Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa
File:                     033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa (raw, json)
Hash identifier:          9/BUunPHpIvfnHprVU4HKDFT8SPIDMDYQ7jBknv96SQ=
Subject key identifier:   3B:8B:90:12:34:9B:33:F1:82:FD:24:34:1C:4E:C5:33:E8:96:0D:79
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584D55BA3A9E670C66752CA1B600
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     20055
IP address blocks:        64.52.6.0/24 maxlen: 24
                          64.52.96.0/22 maxlen: 22
                          66.35.0.0/20 maxlen: 20
                          69.55.208.0/20 maxlen: 20
                          72.21.10.0/23 maxlen: 23
                          107.191.236.0/22 maxlen: 22
                          137.83.56.0/24 maxlen: 24
                          137.83.80.0/23 maxlen: 23
                          162.33.232.0/21 maxlen: 21
                          162.43.200.0/21 maxlen: 21
                          192.75.144.0/24 maxlen: 24
                          192.152.0.0/24 maxlen: 24
                          198.179.52.0/22 maxlen: 22
                          204.194.220.0/23 maxlen: 23
                          205.174.152.0/22 maxlen: 22
                          206.166.252.0/23 maxlen: 23
                          207.32.192.0/20 maxlen: 20
                          208.52.160.0/24 maxlen: 24
                          208.52.175.0/24 maxlen: 24
                          209.237.136.0/22 maxlen: 22
                          2001:506:38::/48 maxlen: 48
                          2001:506:39::/48 maxlen: 48
                          2605:21c0::/32 maxlen: 32
                          2607:f688::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:3a:9e:67:0c:66:75:2c:a1:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=b1ba734e-4696-41bd-8cc4-f59a3a74a5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:ea:8d:55:35:a3:e3:df:9f:5f:0f:01:89:
                    e0:f2:66:f5:bb:25:93:1d:8e:64:71:44:f7:d3:b5:
                    da:86:7e:5e:14:9f:22:ce:b5:6f:38:76:bf:27:fd:
                    07:46:15:d7:51:c3:51:b1:b1:f1:3f:7d:c2:7f:ea:
                    0d:c5:8d:82:98:73:84:22:b4:ca:96:03:bb:12:40:
                    2c:87:17:e4:17:9d:ef:8f:90:d4:20:d4:a6:12:50:
                    d7:ba:6b:4c:51:b4:f8:1d:e8:3c:62:41:f4:e6:0c:
                    1d:da:83:c3:2b:cd:eb:f3:2a:6e:8e:db:b0:82:38:
                    c5:8f:d8:22:d0:5b:2d:c4:a0:24:e7:f7:6a:64:75:
                    68:ff:f5:f9:5c:0f:6a:a6:e2:77:d0:07:7b:77:46:
                    d7:db:c1:56:9e:28:24:9e:12:5c:84:37:90:3b:1c:
                    e7:40:05:ac:e7:fa:c3:e7:ba:c0:9b:9f:c2:46:94:
                    a0:0f:01:8c:9a:2a:a7:87:df:31:a7:54:4b:8a:e8:
                    19:0d:e3:36:f2:5e:b7:de:40:a6:80:12:32:db:9c:
                    48:a8:14:aa:f5:b0:7c:81:ea:ed:36:24:b5:9c:20:
                    88:46:3e:15:b1:ba:3d:02:85:ab:a2:53:d2:cc:04:
                    e3:49:eb:73:31:55:84:eb:9d:63:2f:28:72:15:7c:
                    2a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8B:90:12:34:9B:33:F1:82:FD:24:34:1C:4E:C5:33:E8:96:0D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.6.0/24
                  64.52.96.0/22
                  66.35.0.0/20
                  69.55.208.0/20
                  72.21.10.0/23
                  107.191.236.0/22
                  137.83.56.0/24
                  137.83.80.0/23
                  162.33.232.0/21
                  162.43.200.0/21
                  192.75.144.0/24
                  192.152.0.0/24
                  198.179.52.0/22
                  204.194.220.0/23
                  205.174.152.0/22
                  206.166.252.0/23
                  207.32.192.0/20
                  208.52.160.0/24
                  208.52.175.0/24
                  209.237.136.0/22
                IPv6:
                  2001:506:38::/47
                  2605:21c0::/32
                  2607:f688::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:95:94:68:08:5d:dc:e4:9b:7d:e0:b5:37:0b:e1:34:d8:19:
         77:06:43:9f:03:d2:00:75:64:86:67:90:10:b2:f4:6e:de:12:
         16:1c:ca:10:a3:d7:40:25:77:17:39:c3:fb:a3:05:00:20:39:
         9a:72:bf:55:f3:bc:a1:a5:81:0c:8b:2b:b4:65:f6:40:42:62:
         ad:ec:d5:23:fe:16:e2:29:63:40:4b:22:eb:82:17:5b:6a:dd:
         54:ca:42:84:46:c0:40:8f:f0:40:f1:8d:3b:d8:eb:91:48:c6:
         6e:91:83:ab:9e:2d:e3:16:61:be:ef:7f:b2:8c:77:e7:de:de:
         ba:0c:1f:26:c4:13:5a:cb:a3:36:42:a2:cc:b2:9a:6d:42:9c:
         75:6c:3a:25:38:75:55:34:2f:c1:61:3a:3a:f1:e9:4e:d7:45:
         e6:d4:79:6e:71:94:ec:85:69:27:8e:7a:24:26:32:65:43:4f:
         bd:50:d4:a1:73:40:7c:ba:db:c3:9a:07:9c:f7:46:ce:ba:8d:
         87:9f:fe:e2:17:44:94:29:20:3d:a6:aa:0d:28:48:0e:f7:f4:
         83:8d:c9:ed:b7:fb:1b:02:53:4b:46:b1:c7:8a:24:e7:dd:8d:
         0e:19:15:33:9c:9f:4d:17:1b:29:31:25:a4:29:c1:fc:9b:16:
         76:f7:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:42 2026 by rpki-client