Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa
File:                     1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa (raw, json)
Hash identifier:          4Q/rhaFyU4cvMGRTrhPCa8ASpKxLDMOkzsyx7XGrhv8=
Subject key identifier:   03:6C:11:E0:02:5B:2F:5C:D4:D9:87:5C:79:4D:07:95:1E:DA:55:4A
Certificate issuer:       /CN=bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec
Certificate serial:       010D0C9F4328584D869550FF8C05B95178B2F000
Authority key identifier: 4D:E0:3A:FD:5B:34:DF:C3:D4:9F:52:EB:03:AF:09:5A:8C:DC:8B:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     18948
IP address blocks:        64.118.208.0/20 maxlen: 20
                          74.123.168.0/21 maxlen: 21
                          74.123.168.0/22 maxlen: 22
                          74.123.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:50:ff:8c:05:b9:51:78:b2:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=c2649069-822d-4666-b3a0-c80c8637aeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:3b:68:e9:a7:61:89:79:4c:fe:f0:69:50:
                    56:d6:25:d6:ab:b8:3f:b3:66:a9:76:3d:4f:e9:a4:
                    60:f8:e9:7c:3b:c5:93:ea:18:e8:61:c4:4a:dc:fc:
                    d1:91:8a:a3:2e:74:d9:d4:1c:9a:d6:55:5e:77:49:
                    03:58:76:d4:f6:0d:39:ef:ab:f6:5c:69:ef:73:e1:
                    35:5e:fe:27:78:0c:62:78:0a:0e:1f:cf:44:cc:ce:
                    10:b6:00:9c:a6:ea:34:e3:5e:b2:92:51:54:c7:4d:
                    84:1d:a5:e3:ba:9d:24:f7:85:a2:c8:0b:39:82:7f:
                    78:90:c4:ab:45:09:30:2c:60:0a:a4:8a:86:6b:7d:
                    cf:dc:a2:7d:22:86:b1:cd:1f:c2:b7:1b:8c:dd:03:
                    04:fd:12:f0:4d:c3:14:eb:68:94:c3:8a:80:b2:19:
                    19:89:ca:bb:94:84:49:5a:6f:77:62:b7:25:a1:d1:
                    a9:b0:d1:78:16:9c:26:04:66:90:2a:1b:5f:9d:fe:
                    27:d9:91:b8:7d:c2:9a:6c:4c:57:67:e1:e3:df:99:
                    4f:d0:78:4a:3e:0a:e6:62:7d:1b:08:0c:21:a4:77:
                    8c:62:57:c3:9f:10:e0:8b:1e:3e:23:15:56:8b:56:
                    f0:38:67:43:a0:65:7d:75:3b:1b:71:30:5d:09:5a:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6C:11:E0:02:5B:2F:5C:D4:D9:87:5C:79:4D:07:95:1E:DA:55:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.crl

            X509v3 Authority Key Identifier:
                keyid:4D:E0:3A:FD:5B:34:DF:C3:D4:9F:52:EB:03:AF:09:5A:8C:DC:8B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.118.208.0/20
                  74.123.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:00:6a:cf:96:55:27:6a:05:92:8b:03:94:00:f4:f6:50:cf:
         72:56:00:18:42:d0:8f:9e:03:48:a1:5f:1f:30:ee:8f:bf:e9:
         49:b3:20:79:73:0d:83:7a:e7:8a:4b:9a:fe:46:08:7d:b0:76:
         26:4d:0e:09:69:44:e8:38:dd:d1:ce:50:14:30:05:35:ca:04:
         4e:b9:4c:ca:ee:09:1b:21:e7:bc:c6:72:05:e9:f9:72:36:a7:
         a9:00:f6:a9:21:33:07:1e:f4:dc:a1:68:c7:f3:f8:2e:6f:de:
         86:dd:e7:0e:1c:bd:3e:a9:ff:f6:23:53:fc:f6:b9:88:5d:4b:
         39:25:6c:66:45:4f:40:38:ba:65:67:5f:ed:aa:2c:3a:73:69:
         a4:b8:84:0f:ca:67:2e:a7:21:bb:a1:36:ec:6e:89:13:93:1b:
         d9:e5:ec:39:21:26:71:5f:50:30:5a:73:f0:4c:15:2d:db:c0:
         df:7d:a5:0e:c4:66:20:0d:8a:46:4c:76:5f:8b:41:bd:3c:ce:
         3c:14:40:4a:24:a6:3d:a6:64:df:40:09:52:ba:c3:87:ae:e5:
         1d:60:c9:9b:45:31:f0:19:2b:95:f9:27:59:f8:50:51:cd:06:
         3a:81:ff:d8:c2:d0:0b:ea:78:02:50:56:8c:01:64:a4:7c:21:
         44:8e:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:28 2026 by rpki-client