Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/a1333bf7-8497-3910-9db7-0dbeb835edb7.roa
File:                     a1333bf7-8497-3910-9db7-0dbeb835edb7.roa (raw, json)
Hash identifier:          z6W8m6rh/mkW7y1TP7SsUYR6bqa8zqaZ+xFp+8edWCk=
Subject key identifier:   B8:5C:63:EB:43:69:D6:D9:BB:F0:66:EC:3A:14:69:5E:75:F6:A9:B3
Certificate issuer:       /CN=ebf21e98-3294-441a-9899-9d935ac6c3d1
Certificate serial:       010D0C9F4328584D6AAA7CB4ABAAC678371ACC80
Authority key identifier: 85:73:B7:3D:7F:5B:A4:F5:C2:85:89:F4:BF:2F:E6:95:9D:D3:A4:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/a1333bf7-8497-3910-9db7-0dbeb835edb7.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     376
IP address blocks:        205.237.72.0/22 maxlen: 22
                          205.237.76.0/24 maxlen: 24
                          205.237.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:7c:b4:ab:aa:c6:78:37:1a:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf21e98-3294-441a-9899-9d935ac6c3d1
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=a1e38575-5f59-4c5d-a4b4-1f6f11d74a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a4:45:98:05:da:cd:6c:54:3f:85:fd:58:37:
                    5d:fd:93:21:9a:a0:1e:f6:32:6a:20:f9:32:45:ba:
                    fc:fb:f0:d9:0e:b4:be:64:e1:6c:f0:c5:23:73:7c:
                    81:bf:76:0b:79:d0:6b:2d:89:d4:2a:1e:21:29:4d:
                    9a:8f:53:b6:70:8e:e6:ab:af:f8:b6:74:94:e4:3d:
                    33:18:40:8b:ef:b8:18:8b:27:17:a1:c9:a1:81:db:
                    8e:c9:9c:15:dc:b9:ef:95:61:0d:b9:09:ba:5e:12:
                    80:65:7c:f4:e6:7e:96:8a:d7:eb:d0:0a:62:2d:94:
                    98:b9:c2:82:a8:13:17:99:18:49:a7:b6:c1:ba:cc:
                    4a:47:ee:d6:46:74:9d:36:57:d5:3c:8f:0d:e9:94:
                    da:54:2f:29:95:30:94:9a:e2:84:c5:53:7a:32:79:
                    a1:ed:a4:e5:d9:9b:8e:bf:d0:f4:c4:25:70:7f:63:
                    5e:35:4f:71:3a:03:be:e6:92:b3:fc:6e:6e:e4:d1:
                    23:a8:59:ba:a9:5c:41:7e:e1:dc:eb:7e:eb:ac:08:
                    c1:8d:a7:e8:99:50:2b:63:10:db:20:3e:88:84:83:
                    79:c1:3b:25:71:19:61:2c:ca:73:80:fd:b9:55:bf:
                    61:e9:39:e4:0e:1b:8d:5f:77:b2:c8:c0:45:56:8a:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5C:63:EB:43:69:D6:D9:BB:F0:66:EC:3A:14:69:5E:75:F6:A9:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/a1333bf7-8497-3910-9db7-0dbeb835edb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.crl

            X509v3 Authority Key Identifier:
                keyid:85:73:B7:3D:7F:5B:A4:F5:C2:85:89:F4:BF:2F:E6:95:9D:D3:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.72.0-205.237.77.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:c5:54:30:b4:88:69:c4:7c:2c:6f:f8:87:9d:68:9e:11:1c:
         d0:80:4d:e0:d1:97:20:87:4f:70:f2:cc:2f:0b:b3:ce:ea:68:
         7c:05:2f:5d:f3:29:ca:3c:97:53:db:36:35:fc:16:b0:74:ee:
         8f:d3:71:c9:ed:de:a8:8e:73:61:29:86:61:78:13:fc:19:82:
         6e:c0:8a:dc:1b:5b:ec:f4:e3:59:4c:d0:ff:60:77:26:60:55:
         b0:fa:31:cb:93:92:07:68:09:ab:e7:2c:d6:a6:2f:3d:66:de:
         cf:7b:8e:46:f5:38:19:30:8d:18:4f:f5:9f:e3:57:ef:34:14:
         ff:75:b5:71:41:c6:07:f9:74:8b:fc:68:bd:cd:1d:68:7e:59:
         67:55:ba:bc:fe:b8:32:ac:8a:4d:a8:9f:ab:f8:c1:37:d2:ff:
         03:8c:af:6d:4c:25:3a:8e:75:66:76:3e:8b:2c:3c:23:55:7e:
         1f:fb:d8:0e:67:ba:b2:2b:df:0d:86:e3:59:b8:af:a7:c7:59:
         5b:38:76:fe:48:bf:d6:78:9e:da:0f:2e:32:8c:32:5a:27:25:
         3f:8d:21:7f:b8:53:8f:ee:b4:bb:7b:5e:9c:82:1c:75:27:99:
         d4:47:98:a0:7d:66:b8:d7:0a:82:f9:09:59:55:1e:89:db:c1:
         69:33:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:18 2026 by rpki-client