Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/58dadb05-4845-3a41-9b2f-663a09e0cfff.roa
File:                     58dadb05-4845-3a41-9b2f-663a09e0cfff.roa (raw, json)
Hash identifier:          nlazWkgByPW5qxLEuagkaljof/zixRI6HS6oYKuL7/I=
Subject key identifier:   E7:63:BE:93:3E:7D:0C:83:AF:BD:CA:2B:9C:64:D2:73:78:73:CA:D0
Certificate issuer:       /CN=3e9fb25a-438f-4e1d-a136-5c878d065c24
Certificate serial:       010D0C9F4328584CED27BCA3CB4D37067D904440
Authority key identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/58dadb05-4845-3a41-9b2f-663a09e0cfff.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     29765
IP address blocks:        162.217.104.0/21 maxlen: 24
                          192.104.0.0/24 maxlen: 24
                          199.80.28.0/22 maxlen: 24
                          204.15.96.0/22 maxlen: 24
                          208.91.240.0/22 maxlen: 24
                          2606:5b00::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:bc:a3:cb:4d:37:06:7d:90:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e9fb25a-438f-4e1d-a136-5c878d065c24
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=7970b879-9e99-4579-a8d6-28a2a8e2d3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:6b:4b:74:40:eb:75:30:9d:fc:b6:51:dc:
                    91:69:37:0a:ca:27:4a:93:97:f0:f8:94:6c:74:3a:
                    cd:d8:58:a0:48:c2:e0:e5:51:12:b2:ae:e7:b3:05:
                    2f:96:91:2b:9f:3c:25:ca:2b:5e:f0:d7:33:43:eb:
                    16:48:3c:7a:54:18:16:91:81:38:31:e5:45:09:d0:
                    72:f3:2d:a7:16:e1:a9:b1:8e:78:c3:8b:09:65:1f:
                    c9:84:01:6d:83:63:c0:bc:3d:db:05:e0:51:76:94:
                    5b:04:b7:19:3a:09:4a:08:45:e2:a5:66:d0:03:10:
                    25:46:7e:c5:7b:29:06:96:76:94:29:40:73:23:5a:
                    53:9c:ec:c5:e5:43:6e:ec:04:98:29:f8:2a:d8:01:
                    28:a7:2f:5c:ee:82:b8:d1:85:d5:20:bc:e8:2d:38:
                    44:de:8f:c6:4a:91:05:c0:81:ca:bc:2e:aa:5c:55:
                    b4:f8:36:94:47:0e:9e:2f:17:92:c3:9f:41:15:ef:
                    a5:0b:ed:58:6f:3b:cf:ae:cc:62:78:eb:c3:dd:36:
                    77:b1:cf:72:d5:5b:1d:ab:af:53:7d:48:0a:18:ed:
                    7d:5a:e1:99:28:d6:4a:0f:93:b1:57:89:f1:a3:3b:
                    fa:d5:2b:3e:d4:34:38:7b:b3:e9:7f:66:32:5b:e7:
                    ad:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:63:BE:93:3E:7D:0C:83:AF:BD:CA:2B:9C:64:D2:73:78:73:CA:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/58dadb05-4845-3a41-9b2f-663a09e0cfff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl

            X509v3 Authority Key Identifier:
                keyid:D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.104.0/21
                  192.104.0.0/24
                  199.80.28.0/22
                  204.15.96.0/22
                  208.91.240.0/22
                IPv6:
                  2606:5b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:63:c6:8b:01:1c:be:b0:91:db:13:23:4b:d9:21:9c:62:37:
         76:3f:62:78:10:92:47:f4:3d:fe:02:19:da:61:68:aa:39:7f:
         53:e0:0e:d8:70:ec:6d:7e:a1:2c:cb:d1:20:bf:49:90:73:32:
         a1:ae:64:a9:6a:0e:dd:4a:a2:79:24:10:64:4c:6b:47:5c:fe:
         c0:88:05:da:4f:01:e6:14:e7:dd:a0:3a:86:f4:a4:e3:97:2a:
         c5:c5:68:ea:cd:ea:4f:84:53:ef:97:b2:7f:81:a9:94:17:37:
         43:72:e5:fd:06:80:23:be:a0:32:90:c3:d5:5f:53:e9:cb:e9:
         dc:13:9a:a3:fc:76:dd:d3:22:b7:e2:29:f0:23:ed:5b:9d:55:
         d3:c0:06:59:71:84:64:95:2e:76:18:4e:33:6f:e4:4d:15:de:
         f5:e5:e1:98:1a:5b:90:98:f5:b8:f1:4c:1e:f8:29:8e:21:1e:
         41:71:f1:1e:dd:e9:0a:ba:0b:8c:c3:9a:dd:66:58:68:00:20:
         c2:aa:c9:11:92:04:c6:02:f7:39:a4:34:ce:74:9f:3c:10:3b:
         02:e9:6e:33:68:00:e4:2d:b8:fc:f0:2d:5e:71:87:52:71:6d:
         1a:32:e8:e3:e5:a5:7e:06:28:80:eb:bc:8e:55:df:32:83:cb:
         57:a7:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:36 2026 by rpki-client