
         ba:b6:02:97:86:bc:6a:8d:39:c3:0f:ea:f4:3f:4f:f1:56:7e:
         d6:2a:e8:04:bf:b9:e7:5e:dd:9a:61:bf:99:35:af:d7:5e:eb:
         0c:cc:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:35:54 2026 by rpki-client