Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa
File:                     f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa (raw, json)
Hash identifier:          CDMxhK7HCrUJ9kVUexgTZ409qR+RKTyKnHcQqqgpUto=
Subject key identifier:   A9:0B:C7:14:39:77:87:DF:A8:5A:EB:FC:4E:20:5F:57:D0:3D:2E:66
Certificate issuer:       /CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
Certificate serial:       010D0C9F4328584CC1E1CC3B4470F0D80795E600
Authority key identifier: 92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa
Signing time:             Thu 05 Feb 2026 02:00:31 +0000
ROA not before:           Thu 05 Feb 2026 02:00:31 +0000
ROA not after:            Wed 06 May 2026 01:00:31 +0000
asID:                     18594
IP address blocks:        64.57.144.0/24 maxlen: 24
                          64.57.145.0/24 maxlen: 24
                          64.57.150.0/24 maxlen: 24
                          64.57.151.0/24 maxlen: 24
                          74.120.156.0/24 maxlen: 24
                          74.120.158.0/24 maxlen: 24
                          199.254.202.0/24 maxlen: 24
                          204.90.2.0/24 maxlen: 24
                          208.70.176.0/24 maxlen: 24
                          208.70.177.0/24 maxlen: 24
                          208.70.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c1:e1:cc:3b:44:70:f0:d8:07:95:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
        Validity
            Not Before: Feb  5 02:00:31 2026 GMT
            Not After : May  6 01:00:31 2026 GMT
        Subject: CN=65d28e6c-4399-414f-9952-15abfcf5e96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:74:e9:bb:a6:83:9a:1c:0c:d2:a3:9a:10:6c:
                    a9:82:5a:ab:5d:71:7e:86:0b:16:df:b6:08:dd:0b:
                    aa:97:41:87:68:06:3e:01:be:8c:96:97:2b:46:e0:
                    ee:f7:92:ff:3b:c6:4a:17:b4:ae:76:a8:88:d5:9b:
                    04:d2:f9:b1:b5:34:54:e8:ac:14:06:e5:b9:2f:1e:
                    5b:0e:f0:82:95:1f:c0:e2:eb:e0:5f:07:50:37:2d:
                    36:dc:d7:87:68:fc:29:93:b1:09:f3:27:fd:10:00:
                    e9:aa:71:01:95:aa:26:fb:82:d2:47:0f:db:b0:99:
                    dc:3b:6e:7b:c3:bb:19:f0:b7:db:40:1b:f2:ce:40:
                    54:a2:92:8a:32:86:29:6e:b4:1c:c1:4b:31:e0:fe:
                    95:42:1e:85:05:97:dc:2a:e3:e4:e3:d2:11:a3:48:
                    e1:cc:40:bf:01:c2:33:7f:f0:33:6e:38:d3:47:0a:
                    4d:de:0b:ab:d4:7b:1e:4d:43:ff:c1:3d:f4:21:1b:
                    c0:63:d6:ee:3b:d3:1a:d6:e8:44:4b:da:ac:01:79:
                    18:c8:3e:b6:19:12:eb:c6:83:64:2f:9e:4f:21:dd:
                    de:b3:c8:d3:67:98:e2:12:c9:25:ed:c1:93:45:f4:
                    86:a2:22:51:9e:ac:1f:29:2a:f2:28:77:f1:6f:a8:
                    45:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0B:C7:14:39:77:87:DF:A8:5A:EB:FC:4E:20:5F:57:D0:3D:2E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl

            X509v3 Authority Key Identifier:
                keyid:92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.144.0/23
                  64.57.150.0/23
                  74.120.156.0/24
                  74.120.158.0/24
                  199.254.202.0/24
                  204.90.2.0/24
                  208.70.176.0/23
                  208.70.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:1d:07:53:4f:cf:e0:36:0e:87:d2:fc:96:b6:18:c5:2b:3a:
         bf:27:23:a7:53:d0:ba:dc:0c:c3:30:d2:87:0d:11:aa:36:01:
         5a:50:a7:27:5e:b2:b5:8f:c4:fd:14:02:be:77:41:a4:42:33:
         32:17:8d:26:d1:57:e2:65:98:01:2b:c0:4c:e3:e5:88:31:a1:
         4d:67:40:b1:da:ae:1c:2e:42:3e:b2:71:8b:25:3d:c6:f1:01:
         d2:52:bf:76:37:4d:9a:e9:52:ae:07:1a:94:93:10:30:b5:c8:
         d5:2e:aa:a2:af:46:cd:71:69:27:73:c4:92:14:00:37:10:3f:
         4e:1f:61:bf:c7:9a:80:8a:7d:b2:3d:34:71:8a:29:59:ad:e0:
         5a:cd:cb:e7:25:1a:ba:c1:7b:56:48:16:87:ae:5d:67:bc:5d:
         50:6c:38:b1:c6:52:bf:9a:64:69:3d:09:1b:59:de:4a:49:c9:
         b7:52:e6:83:f4:f2:32:c0:b9:3e:64:e8:9f:d1:de:99:99:30:
         f1:1b:73:09:92:1f:61:4a:aa:28:86:29:3b:4c:3f:dd:a4:a0:
         d2:5c:6c:8f:bc:2a:c8:6d:8b:0a:ed:a1:f4:f9:fe:ca:b0:00:
         dc:ef:3c:1b:84:92:cc:56:65:89:43:fe:5c:21:16:dc:16:a1:
         ac:d6:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:15 2026 by rpki-client