Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/fcfd4556-0082-3df0-9ca7-e22793821e24.roa
File:                     fcfd4556-0082-3df0-9ca7-e22793821e24.roa (raw, json)
Hash identifier:          dLr+blgYDc2JHAnD3ccULYZK9hZ2lnnmVSPp6A8TcsM=
Subject key identifier:   58:4E:E5:08:A4:96:4F:19:F8:EA:B8:79:2D:B8:5F:9A:C3:72:D2:96
Certificate issuer:       /CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
Certificate serial:       010D0C9F4328584D5234FE84211D946767D9D420
Authority key identifier: 0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/fcfd4556-0082-3df0-9ca7-e22793821e24.roa
Signing time:             Sat 28 Mar 2026 18:44:38 +0000
ROA not before:           Sat 28 Mar 2026 18:44:38 +0000
ROA not after:            Sun 03 May 2026 15:37:13 +0000
asID:                     33362
IP address blocks:        64.77.213.0/24 maxlen: 24
                          64.77.216.0/23 maxlen: 24
                          64.77.218.0/24 maxlen: 24
                          72.14.97.0/24 maxlen: 24
                          72.14.119.0/24 maxlen: 24
                          72.14.126.0/24 maxlen: 24
                          97.75.255.0/24 maxlen: 24
                          208.101.227.0/24 maxlen: 24
                          208.101.234.0/23 maxlen: 24
                          208.101.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fe:84:21:1d:94:67:67:d9:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
        Validity
            Not Before: Mar 28 18:44:38 2026 GMT
            Not After : May  3 15:37:13 2026 GMT
        Subject: CN=9f4e135f-b3ac-4a85-ba3d-7d827fa89d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3c:d9:09:e7:26:75:49:80:e1:ff:42:dc:19:
                    70:37:4f:b4:37:82:41:f0:50:b7:dc:74:52:8b:64:
                    a4:73:27:8e:93:a5:69:d5:de:cf:98:f8:50:c2:70:
                    ca:90:37:ad:9e:66:a0:a9:1f:17:11:60:26:f0:0c:
                    1c:66:08:dc:e1:59:ce:1a:b7:62:17:63:3c:f6:ed:
                    68:90:09:9a:3b:e8:4b:3a:13:f7:d8:93:1f:db:55:
                    33:74:ea:a6:07:c9:eb:9f:5e:44:1d:b6:b6:c1:b9:
                    23:6e:f0:9f:0f:c2:c5:70:60:6b:07:98:c3:7d:d0:
                    ed:94:eb:d3:22:e3:83:0f:ea:83:df:4c:fd:bd:32:
                    ab:6d:cd:ed:41:7f:30:09:35:68:df:7e:48:af:b7:
                    4f:5b:97:a1:5c:f7:e5:e9:89:8e:62:44:83:95:96:
                    de:06:17:d1:06:5f:db:1e:20:83:f4:43:aa:84:a0:
                    b7:af:0d:60:b8:ae:79:45:b8:6b:10:5f:5a:29:73:
                    de:2b:d2:40:ea:4f:f3:1c:97:a0:84:9e:a8:a0:b5:
                    75:9a:7f:a0:f0:eb:87:43:c8:2b:ca:6d:e0:44:2e:
                    0c:d0:5c:28:04:b7:35:c9:2d:13:d3:86:05:b1:f9:
                    6e:5e:6a:21:a1:f9:ae:b1:81:bd:fd:3c:5c:de:86:
                    2b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4E:E5:08:A4:96:4F:19:F8:EA:B8:79:2D:B8:5F:9A:C3:72:D2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/fcfd4556-0082-3df0-9ca7-e22793821e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl

            X509v3 Authority Key Identifier:
                keyid:0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.77.213.0/24
                  64.77.216.0-64.77.218.255
                  72.14.97.0/24
                  72.14.119.0/24
                  72.14.126.0/24
                  97.75.255.0/24
                  208.101.227.0/24
                  208.101.234.0-208.101.236.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:55:b0:0c:7c:75:07:b6:a5:96:29:03:a3:60:d7:5e:2f:08:
         5d:03:57:42:15:c4:10:cc:a8:5d:f3:d9:d2:b8:e8:e7:39:6c:
         f2:41:19:63:64:4f:e4:e1:1d:ba:76:95:b1:51:29:5a:f9:12:
         2d:ab:2b:25:6b:fe:61:d9:c3:87:81:e4:a2:b7:c9:b3:84:ac:
         3e:d5:a8:14:20:6e:c3:c9:fd:e8:cd:39:f9:63:cc:a8:28:fc:
         f3:d2:17:49:df:b6:96:42:c5:4e:5d:b0:14:db:d5:7f:d9:a5:
         f0:88:00:b5:16:05:d0:3a:b4:b3:d1:e3:aa:62:50:e8:85:dc:
         c9:4b:90:e2:06:b4:4a:b0:8d:08:d3:5a:c3:b0:75:6d:ef:63:
         0d:11:6c:59:51:e5:90:b2:a6:04:ef:54:9d:79:92:53:94:79:
         81:01:2a:c2:db:e3:64:02:11:4d:c7:76:3b:ba:48:87:98:4d:
         0f:85:31:70:7b:cf:cb:b3:58:ba:27:2b:4f:b6:47:7a:99:7b:
         1e:43:33:d3:c5:fa:02:d7:0a:2d:66:47:76:76:7f:12:c4:10:
         d7:93:52:99:31:ef:91:4c:2b:89:54:9c:83:c6:cf:b5:51:82:
         ca:1c:24:e8:e5:6d:9c:7c:76:6b:9e:59:45:ce:0f:25:f1:9e:
         07:c2:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:03 2026 by rpki-client