Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa
File:                     8b7a8af7-f7ba-312f-8140-005dd293f00c.roa (raw, json)
Hash identifier:          sGwwEh8WBYtl7Ve72KkLBcikaFwRtsyPnXX99CSz9MU=
Subject key identifier:   72:F0:4C:8D:88:B0:92:99:6C:A7:41:1B:4C:E0:BB:BF:73:E6:9E:C7
Certificate issuer:       /CN=04b45e42-c2e7-4254-9ecb-472a7693a730
Certificate serial:       010D0C9F4328584F71ED8B7B9F3BB5A7FC330800
Authority key identifier: DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     397377
IP address blocks:        63.246.143.0/24 maxlen: 24
                          161.199.88.0/24 maxlen: 24
                          207.229.66.0/24 maxlen: 24
                          208.74.67.0/24 maxlen: 24
                          2605:51c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:8b:7b:9f:3b:b5:a7:fc:33:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b45e42-c2e7-4254-9ecb-472a7693a730
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=3bffbbae-5c6d-4268-b2ef-423c39be478c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a3:b9:e3:ce:11:9e:d9:e0:6d:4e:a4:48:70:
                    23:f4:62:57:4e:88:52:21:98:a6:b2:4c:49:44:b3:
                    59:cd:85:d5:b5:d7:5c:d1:86:6d:9d:7d:34:f4:3b:
                    79:88:87:5c:54:69:fc:aa:42:7b:9b:40:d4:70:a6:
                    ce:d2:e8:50:ab:8d:63:dd:5b:d7:38:e3:f0:7a:62:
                    9f:1c:ee:1d:70:f9:e1:8e:75:a3:1a:2b:6a:44:ad:
                    29:95:13:d7:06:5f:03:8c:0a:36:aa:68:ab:22:b3:
                    f9:45:f3:ff:39:70:21:3f:98:6d:14:c2:bd:4d:87:
                    6f:d9:f8:72:2f:78:b2:a0:21:5f:f8:db:77:f4:94:
                    95:f7:d6:10:ce:1a:a1:4d:4e:55:f7:ef:a7:4a:a2:
                    3c:d9:f8:80:ef:ae:99:da:bd:9e:51:d7:02:f3:06:
                    f6:2d:e4:4b:17:e0:1c:d1:85:75:9d:af:72:f2:08:
                    b6:53:f0:c8:a4:38:92:7d:1d:5d:45:f7:d3:fe:ca:
                    a3:5f:6f:cd:77:99:f1:53:f3:e1:73:08:3b:d2:0c:
                    1f:9e:21:59:28:88:c0:9b:77:0e:eb:5a:e8:94:52:
                    ed:7c:be:39:41:95:d0:f3:dc:46:9e:42:31:81:5b:
                    22:7f:0a:43:a2:cc:db:f1:fe:be:fc:ec:c5:5f:6d:
                    3d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F0:4C:8D:88:B0:92:99:6C:A7:41:1B:4C:E0:BB:BF:73:E6:9E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.crl

            X509v3 Authority Key Identifier:
                keyid:DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.143.0/24
                  161.199.88.0/24
                  207.229.66.0/24
                  208.74.67.0/24
                IPv6:
                  2605:51c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:a8:12:9a:79:81:5f:37:fa:4d:82:1f:cc:59:21:b1:17:
         93:bd:69:38:da:d2:58:4b:fa:6e:82:66:11:22:f4:f6:ff:f0:
         6c:0d:ac:77:9e:22:02:d9:52:38:8d:cb:c6:9b:92:cc:6e:58:
         eb:0d:33:90:80:8e:30:69:36:ae:2a:08:db:0d:7c:8e:03:5d:
         5b:e6:30:02:f8:e4:90:e3:f6:bd:25:b6:d7:cb:61:a2:be:ec:
         22:f5:7a:4c:09:70:30:ab:52:e4:4b:20:41:65:0b:44:81:1e:
         52:f0:79:24:8a:2e:cf:4b:7c:e3:78:a5:ad:77:78:4a:f3:c7:
         ff:9a:8e:ea:f4:c9:72:09:3a:90:15:ef:c3:5d:ac:69:c8:fb:
         19:dc:95:56:34:ea:1a:1f:ab:10:1e:65:fe:99:41:08:b0:b7:
         b3:3f:60:dd:f8:08:1b:1d:de:fa:bf:8a:b2:84:73:00:96:df:
         a2:bf:54:c3:cd:4e:9c:5d:85:12:1a:20:3e:c0:de:d7:ca:d7:
         1a:08:ef:99:80:70:97:f7:1c:6e:4c:a7:11:a5:66:c8:cb:10:
         f4:49:cd:29:b1:5d:d8:66:28:90:21:1a:c1:15:1a:7a:b0:55:
         7d:82:e9:88:b0:ea:b9:6c:a2:0c:c6:e3:a7:2f:4c:89:ef:d0:
         11:70:d1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:34:10 2026 by rpki-client