Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa
File:                     b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa (raw, json)
Hash identifier:          k8kD4FbImMHN2AHDApy+igLf5sJxrqTMSXKVIhEI63U=
Subject key identifier:   D0:9C:10:9F:C7:47:81:7C:A9:20:71:27:F2:DB:57:88:BF:4C:28:D0
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584D67DFF8AA41B07C3A5423ED80
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     20055
IP address blocks:        63.140.16.0/20 maxlen: 20
                          74.82.224.0/19 maxlen: 19
                          172.86.128.0/20 maxlen: 20
                          198.71.28.0/22 maxlen: 22
                          208.84.220.0/22 maxlen: 22
                          208.90.160.0/21 maxlen: 21
                          2604:4e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f8:aa:41:b0:7c:3a:54:23:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=80b96ba0-6759-412f-b577-7597848f15bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:22:b7:5d:7e:cb:67:a0:93:03:89:a0:8e:ac:
                    59:17:e7:d8:51:7d:d8:84:39:df:30:4b:4f:6d:d8:
                    74:9e:00:fa:7d:de:e1:20:1a:5c:ba:f0:c3:93:31:
                    08:38:65:e1:ac:7b:84:ac:4d:69:3d:78:ca:87:67:
                    21:38:0d:d3:8f:b1:5d:26:e7:d1:a4:12:f3:c5:26:
                    64:01:57:76:c8:1b:5f:dd:96:de:7f:8b:34:03:84:
                    ce:9d:b6:b8:2e:8c:00:78:85:a3:19:a3:2d:80:88:
                    8c:91:31:64:dd:3d:8b:8a:cb:04:fa:1f:43:4e:bf:
                    ff:0c:aa:39:35:aa:70:ff:d8:b4:2c:c6:ba:65:2d:
                    68:5f:ba:d3:dc:6e:4c:67:fd:2f:e3:b8:2e:c6:47:
                    3e:ec:71:6d:dc:33:f3:56:77:0e:74:78:02:c4:e4:
                    d7:2d:af:88:af:3c:49:d9:44:ee:4f:65:73:7d:e2:
                    1d:23:59:7f:47:82:db:91:32:fd:e2:08:d7:23:36:
                    46:8e:69:2e:84:b9:68:ef:a3:ec:31:98:8a:09:69:
                    b0:64:cd:f4:a8:c4:47:18:61:46:37:a5:c9:ca:56:
                    c4:10:e5:6f:bf:8b:4d:06:d2:08:1d:69:26:79:2f:
                    7f:0b:90:49:84:ae:27:5c:49:7b:2e:3f:38:5f:92:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9C:10:9F:C7:47:81:7C:A9:20:71:27:F2:DB:57:88:BF:4C:28:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.16.0/20
                  74.82.224.0/19
                  172.86.128.0/20
                  198.71.28.0/22
                  208.84.220.0/22
                  208.90.160.0/21
                IPv6:
                  2604:4e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:a0:f9:0d:0e:25:16:02:2b:72:86:c7:23:ee:45:3a:02:69:
         e2:bd:35:66:72:09:5e:9b:b1:23:4e:d4:de:56:ca:e7:c4:86:
         63:67:92:ed:6b:a2:b6:b2:be:3b:a8:e8:a2:7b:07:58:51:b5:
         e0:20:bb:78:a2:eb:ec:8b:6b:3f:f7:b4:5d:87:5e:72:fd:2f:
         4f:a5:01:0e:81:bb:0d:64:57:3f:7d:e7:fc:f9:68:1f:af:24:
         68:3d:d0:55:2f:9e:23:95:f8:9a:22:9d:fd:39:83:73:ab:49:
         25:74:56:31:24:87:9e:8a:11:07:0f:e0:69:fe:90:f2:d8:aa:
         21:2e:79:b3:2a:8e:a0:06:b7:69:06:89:c2:98:50:43:36:04:
         94:7e:84:f2:6f:9b:be:3b:04:05:66:3e:68:7c:f9:76:fb:2d:
         67:5f:4e:6b:c3:1a:50:64:8b:38:1e:5c:9c:5b:4a:7a:a5:33:
         6a:92:ce:db:e9:48:72:0c:0d:c5:8e:58:11:f4:28:c6:3c:51:
         8a:0f:38:75:bf:16:72:2b:7e:31:1a:e1:23:af:b6:c7:7b:da:
         e6:71:da:9e:b1:fe:df:d7:5c:1c:b0:34:a1:32:de:1f:50:66:
         5d:2a:29:63:fb:ee:69:5e:56:f9:47:cb:98:8d:95:2b:51:ce:
         e8:f8:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:52:09 2026 by rpki-client