Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa
File:                     4c09f404-0682-3e12-a569-27fb667f5de3.roa (raw, json)
Hash identifier:          4dvaqDrEOGD+cTkMl8UIp4Hoo1kLK1h9pKmTOw3lf2I=
Subject key identifier:   4F:8B:EC:BB:8A:D6:FE:DB:BD:13:A0:EA:2E:47:14:F3:82:7B:C1:B6
Certificate issuer:       /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Certificate serial:       010D0C9F4328584D75D5263C10CC463831506A40
Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        52.144.58.0/24 maxlen: 24
                          168.245.151.0/24 maxlen: 24
                          192.139.134.0/24 maxlen: 24
                          199.19.89.0/24 maxlen: 24
                          199.19.90.0/24 maxlen: 24
                          199.19.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:26:3c:10:cc:46:38:31:50:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=e9034c05-feb3-4f06-8a4c-db3f2f113afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:ca:2b:25:16:66:90:f9:89:04:82:16:ea:
                    ea:53:f7:e4:96:ee:71:b7:54:a3:f8:22:71:6d:08:
                    72:95:03:4a:84:9c:d8:96:e7:39:b6:6e:cf:6a:3d:
                    b2:65:d4:e8:69:9e:08:92:aa:07:18:3f:e3:33:31:
                    cf:91:7f:da:76:b3:46:01:e8:6e:f0:ef:c5:a6:8b:
                    b3:5e:3b:ad:62:81:9d:f0:55:26:8f:83:80:23:1c:
                    be:1a:fc:be:5b:97:cd:1b:4b:13:46:a5:8d:94:45:
                    e3:99:ee:0a:a0:79:5a:36:00:66:5f:cb:db:e6:9c:
                    5f:51:a8:b0:74:8b:10:fd:5f:3e:2e:af:e8:61:19:
                    19:80:9e:91:f3:20:19:cf:4e:86:3d:b0:ad:f3:98:
                    95:6c:d4:49:12:cd:64:21:8b:cc:d9:eb:92:f3:03:
                    8e:4b:1e:36:7c:fc:8c:08:ca:3e:d1:04:00:b5:1e:
                    4b:75:8f:0f:87:1b:4e:1d:28:00:53:e3:4e:9a:ad:
                    d1:9c:96:08:1a:fd:5f:eb:8b:9e:83:88:1d:ff:d7:
                    5b:a9:29:d2:c0:f5:76:86:0b:01:31:5a:16:02:e6:
                    d1:db:46:cc:43:a4:6e:6c:d4:ab:f4:0f:b2:34:11:
                    9d:33:26:f4:47:16:2b:6c:4d:57:39:8a:37:6e:26:
                    f6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8B:EC:BB:8A:D6:FE:DB:BD:13:A0:EA:2E:47:14:F3:82:7B:C1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.58.0/24
                  168.245.151.0/24
                  192.139.134.0/24
                  199.19.89.0-199.19.91.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b4:b2:cd:28:62:ae:ae:4a:4a:65:13:0f:32:22:d8:48:52:
         4c:d2:30:24:6d:03:46:41:9b:e0:1e:f4:b2:3b:0b:18:cf:43:
         d2:ef:03:38:db:18:aa:e4:fd:5d:90:2a:bf:d9:36:9a:2c:d0:
         0f:54:18:df:23:e4:03:4c:3f:6c:b1:34:0c:5d:4f:90:e2:76:
         30:b9:f7:a0:6a:22:ab:e5:33:89:84:31:bf:e0:05:87:6b:48:
         55:ee:64:67:98:b9:45:1a:a2:c2:b5:2f:73:07:f5:35:2d:79:
         4f:9e:e0:98:e7:88:d4:cc:d0:8c:86:d5:45:93:89:2e:70:c8:
         92:3b:97:c3:a2:7d:2d:49:c7:90:b1:61:67:19:d5:61:6d:46:
         c0:25:c1:70:c4:2f:d1:d6:a3:81:45:e6:ca:82:54:2b:7c:ed:
         1e:da:5f:62:fe:36:f5:17:6f:ed:f7:6e:ba:36:50:70:d8:65:
         49:06:bc:3d:bf:4b:18:0d:f9:a0:e5:ee:d0:5d:fe:da:97:a8:
         76:a5:e8:e5:5d:93:20:f9:a1:ad:a6:bd:8c:87:18:84:ab:72:
         db:d0:6d:31:18:f8:40:89:fd:49:4e:82:8f:fb:3f:33:77:be:
         e5:77:d9:f4:f9:1d:52:dc:7b:06:bb:f7:2e:9f:43:45:2d:e4:
         08:62:02:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:12 2026 by rpki-client