Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa
File:                     cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa (raw, json)
Hash identifier:          21hgsvfEEfwgB5ziGPzF20rsLksTuYVW5Uj6lLlRuRY=
Subject key identifier:   4D:BD:FF:B9:2A:4C:6F:13:B5:38:69:62:8A:B4:DC:FD:F4:DC:B0:89
Certificate issuer:       /CN=adf336cd-e30b-4fd4-a132-8eede3026803
Certificate serial:       010D0C9F4328584CFB1CE6BF4B6A795A686DCD80
Authority key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     46
IP address blocks:        128.6.0.0/16 maxlen: 24
                          130.219.0.0/16 maxlen: 24
                          165.230.0.0/16 maxlen: 24
                          192.12.88.0/24 maxlen: 24
                          198.151.130.0/24 maxlen: 24
                          2620:0:d60::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:e6:bf:4b:6a:79:5a:68:6d:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf336cd-e30b-4fd4-a132-8eede3026803
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=ba9e1263-4d1d-4e4d-b2c7-5afad37cf2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:bd:30:94:7e:e0:7f:1a:77:ff:46:10:8e:
                    57:28:7c:21:34:1c:8a:8a:0c:6b:2c:24:91:0f:ed:
                    ca:32:db:d5:1d:21:04:66:34:01:85:a3:4b:56:8b:
                    14:4f:16:c4:99:9a:b5:e6:79:31:4b:1c:34:6f:42:
                    ee:45:5e:7b:0f:fc:7e:53:b8:b7:03:43:0e:b5:e8:
                    2c:90:2d:40:63:66:6b:ef:cd:bd:e8:c3:0d:c5:4f:
                    20:1f:b0:13:ac:46:3f:a5:d3:65:fe:2d:af:92:0f:
                    7b:fe:26:7c:7d:d0:0b:2d:74:a5:b5:d0:85:29:93:
                    e1:d7:04:5b:99:bd:08:09:eb:e7:8c:1a:4d:f8:fe:
                    17:33:fc:c3:d6:b5:2e:44:1b:ad:07:4a:29:06:4a:
                    da:00:47:ed:96:83:46:84:07:0c:83:af:28:1e:65:
                    f3:b4:ec:45:79:89:a4:1f:d5:d2:28:87:de:88:17:
                    79:5e:31:5b:eb:a2:b7:75:e9:24:6a:8c:db:fc:27:
                    0b:d3:e7:4c:41:f2:08:b3:43:13:b7:75:f5:6c:b3:
                    d2:32:8a:6d:04:10:cd:ca:84:db:42:1a:18:f9:a3:
                    be:d2:63:6e:03:f0:9a:b8:f0:a9:67:5e:8b:f4:fb:
                    75:ee:e5:1f:ef:6a:94:c4:35:3b:06:3d:70:d1:5c:
                    49:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BD:FF:B9:2A:4C:6F:13:B5:38:69:62:8A:B4:DC:FD:F4:DC:B0:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl

            X509v3 Authority Key Identifier:
                keyid:43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.6.0.0/16
                  130.219.0.0/16
                  165.230.0.0/16
                  192.12.88.0/24
                  198.151.130.0/24
                IPv6:
                  2620:0:d60::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a2:b4:f2:24:ba:ff:b0:d0:b8:3a:2b:cb:f0:21:1b:49:ae:
         fc:83:fb:f4:16:8f:52:41:28:e6:aa:96:5f:38:69:96:be:51:
         11:4e:39:87:ff:cb:28:35:65:e9:48:f4:aa:74:82:d9:01:9f:
         30:19:9e:18:da:aa:de:49:ba:76:19:7c:84:50:83:f9:9b:4d:
         44:97:2b:b8:4d:24:3b:23:41:e9:22:e7:ad:85:b8:7a:ea:c5:
         d2:e0:63:e4:ba:ab:35:1a:85:e2:ac:31:1a:2e:10:d1:33:81:
         1e:e6:e4:ab:5d:dd:8e:03:61:d2:6c:67:f2:0d:e6:46:29:a1:
         7a:56:3b:96:e2:42:15:39:3e:cc:3b:1a:7a:88:cd:08:af:7c:
         33:4d:20:24:ff:29:c7:4b:d4:be:b6:32:b0:b7:e8:65:a7:2c:
         33:8c:6d:00:0c:94:6a:44:91:fa:77:b5:db:18:28:91:72:25:
         ea:2b:a3:11:f8:4c:cd:4a:5d:e0:1d:2a:f6:cb:11:15:9a:00:
         8d:eb:de:93:7a:90:fe:8b:ae:2e:0a:9d:21:23:d6:82:06:59:
         0c:cb:9d:05:e9:8d:0b:1f:73:bc:cd:f0:e7:08:e5:98:f5:ec:
         8a:c9:52:2c:c4:ca:f1:93:12:3d:c2:00:24:18:69:dd:f9:40:
         8c:7b:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:30 2026 by rpki-client