Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f9d5f7f4-df4e-3d14-95a6-bda70afc631a.roa
File:                     f9d5f7f4-df4e-3d14-95a6-bda70afc631a.roa (raw, json)
Hash identifier:          QV55/Me7SigQ36DXHSmsxNm1r2Bp52Pufme6y2s4xr4=
Subject key identifier:   8C:B5:63:8C:E0:F4:72:ED:79:AC:B1:66:56:64:F2:F5:4B:FB:9B:5F
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584CF6ECD597A0490CC117D2FB68
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f9d5f7f4-df4e-3d14-95a6-bda70afc631a.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     32592
IP address blocks:        64.239.202.0/24 maxlen: 24
                          64.239.203.0/24 maxlen: 24
                          64.239.204.0/24 maxlen: 24
                          64.239.205.0/24 maxlen: 24
                          64.239.206.0/24 maxlen: 24
                          64.239.207.0/24 maxlen: 24
                          64.239.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:d5:97:a0:49:0c:c1:17:d2:fb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=ac1a48bb-5aab-4f55-9e06-e52559bd16fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:76:5b:47:dd:83:13:e5:a2:18:52:db:84:37:
                    7d:73:0f:fd:41:12:52:79:3b:bd:1c:b5:7d:29:43:
                    31:fa:59:bf:d6:ab:1d:8c:c6:72:f3:20:ec:b8:36:
                    db:b6:4d:5e:2d:60:e7:11:1f:40:82:bc:28:21:0e:
                    6c:87:ef:ed:42:e0:87:79:ed:7c:74:85:3f:54:0a:
                    9b:ac:b6:ed:74:87:58:3c:61:bf:75:ae:15:b7:81:
                    d6:f5:0f:f1:60:81:9b:a5:13:4e:dd:26:bb:0f:70:
                    02:e1:23:4e:a4:c5:0f:40:f8:16:a5:aa:52:e6:74:
                    c2:b3:74:ad:60:34:ff:0d:76:19:4a:bc:85:b4:94:
                    b3:a2:09:bb:09:0b:2e:63:2e:77:02:6d:d4:76:9d:
                    b6:91:e3:69:2a:47:07:4f:2c:82:ba:0e:b7:6c:e5:
                    f4:ca:69:79:71:86:d4:01:f3:a4:c1:09:16:39:3a:
                    c3:a2:21:de:08:59:f6:00:ac:c6:4b:19:d5:df:8b:
                    f6:c1:e3:2a:1d:98:16:11:08:70:04:70:36:36:08:
                    a2:c9:9a:db:7e:1a:ce:be:40:ea:c7:57:5e:73:af:
                    df:56:f8:60:6a:b6:a0:cb:6d:59:ae:2a:9e:9f:04:
                    d2:1f:ec:71:91:78:6f:65:31:03:cd:61:2f:27:93:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B5:63:8C:E0:F4:72:ED:79:AC:B1:66:56:64:F2:F5:4B:FB:9B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f9d5f7f4-df4e-3d14-95a6-bda70afc631a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.202.0-64.239.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2b:0b:7b:8c:3d:72:3a:d7:25:37:8c:6c:88:5d:18:61:a5:
         72:af:bb:b8:48:62:7a:27:b3:a5:d7:48:66:1b:2d:73:b1:f5:
         31:56:bc:10:1d:7b:93:85:38:b2:9d:f4:61:4d:de:e9:41:91:
         0d:98:c7:64:4a:bd:f7:e7:e0:73:9e:f8:05:17:a7:59:c3:3a:
         5f:95:f1:15:dd:d9:6f:f5:28:62:ba:14:a3:fa:bf:5d:64:fa:
         af:c5:14:d2:81:62:ff:dc:d5:07:07:e4:35:b6:e8:15:8f:39:
         08:33:29:34:71:64:c3:58:8b:16:7e:d9:d5:92:6c:38:05:33:
         ff:c7:75:d1:5c:9c:35:3f:25:f0:1d:33:4e:c9:c1:4e:09:d3:
         67:5a:b5:cf:5a:c9:8d:5d:4d:71:f9:f5:c1:63:09:71:b6:11:
         b8:91:13:b3:d6:90:27:f0:1d:62:16:33:a9:2b:c5:9c:2f:5e:
         e9:80:a2:cb:c2:03:73:84:5b:78:98:19:32:ca:87:0b:24:10:
         09:1a:6d:41:57:9d:ba:7b:1e:ea:3b:3b:5b:5a:a4:0f:f1:5b:
         c5:bb:bf:55:fa:94:6f:e9:3e:ae:56:b3:01:55:3e:01:53:5d:
         c2:87:c7:28:79:4a:a8:18:c8:2f:4c:4d:03:58:e5:96:03:71:
         12:b8:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:18:35 2026 by rpki-client