Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43/eae035c5-e291-3775-a59a-b551b4fc4273.roa
File:                     eae035c5-e291-3775-a59a-b551b4fc4273.roa (raw, json)
Hash identifier:          8PzD57oCl1a5gD/sied/vWBAMHvkM/YEXSQc9b969uQ=
Subject key identifier:   FF:15:79:4A:65:34:46:45:2D:A3:21:5D:4A:55:37:8E:AA:5D:4C:83
Certificate issuer:       /CN=1b3c8613-4b1a-405c-b15c-a5a254c02c43
Certificate serial:       010D0C9F4328584D5234FFCF5EA1E07716E74200
Authority key identifier: 27:86:24:5F:46:D5:5E:83:F7:D8:F2:59:32:58:B2:33:21:D0:56:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43/eae035c5-e291-3775-a59a-b551b4fc4273.roa
Signing time:             Sat 28 Mar 2026 18:44:39 +0000
ROA not before:           Sat 28 Mar 2026 18:44:39 +0000
ROA not after:            Mon 15 Jun 2026 12:59:47 +0000
asID:                     11598
IP address blocks:        64.207.96.0/20 maxlen: 20
                          64.207.96.0/22 maxlen: 22
                          64.207.100.0/22 maxlen: 22
                          64.207.104.0/22 maxlen: 22
                          64.207.108.0/23 maxlen: 23
                          64.207.110.0/24 maxlen: 24
                          64.207.111.0/24 maxlen: 24
                          199.21.248.0/22 maxlen: 22
                          2606:7800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43/1b3c8613-4b1a-405c-b15c-a5a254c02c43.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43/1b3c8613-4b1a-405c-b15c-a5a254c02c43.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:ff:cf:5e:a1:e0:77:16:e7:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b3c8613-4b1a-405c-b15c-a5a254c02c43
        Validity
            Not Before: Mar 28 18:44:39 2026 GMT
            Not After : Jun 15 12:59:47 2026 GMT
        Subject: CN=97409111-d2c0-4bbd-bf50-5f7b8631cb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:b4:a7:57:b6:d0:89:a5:81:40:3f:d9:4e:
                    d1:61:56:d9:ec:cc:71:9e:fd:55:b7:e6:bb:54:40:
                    8c:3f:88:91:bf:8c:a9:2a:3c:4d:1f:dd:c8:4a:d9:
                    8f:80:e6:69:6a:e6:15:6c:76:f9:da:99:20:2e:2f:
                    96:0a:f9:55:f8:0b:4f:82:e0:13:b2:47:b7:df:02:
                    bc:dd:58:29:87:71:31:12:d0:6d:4c:bd:ae:84:ab:
                    c4:10:1c:f0:7d:26:ef:af:42:9f:c8:77:7e:f9:b1:
                    79:ff:cc:c5:63:f6:b2:82:6c:23:e9:4d:b6:37:b1:
                    76:71:b2:09:76:de:c6:2e:b7:6f:1b:93:02:7e:55:
                    94:e4:d8:05:f0:ff:b1:e0:6f:3b:2a:f9:73:fb:32:
                    21:ee:90:48:27:e4:14:28:b6:95:6d:79:cb:de:68:
                    5a:f9:51:d5:77:01:19:94:a4:11:dc:9a:1d:85:a3:
                    a2:9a:ba:3c:ac:6c:25:c4:da:0b:e7:40:aa:ed:dc:
                    ec:82:01:d6:6f:3c:7f:0e:6b:81:06:c7:f3:70:49:
                    59:87:8e:81:9d:a6:70:8d:2a:e6:c4:da:bc:14:12:
                    79:e2:06:d7:dd:73:3d:47:2d:30:c4:8c:91:ba:25:
                    e2:6e:18:9e:6b:6a:6c:e8:74:bb:57:16:a4:09:8b:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:15:79:4A:65:34:46:45:2D:A3:21:5D:4A:55:37:8E:AA:5D:4C:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43/eae035c5-e291-3775-a59a-b551b4fc4273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43/1b3c8613-4b1a-405c-b15c-a5a254c02c43.crl

            X509v3 Authority Key Identifier:
                keyid:27:86:24:5F:46:D5:5E:83:F7:D8:F2:59:32:58:B2:33:21:D0:56:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.207.96.0/20
                  199.21.248.0/22
                IPv6:
                  2606:7800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cb:3f:41:9c:25:27:a1:5d:ae:34:a1:a8:fe:f6:7b:90:e5:
         2c:4f:26:52:8b:f4:85:8d:3f:83:7e:da:ba:d9:8a:05:99:11:
         16:4e:73:f4:43:1d:55:63:b4:77:f0:52:61:1c:a2:f0:a8:74:
         36:3f:17:72:72:13:f6:c7:b9:c6:21:e8:83:01:7c:94:d4:fe:
         b0:3c:b3:43:24:8d:d6:0e:23:ba:29:8b:42:c0:b4:7f:4e:70:
         71:7a:24:06:a7:c2:a6:bb:13:87:92:53:de:61:8b:13:e2:ab:
         b7:95:55:b9:ed:ae:00:4d:31:cd:b7:69:9b:35:a7:49:8d:5d:
         e0:ef:89:19:83:65:9e:d6:14:5b:6e:c8:fd:91:54:54:71:18:
         2d:7a:42:77:af:9e:03:aa:59:c9:33:dd:48:b7:8f:aa:57:69:
         57:2b:10:92:3f:76:d2:f5:62:4f:d2:8d:b7:03:74:9a:1c:78:
         b5:4a:7f:84:36:c3:a0:73:8d:17:da:78:dd:c7:10:53:e6:3d:
         9e:ce:c3:78:73:14:41:42:15:60:3d:b4:3a:40:33:31:fe:54:
         ce:a1:7a:ca:19:95:ef:40:88:68:c4:74:db:eb:ee:a7:3f:a6:
         46:e0:d4:5d:0e:ca:3b:6f:e0:ba:e4:f1:ef:50:02:2b:a2:4b:
         b6:8b:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:19 2026 by rpki-client