Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa
File:                     3125937d-10bf-347b-bf28-785512b3e771.roa (raw, json)
Hash identifier:          P4vpxVrjwj8vO+SbuFxlJEvt2iBZaRqe5FTWS1QXz+M=
Subject key identifier:   B8:CC:28:92:66:FA:86:68:CA:BA:0A:92:C0:D8:81:38:E3:1A:14:BB
Certificate issuer:       /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial:       010D0C9F4328584CCBA760D583F31628CB207280
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     17
IP address blocks:        128.10.0.0/16 maxlen: 24
                          128.46.0.0/16 maxlen: 24
                          128.210.0.0/16 maxlen: 24
                          128.211.0.0/16 maxlen: 24
                          192.5.40.0/24 maxlen: 24
                          192.5.48.0/24 maxlen: 24
                          192.5.91.0/24 maxlen: 24
                          192.5.101.0/24 maxlen: 24
                          192.5.102.0/24 maxlen: 24
                          192.12.63.0/24 maxlen: 24
                          192.31.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:60:d5:83:f3:16:28:cb:20:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=d4da0c5d-ce1c-4a66-a0c0-ce7c1ce65fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:7f:62:c3:3a:58:30:95:55:73:85:44:57:
                    d2:5c:71:cc:df:7f:f8:01:45:d8:c3:5c:fd:a3:c6:
                    0f:0d:a5:98:76:f8:07:02:6a:53:2d:64:c1:6e:23:
                    05:9b:e5:36:2f:7b:e6:5c:d1:33:f9:5f:6e:c1:f8:
                    a0:07:db:3c:93:7e:e0:d9:a9:1f:4d:da:8d:08:24:
                    9f:b5:69:da:ff:94:c1:41:c5:e3:70:84:91:a0:f2:
                    32:82:a4:3f:d1:fe:de:6d:3c:52:68:30:95:4a:16:
                    11:33:1c:55:0b:36:7e:a7:af:4f:ce:5e:1b:26:56:
                    8f:f5:74:ed:16:49:32:03:fb:13:9c:eb:48:1e:31:
                    fd:36:86:2f:4b:f1:8e:aa:34:33:9d:cb:05:2a:a7:
                    4d:2f:42:35:65:ac:22:04:93:ff:55:f7:c5:99:3b:
                    9d:bc:b6:81:77:e1:32:95:23:d8:bd:18:22:16:ec:
                    a8:a9:c8:57:c1:12:9d:72:16:de:c0:71:45:81:e8:
                    3c:c6:06:d8:14:95:a0:ac:de:9f:ef:7e:59:35:2a:
                    45:3c:82:01:7f:9d:28:d6:c9:e7:a6:c3:ef:0c:67:
                    f5:85:a7:13:66:99:47:57:a7:b2:f0:4a:b0:40:7d:
                    78:12:4d:aa:75:a1:e3:8a:5a:d6:00:a3:3f:5e:c7:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CC:28:92:66:FA:86:68:CA:BA:0A:92:C0:D8:81:38:E3:1A:14:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl

            X509v3 Authority Key Identifier:
                keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.10.0.0/16
                  128.46.0.0/16
                  128.210.0.0/15
                  192.5.40.0/24
                  192.5.48.0/24
                  192.5.91.0/24
                  192.5.101.0-192.5.102.255
                  192.12.63.0/24
                  192.31.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bd:2c:42:b1:06:50:e2:aa:29:af:25:f8:5b:56:3f:90:87:
         d8:ff:13:1d:7d:d1:41:54:e1:59:28:16:fd:73:17:f6:dc:b9:
         22:87:30:51:4d:8b:fa:15:70:05:05:cd:6d:39:ff:84:92:e4:
         72:07:50:2a:12:f0:2f:d9:f8:40:0a:52:b6:85:fb:a0:6f:da:
         c5:a5:9a:f2:a8:08:27:1d:00:eb:d9:39:07:17:1e:f2:9e:08:
         bb:04:c3:19:95:51:02:39:9e:ad:67:85:c8:16:59:ea:35:23:
         c4:c1:a8:7f:c3:75:30:96:60:35:3d:e1:bd:d1:30:da:6e:9f:
         04:a3:bf:67:7c:73:e8:e7:3a:59:53:78:b3:8d:32:99:2a:48:
         ba:64:5f:90:13:45:2e:29:7d:64:b0:91:d8:93:d1:f2:2f:97:
         6e:49:8b:1a:a5:61:23:0e:82:b4:1f:eb:8d:06:63:5e:b0:5b:
         d0:df:91:5b:e3:63:1b:b8:c8:6a:c4:ba:bf:a3:a3:56:2c:6a:
         bb:c1:01:06:dd:3f:ec:cd:9e:f6:e3:3a:41:f0:4d:92:c7:56:
         7d:6b:0e:45:84:1b:94:7a:1a:73:ce:95:2b:b6:4c:5f:f7:99:
         de:6a:04:26:74:4c:0d:0e:9e:cf:2e:9d:e5:62:5e:c6:cc:80:
         32:c8:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:08 2026 by rpki-client