Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/cdcc6238-1290-3738-a5a9-cfa3ac20cdfa.roa
File:                     cdcc6238-1290-3738-a5a9-cfa3ac20cdfa.roa (raw, json)
Hash identifier:          7tqdD1E2xhdC8V7sn2F1c6Y2ZiCa4wkUOYW5z6Zushg=
Subject key identifier:   A6:A5:BA:33:2F:F0:00:09:F8:B4:27:39:E7:B7:FC:76:D2:14:7C:AD
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584D2BDA0E3548FB6FA5B3FCDE80
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/cdcc6238-1290-3738-a5a9-cfa3ac20cdfa.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     19871
IP address blocks:        50.116.64.0/18 maxlen: 24
                          96.125.160.0/20 maxlen: 24
                          108.167.128.0/18 maxlen: 24
                          108.179.192.0/18 maxlen: 24
                          192.185.0.0/16 maxlen: 24
                          192.232.192.0/18 maxlen: 24
                          192.254.128.0/17 maxlen: 24
                          216.172.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:0e:35:48:fb:6f:a5:b3:fc:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=c9692557-b898-4941-942c-780fe31996ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:a0:2a:d7:4a:ab:e1:e2:f3:d6:da:a8:06:
                    36:f6:1c:fd:75:32:81:a2:74:2a:dc:61:87:ea:52:
                    cc:3d:ab:ec:a6:90:0d:3e:d1:5e:d3:fc:1d:0a:ca:
                    33:a9:0c:b6:20:ed:23:8f:e9:8c:97:88:ac:b7:9b:
                    cb:ad:8d:5c:03:67:99:45:66:34:28:2a:65:24:7d:
                    c1:6b:bc:04:5c:85:b3:b3:6d:c2:3f:87:4f:d0:0f:
                    ac:ae:7f:07:21:e5:05:4f:a0:da:e0:2f:d1:c6:3b:
                    a2:2e:f2:55:a2:4e:3e:0b:fa:c1:87:cd:d6:f9:79:
                    44:8d:c2:a2:e6:74:5e:d6:0b:99:c0:21:c7:4c:88:
                    75:08:57:ac:e6:38:7f:01:4f:92:f1:40:e5:e8:af:
                    6d:c6:a4:02:69:aa:56:f7:8f:45:53:c7:b7:a7:21:
                    63:a7:1c:fd:b8:7f:15:c4:df:e5:93:f9:19:55:dd:
                    c2:c2:51:3d:a2:b6:2c:bd:36:06:d7:b5:f1:9a:4e:
                    6a:24:7a:07:b4:9f:6d:dd:b7:ba:cf:c2:f4:c2:db:
                    46:b4:f4:60:90:a7:ae:a4:f6:c7:bd:4c:24:7f:70:
                    71:24:7a:7b:d3:5c:d7:a4:61:58:02:41:92:68:13:
                    63:0c:99:10:31:05:1c:b3:2c:e0:7c:b4:bd:b5:50:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A5:BA:33:2F:F0:00:09:F8:B4:27:39:E7:B7:FC:76:D2:14:7C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/cdcc6238-1290-3738-a5a9-cfa3ac20cdfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/18
                  96.125.160.0/20
                  108.167.128.0/18
                  108.179.192.0/18
                  192.185.0.0/16
                  192.232.192.0/18
                  192.254.128.0/17
                  216.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b6:20:39:ad:aa:c8:6e:1b:ba:c4:13:ca:49:44:87:d2:43:
         1c:5e:f3:c0:68:b3:da:c8:5d:07:e8:2f:e9:d8:47:f7:68:78:
         29:6e:d6:fe:8a:8f:8a:4f:10:a3:7b:8a:2f:e9:42:1c:8b:ba:
         12:3a:c7:2e:4a:2b:80:d5:09:64:b2:e8:4d:59:87:48:ed:3e:
         fe:b0:60:a1:2d:92:9c:6c:0d:56:f3:6f:b6:6e:63:c2:ef:3f:
         3a:69:30:bb:93:ff:55:90:0a:ae:24:f2:06:77:f5:c4:ca:1f:
         b8:03:a9:14:0e:79:45:17:44:b0:02:f3:2c:4d:4f:6d:19:ee:
         a5:a7:a2:c1:49:da:88:02:21:2f:08:36:29:3e:b9:f8:58:53:
         71:5c:0a:a6:5d:87:bd:29:1e:f8:6c:e1:a6:3b:0e:59:f3:9c:
         5b:0c:32:90:81:c2:5a:45:62:8e:c0:b8:eb:c2:9a:7d:4a:ef:
         84:82:55:a1:0d:d9:00:53:f9:4c:3c:9c:99:67:4a:45:98:31:
         4c:76:4f:2c:7d:26:26:8b:d3:4b:90:58:0a:ab:db:5f:9d:28:
         20:b0:1b:20:94:ad:39:ea:4c:4f:59:64:eb:f4:b1:10:5a:a6:
         f5:9d:f6:99:d6:99:7f:59:41:b8:6a:29:50:e3:ad:21:d4:66:
         92:10:4a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:32 2026 by rpki-client