Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
File:                     274940e5-0730-372f-bdea-bc5ac690921e.roa (raw, json)
Hash identifier:          xGhjyuM815sZcL91KWEk5hMKGjlqfwv9XpVHGdgUZlE=
Subject key identifier:   DA:E0:47:6C:CE:2B:0C:45:30:DC:81:F6:95:9A:22:2C:83:37:C1:33
Certificate issuer:       /CN=324a8cbd-4953-435c-bace-07af1279e9bc
Certificate serial:       010D0C9F4328584CC77748EC8B46745B90CBA2C0
Authority key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     398025
IP address blocks:        67.219.0.0/20 maxlen: 20
                          69.1.224.0/19 maxlen: 19
                          161.82.64.0/18 maxlen: 18
                          170.103.64.0/18 maxlen: 18
                          204.63.0.0/20 maxlen: 20
                          207.29.224.0/19 maxlen: 19
                          208.100.192.0/18 maxlen: 18
                          216.128.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:48:ec:8b:46:74:5b:90:cb:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324a8cbd-4953-435c-bace-07af1279e9bc
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=c8dee753-fd45-4217-9dff-bbffb8faed85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:fe:d8:dd:c6:88:9d:7d:c8:cc:2a:ad:3f:
                    8e:e5:46:f0:41:fc:d2:c5:f3:df:82:d3:e6:36:49:
                    0c:dd:a2:8d:97:9b:b2:3a:1d:bd:24:2f:aa:ea:0f:
                    7e:da:c9:c5:df:5d:dd:84:26:c6:13:93:2c:68:d6:
                    a7:de:8a:b8:f5:52:87:88:01:dd:96:03:d1:7f:3a:
                    36:bc:af:d4:a8:e7:b4:c7:fc:26:db:ab:26:3c:4c:
                    ce:e9:a7:ec:d7:ae:f4:9c:59:44:ed:20:85:54:34:
                    7b:99:ac:b5:09:07:88:30:af:85:82:3f:bb:f9:99:
                    37:17:59:18:d2:31:a9:f7:a5:33:5a:e4:ee:fd:5f:
                    96:d2:08:4b:2e:3c:d0:22:12:05:bb:f3:80:f2:73:
                    a6:3d:70:0d:a7:4a:7f:b8:48:08:df:ef:78:b2:80:
                    e7:44:42:73:f3:64:70:af:b7:83:4f:30:a2:2b:27:
                    b1:99:86:d6:da:7e:1b:a5:c6:48:9b:43:7f:30:b6:
                    97:42:e4:7b:f2:52:7f:03:a8:09:21:c7:24:92:78:
                    4a:1d:42:d6:c0:31:23:59:8d:76:ee:ca:d8:8c:2d:
                    26:26:09:34:9f:65:ca:87:76:1e:18:e8:40:69:c5:
                    7c:93:8e:05:56:e3:2a:33:56:f5:82:7e:85:d8:8b:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E0:47:6C:CE:2B:0C:45:30:DC:81:F6:95:9A:22:2C:83:37:C1:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl

            X509v3 Authority Key Identifier:
                keyid:B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.0.0/20
                  69.1.224.0/19
                  161.82.64.0/18
                  170.103.64.0/18
                  204.63.0.0/20
                  207.29.224.0/19
                  208.100.192.0/18
                  216.128.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ab:48:f1:d4:5f:24:ba:ce:ed:15:34:7d:19:26:7c:4a:0d:
         63:82:2c:a9:30:a1:4d:7d:55:79:a0:ed:10:a2:32:77:aa:b3:
         93:a6:49:72:ca:14:0e:e5:eb:88:65:c8:58:27:5b:74:4e:cc:
         45:d5:10:8a:fd:62:14:95:b5:67:53:2c:5a:69:fe:23:14:4e:
         06:7c:7a:f7:96:33:f7:65:da:37:62:24:60:c5:ef:ea:ee:05:
         9f:86:34:5c:86:c7:b1:57:9d:18:8e:89:cc:3b:57:fc:62:f9:
         15:3a:34:6b:1c:42:7d:4e:80:fa:44:ac:49:e0:e7:48:7a:33:
         ff:02:4e:67:7b:ce:19:1e:4e:a0:1d:74:77:1b:8b:a6:d0:12:
         d1:05:a5:f9:23:ba:10:e2:a3:21:51:9d:28:27:97:ee:ed:4a:
         85:14:ce:d2:d6:c2:ed:71:7f:d0:5c:c6:ed:a6:71:12:d2:ef:
         8c:68:95:e1:4f:b1:d1:45:d6:ea:00:c9:47:c1:84:a8:13:bf:
         f3:f9:fd:69:de:45:79:cd:b7:d3:50:06:81:d5:6e:56:f0:b0:
         e2:24:fc:e7:8a:00:f7:00:7c:a8:e9:5e:60:59:b9:21:94:e2:
         d9:5d:39:2b:27:49:f1:41:3f:53:15:b5:cc:9b:d3:f4:b1:1e:
         7e:0f:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:54:55 2026 by rpki-client