Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff8fb462-3398-3da6-a21d-5fffe9839f2c.roa
File:                     ff8fb462-3398-3da6-a21d-5fffe9839f2c.roa (raw, json)
Hash identifier:          eOfCf1sMkMAEeA6k6nRKHvknNiEXmxLQtE26kp7AbSc=
Subject key identifier:   E6:8D:67:FA:CF:6D:22:6E:C3:18:17:64:A5:BC:26:BF:48:29:41:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D60E4FB1E809BFE2AF8EDCDB0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff8fb462-3398-3da6-a21d-5fffe9839f2c.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     213120
IP address blocks:        199.46.32.0/24 maxlen: 24
                          199.46.33.0/24 maxlen: 24
                          199.46.34.0/24 maxlen: 24
                          199.46.35.0/24 maxlen: 24
                          199.46.36.0/24 maxlen: 24
                          199.46.37.0/24 maxlen: 24
                          199.46.38.0/24 maxlen: 24
                          199.46.39.0/24 maxlen: 24
                          199.46.40.0/24 maxlen: 24
                          199.46.41.0/24 maxlen: 24
                          199.46.42.0/24 maxlen: 24
                          199.46.43.0/24 maxlen: 24
                          199.46.44.0/24 maxlen: 24
                          199.46.45.0/24 maxlen: 24
                          199.46.46.0/24 maxlen: 24
                          199.46.47.0/24 maxlen: 24
                          199.46.48.0/24 maxlen: 24
                          199.46.49.0/24 maxlen: 24
                          199.46.50.0/24 maxlen: 24
                          199.46.51.0/24 maxlen: 24
                          199.46.52.0/24 maxlen: 24
                          199.46.53.0/24 maxlen: 24
                          199.46.54.0/24 maxlen: 24
                          199.46.55.0/24 maxlen: 24
                          199.46.56.0/24 maxlen: 24
                          199.46.57.0/24 maxlen: 24
                          199.46.58.0/24 maxlen: 24
                          199.46.59.0/24 maxlen: 24
                          199.46.60.0/24 maxlen: 24
                          199.46.61.0/24 maxlen: 24
                          199.46.62.0/24 maxlen: 24
                          199.46.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fb:1e:80:9b:fe:2a:f8:ed:cd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=c5052494-361d-41be-97d5-069b052a39e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:99:a1:f4:d2:85:f2:b5:59:3d:3f:46:d2:
                    b7:45:ac:6a:6e:6e:bc:28:b3:28:73:de:2f:b2:4f:
                    c8:47:9d:05:33:6d:e5:51:d3:58:6e:93:74:e2:13:
                    c3:66:2d:45:1d:e1:3d:aa:43:e6:e8:55:b6:d9:93:
                    d0:c8:b9:cd:ae:bf:a4:8a:08:13:2d:ab:b9:df:0c:
                    e6:18:3c:eb:75:5d:be:b5:07:3e:df:df:ed:50:4d:
                    4d:ed:b8:cd:4a:b3:04:7c:d0:f7:fd:64:35:a9:5d:
                    36:19:b1:e7:96:29:56:7e:8d:09:9b:24:4a:a8:2d:
                    b3:60:04:3f:e6:fd:a9:f9:00:b6:59:4f:d4:c3:99:
                    3a:3f:c5:8c:62:1d:e3:cf:e9:63:a0:e0:38:e8:34:
                    63:bb:57:0a:ba:95:f4:cc:03:d0:17:24:80:95:f9:
                    31:94:ce:c3:58:57:60:ec:af:eb:eb:4d:2b:d5:3c:
                    06:af:24:87:6d:75:71:f3:9a:82:6e:a0:c1:a4:a3:
                    24:46:9e:f9:3f:6e:88:f8:3f:8d:08:af:3f:37:4f:
                    9f:3c:12:6c:00:b1:5a:6a:b6:87:a3:cb:6b:e3:bd:
                    a6:78:51:86:f8:fb:2a:fb:70:35:79:cd:3a:08:91:
                    96:a8:f4:e3:c3:7c:e2:46:0e:30:11:b3:9b:a7:21:
                    28:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8D:67:FA:CF:6D:22:6E:C3:18:17:64:A5:BC:26:BF:48:29:41:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff8fb462-3398-3da6-a21d-5fffe9839f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.46.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:67:7a:fe:81:2a:c8:f6:2b:58:1e:72:31:72:f5:cc:92:57:
         29:b1:ee:3b:af:16:c6:f2:6d:7d:29:55:cf:00:b1:14:03:6e:
         aa:bc:4f:2e:cb:2e:a6:c8:a9:8f:a2:bd:fe:2d:3a:e9:fd:87:
         2d:b4:50:8f:4a:63:44:99:62:5f:61:5c:c1:cc:9e:5a:f3:4f:
         3f:03:aa:10:e6:a6:f7:05:3b:47:e3:d6:d5:47:21:f3:57:bc:
         ea:20:8e:73:7c:71:48:a6:a3:0c:51:ba:32:fd:73:e9:3d:fd:
         02:35:81:cd:4e:21:25:2c:60:ce:46:e4:9a:53:16:41:24:bc:
         76:58:46:04:d1:19:28:f0:1b:de:92:27:3f:46:b9:4f:55:ac:
         c8:4b:fc:a2:e7:d6:ef:b9:2c:94:a1:a0:26:45:a3:10:dc:69:
         cb:be:36:c8:56:39:d7:0d:14:67:5d:ff:27:55:7e:04:1c:84:
         04:98:ec:3d:a5:82:4a:b0:56:2e:0c:53:8e:e2:55:c3:ff:a6:
         83:43:6a:fe:ad:d6:88:79:3e:c1:d8:64:5f:7e:32:48:b5:62:
         ce:f0:f2:bc:fd:00:03:d8:5b:f0:b1:27:06:60:49:ad:ae:d9:
         03:90:27:6c:85:85:81:7b:4d:96:b1:53:ff:9b:31:64:d5:81:
         26:97:72:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:31 2026 by rpki-client