Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/9105cf94-982c-3fb2-894e-10045bd902be.roa
File:                     9105cf94-982c-3fb2-894e-10045bd902be.roa (raw, json)
Hash identifier:          Gn/TOzxxn9KVTRzvyQP7tbD9zgJcvT0gc9pixRO59r4=
Subject key identifier:   A1:26:67:21:ED:57:88:93:04:7B:03:BD:7D:E7:68:9D:70:B4:34:C0
Certificate issuer:       /CN=b4423358-d6e5-4c1e-bb3c-969965915db2
Certificate serial:       010D0C9F4328584CFE90B1F24BCE1EAE60806EC0
Authority key identifier: FC:23:10:94:57:A7:8B:7A:79:0D:CA:C5:5B:59:72:3F:4F:CE:75:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/9105cf94-982c-3fb2-894e-10045bd902be.roa
Signing time:             Thu 26 Feb 2026 19:41:30 +0000
ROA not before:           Thu 26 Feb 2026 19:41:30 +0000
ROA not after:            Wed 27 May 2026 18:41:30 +0000
asID:                     400405
IP address blocks:        64.59.200.0/21 maxlen: 24
                          209.182.104.0/21 maxlen: 24
                          2606:c9c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/b4423358-d6e5-4c1e-bb3c-969965915db2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/b4423358-d6e5-4c1e-bb3c-969965915db2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:90:b1:f2:4b:ce:1e:ae:60:80:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4423358-d6e5-4c1e-bb3c-969965915db2
        Validity
            Not Before: Feb 26 19:41:30 2026 GMT
            Not After : May 27 18:41:30 2026 GMT
        Subject: CN=f446c3b4-4f9c-4e09-8252-4acb368bd357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:eb:7f:da:1d:7e:31:b2:7a:12:59:81:48:
                    a6:b4:e3:12:05:2c:49:40:b1:02:5b:26:bf:1b:be:
                    24:77:32:66:ed:3f:2e:a6:ac:9c:21:72:37:f9:fe:
                    1d:e3:0e:7a:61:fa:5b:e1:4c:45:68:bf:2b:ce:39:
                    d7:2e:1f:3b:25:64:b5:8b:a6:d6:ca:5c:5c:64:60:
                    95:20:c4:af:b8:22:4e:fd:59:9b:55:cf:f7:65:c9:
                    d7:24:d7:7e:15:3e:c4:c6:a5:56:13:81:de:12:69:
                    98:61:4e:5f:73:5a:ff:31:62:c5:83:68:8b:ba:83:
                    5d:07:ef:7f:b4:0d:86:c2:f4:a6:e8:a2:ea:f5:ee:
                    14:bd:32:5d:c2:ee:1c:4d:45:2e:f7:04:49:cb:ba:
                    29:32:d3:59:a5:2a:7e:a0:0f:56:23:08:90:fc:16:
                    2f:0b:ee:ef:31:16:f2:6c:a9:81:8a:86:29:66:01:
                    43:72:8e:75:86:be:bd:21:0e:23:1d:79:fc:5e:39:
                    9d:ae:58:7e:0e:3e:43:83:53:2f:86:2b:d3:3e:1d:
                    bf:08:26:55:98:3e:4c:f4:4c:46:dc:6f:db:7a:25:
                    cd:44:bc:54:de:25:b1:df:ce:e0:0a:39:56:25:6e:
                    1f:e3:29:70:a0:6e:11:ee:d0:f1:10:b0:08:c9:1b:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:26:67:21:ED:57:88:93:04:7B:03:BD:7D:E7:68:9D:70:B4:34:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/9105cf94-982c-3fb2-894e-10045bd902be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/b4423358-d6e5-4c1e-bb3c-969965915db2.crl

            X509v3 Authority Key Identifier:
                keyid:FC:23:10:94:57:A7:8B:7A:79:0D:CA:C5:5B:59:72:3F:4F:CE:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.59.200.0/21
                  209.182.104.0/21
                IPv6:
                  2606:c9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1c:81:dd:1d:90:8a:48:9e:03:05:99:10:ed:dc:d1:3e:af:
         24:0b:7b:95:c2:78:7c:cc:62:4c:64:70:ac:6e:5b:39:3a:cf:
         9c:71:bc:aa:a3:99:22:b5:1e:80:10:c4:09:5e:4b:ce:ed:2f:
         93:ce:43:ab:fe:b5:8d:3c:7e:c8:e4:b2:a5:ed:78:21:b5:b5:
         1d:ec:84:f3:a7:32:34:a7:cb:68:64:99:b4:eb:26:a6:40:7a:
         d6:c0:f0:58:99:2e:1e:18:77:77:30:b6:da:30:de:ea:72:5b:
         44:54:3a:15:f7:f3:d4:a8:7a:f3:c6:9a:fa:44:3e:26:0c:9a:
         cd:c9:0b:c9:a2:ba:b4:d2:e5:f5:b0:9d:f0:4c:59:d5:28:1e:
         39:c3:06:e6:6f:72:1c:a3:e8:88:f3:7a:50:2b:46:f5:54:49:
         4e:cc:95:77:17:7f:cd:1c:14:83:00:b9:91:71:6b:11:4b:2b:
         a3:cb:f9:8b:3f:0c:87:6a:fb:ff:33:2a:2f:f2:15:00:6f:bf:
         65:ad:01:aa:57:6a:f3:26:ac:3a:37:a0:be:a2:ac:c3:45:71:
         c6:80:02:1d:eb:ef:39:d6:76:57:3f:84:ce:6c:09:ef:c8:e3:
         3a:b4:cb:a2:f0:57:85:48:b6:6e:45:0b:16:59:4e:c6:a3:0b:
         d1:97:c4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:47 2026 by rpki-client