Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0b6b2417-de41-3a69-95ce-f319cfe357d8.roa
File:                     0b6b2417-de41-3a69-95ce-f319cfe357d8.roa (raw, json)
Hash identifier:          ujbHM40OCGn/WK4i0oZf6ASrGqvMb1L5e3p+HA4i09Q=
Subject key identifier:   E2:FB:D1:6D:22:AE:1E:57:0F:CE:6B:90:54:51:91:77:BF:35:A1:DD
Certificate issuer:       /CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3
Certificate serial:       010D0C9F4328584D07372F779A9587B963F7C580
Authority key identifier: B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0b6b2417-de41-3a69-95ce-f319cfe357d8.roa
Signing time:             Sat 03 Jan 2026 16:54:46 +0000
ROA not before:           Sat 03 Jan 2026 16:54:46 +0000
ROA not after:            Fri 03 Apr 2026 15:54:46 +0000
asID:                     30277
IP address blocks:        67.222.128.0/19 maxlen: 24
                          72.9.144.0/20 maxlen: 21
                          199.26.84.0/22 maxlen: 22
                          209.236.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:37:2f:77:9a:95:87:b9:63:f7:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3
        Validity
            Not Before: Jan  3 16:54:46 2026 GMT
            Not After : Apr  3 15:54:46 2026 GMT
        Subject: CN=e704c578-1be8-45fe-a74c-32b8e80d21f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ce:00:2e:29:89:b6:f8:f8:f5:a5:20:c7:25:
                    dc:f3:86:c8:dc:64:7f:b2:12:80:96:f6:de:ea:0e:
                    91:b1:85:5a:94:2d:e3:0f:83:11:4d:44:64:c4:e0:
                    cc:3c:f8:e0:fe:67:68:8b:f2:3d:44:96:d7:e0:07:
                    d4:bb:71:7e:f3:55:56:c1:5a:6c:7a:6e:21:70:83:
                    aa:41:7b:61:e2:0d:20:a0:05:bd:10:2c:25:d1:bf:
                    b6:0d:69:b5:58:d8:7f:d8:d0:b7:0c:19:6c:9b:03:
                    68:5b:ed:dd:3f:f1:0f:02:8a:89:15:0e:e0:d7:9a:
                    dd:f1:22:40:03:4a:b4:3c:95:40:fc:73:da:99:5f:
                    d2:66:13:b3:39:6d:6e:ce:a4:28:b5:05:48:9a:4b:
                    83:da:5a:1f:62:60:dc:87:dc:9f:ca:7d:86:3c:d5:
                    c3:1f:0a:f1:18:8a:1b:cc:8d:55:e3:7b:9c:53:3c:
                    bc:3e:3c:c4:c4:4a:7e:54:93:64:b8:65:2b:21:2d:
                    af:fb:1f:0d:47:e4:91:7e:b1:c7:24:67:2f:8f:c7:
                    61:0a:25:fb:01:30:2c:e6:ea:66:55:ae:bb:38:8c:
                    45:be:8c:d2:16:2e:00:e3:dd:ad:b5:37:40:8d:9b:
                    9e:78:e4:d5:d7:57:87:71:58:d1:0c:a4:a9:6a:fa:
                    cf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FB:D1:6D:22:AE:1E:57:0F:CE:6B:90:54:51:91:77:BF:35:A1:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0b6b2417-de41-3a69-95ce-f319cfe357d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl

            X509v3 Authority Key Identifier:
                keyid:B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.222.128.0/19
                  72.9.144.0/20
                  199.26.84.0/22
                  209.236.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:07:f3:aa:6b:dd:c5:6c:84:5c:73:8b:4b:0a:d2:2d:26:b6:
         9e:7e:c9:8b:23:de:ba:5f:7d:36:7f:b7:f2:d1:87:37:84:42:
         75:5a:d4:d9:22:05:a2:d2:9b:78:54:2a:78:fd:c2:c3:39:d9:
         91:51:81:71:e7:88:91:f6:7a:69:e3:9e:04:41:44:05:f5:68:
         d6:d9:cc:a6:9e:2b:49:c7:08:70:5c:93:05:9a:a6:51:0e:cc:
         b0:e6:81:6a:1e:bc:62:43:d0:06:2b:f0:06:97:c4:32:3c:c2:
         18:63:29:f2:c1:4f:b2:a8:08:a4:58:f1:94:cd:70:24:71:0b:
         b6:39:84:c4:de:65:83:92:09:b3:51:10:2c:a7:04:f8:bd:4a:
         5a:e0:8b:7b:2e:30:3b:e3:30:77:8b:23:36:4a:0f:ae:c6:37:
         98:88:d2:29:92:de:9a:ad:20:0b:60:85:b0:39:29:08:93:0e:
         34:c3:4b:13:18:72:bc:43:3f:f0:e6:9b:1e:8e:96:c1:15:70:
         26:ce:a8:fe:b4:6e:41:3d:73:d7:ac:6f:1b:62:01:8f:d8:7a:
         dd:3e:23:45:cf:c5:d3:30:b9:84:07:17:d7:ad:f4:a3:35:eb:
         7a:f1:7b:d7:ec:54:f2:b4:d7:b6:fa:17:d1:ce:1c:ed:ca:46:
         91:03:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:20:52 2026 by rpki-client