Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
File:                     4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa (raw, json)
Hash identifier:          MGNt7Z/jQwWM4RKCnL7wjhhuTcLM97PvQMkpewqMcMo=
Subject key identifier:   E5:67:39:F4:35:42:61:D1:F4:76:A5:D0:45:F8:CF:F9:3E:87:0A:22
Certificate issuer:       /CN=255d6559-2c60-49ac-b136-415b4469af78
Certificate serial:       010D0C9F4328584D5234F85B29FEEAE95A892A60
Authority key identifier: 58:8D:97:13:12:EB:A8:FC:6C:82:19:E1:04:61:7F:36:49:06:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
Signing time:             Sat 28 Mar 2026 18:44:35 +0000
ROA not before:           Sat 28 Mar 2026 18:44:35 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     20300
IP address blocks:        136.143.204.0/22 maxlen: 24
                          147.185.144.0/22 maxlen: 24
                          162.142.96.0/22 maxlen: 24
                          192.65.4.0/22 maxlen: 24
                          192.152.214.0/24 maxlen: 24
                          207.66.124.0/22 maxlen: 24
                          208.83.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/255d6559-2c60-49ac-b136-415b4469af78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/255d6559-2c60-49ac-b136-415b4469af78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:f8:5b:29:fe:ea:e9:5a:89:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255d6559-2c60-49ac-b136-415b4469af78
        Validity
            Not Before: Mar 28 18:44:35 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=716a9136-78f7-4253-9299-5f0c083c12c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:23:db:e7:e7:d6:67:7e:9a:a9:ef:e4:48:
                    cf:4e:e7:1d:c3:68:12:5c:8e:2b:3e:6b:df:60:89:
                    0e:90:ec:ec:b4:f1:5d:ae:31:6d:22:2b:da:75:1d:
                    58:b0:4c:55:2c:b6:0c:f7:cd:63:27:fe:da:1f:3f:
                    f2:0d:4c:3a:55:3f:7a:d0:4e:18:a5:d1:0e:d3:3c:
                    0f:7d:83:59:07:f7:72:fb:87:71:ba:78:14:61:8e:
                    90:ee:98:e9:dc:a7:9b:b5:33:88:3a:f3:18:fc:07:
                    d0:06:54:83:06:9f:99:cb:86:11:ff:ae:d8:4c:3b:
                    3b:be:f9:46:b6:e9:45:20:38:b6:6a:c4:cc:7e:fe:
                    d1:65:79:38:f5:67:20:85:6a:bd:1c:09:94:f0:e0:
                    47:09:6c:63:9b:7b:c2:1d:b8:b9:50:21:5f:03:91:
                    dd:13:9a:a1:e3:a2:7f:14:9f:26:56:63:9b:83:2c:
                    d5:da:7f:3b:d2:03:b2:51:b0:42:37:9b:6c:86:4f:
                    ea:9f:51:bf:14:38:8f:91:5d:3a:c1:65:ab:91:12:
                    f5:4e:29:f4:e2:36:db:da:a1:eb:30:ff:99:0d:83:
                    2f:ed:fe:56:f7:c3:70:3c:80:df:c1:86:10:aa:73:
                    16:4f:8d:ee:8a:40:0a:6a:93:85:ed:4b:4c:a0:a8:
                    59:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:67:39:F4:35:42:61:D1:F4:76:A5:D0:45:F8:CF:F9:3E:87:0A:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/255d6559-2c60-49ac-b136-415b4469af78.crl

            X509v3 Authority Key Identifier:
                keyid:58:8D:97:13:12:EB:A8:FC:6C:82:19:E1:04:61:7F:36:49:06:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.204.0/22
                  147.185.144.0/22
                  162.142.96.0/22
                  192.65.4.0/22
                  192.152.214.0/24
                  207.66.124.0/22
                  208.83.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:19:1e:ee:64:0f:0d:31:72:1d:63:14:ef:2e:c4:4d:4e:55:
         6f:0d:dd:19:32:c4:19:c7:08:39:b1:72:b6:86:b6:ec:85:db:
         25:ef:0f:82:ab:41:b4:b0:72:45:34:9d:5d:31:ef:f1:50:77:
         43:df:e0:7e:20:28:48:17:d0:d7:de:a7:1d:6e:80:1b:2b:ec:
         4b:79:b0:05:9a:3b:61:b0:8a:a5:a9:7b:03:1a:e5:eb:1d:8c:
         a5:d8:00:59:1c:34:0d:85:d6:12:c0:4b:e3:0d:bc:fa:c2:e4:
         44:bf:bf:34:6d:71:6d:3a:5b:3d:2d:a5:ed:7c:1f:80:1a:d6:
         7a:36:1b:39:14:49:08:ae:38:08:db:b6:a6:17:f4:f3:83:80:
         d6:61:fa:c2:99:9c:91:f1:1e:57:de:fd:4d:34:e8:2a:f2:69:
         64:60:5b:d0:ef:fb:a5:87:2c:e9:28:18:e6:f6:cc:8c:e7:30:
         1b:62:e0:3d:93:23:d4:43:70:e5:8a:4b:12:da:5d:ce:e1:00:
         59:ea:37:82:47:74:53:e1:07:5f:c7:f2:97:0d:d6:cb:a5:ce:
         31:e0:e1:d5:ea:27:87:00:a2:cf:b8:f6:28:e1:95:8d:ed:a4:
         a7:cc:d7:ad:ba:a4:b6:5b:fe:26:6c:31:90:cd:28:7d:9e:06:
         de:ab:8a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:25:52 2026 by rpki-client