Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa
File:                     002cd295-0845-3e0b-8fc6-6be378b880ee.roa (raw, json)
Hash identifier:          WVCm7DXjkRZ6xPIQKGqj2ZtpYIrvzfnMjggcLYn0xCA=
Subject key identifier:   A3:90:CC:A4:52:DA:52:EA:19:2C:97:F8:3C:42:49:C4:50:04:FC:DC
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584D2BDA0E905C7981B1E771B400
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     46606
IP address blocks:        162.210.70.0/23 maxlen: 24
                          162.222.225.0/24 maxlen: 24
                          162.222.226.0/23 maxlen: 24
                          162.251.80.0/24 maxlen: 24
                          162.251.85.0/24 maxlen: 24
                          199.79.62.0/23 maxlen: 24
                          204.11.58.0/23 maxlen: 24
                          207.174.212.0/22 maxlen: 24
                          208.91.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:0e:90:5c:79:81:b1:e7:71:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=28d0b33a-226c-475e-b525-980da552f542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:1c:de:2e:52:a1:42:e0:78:e4:fd:d7:54:
                    51:fd:b1:85:db:cf:f8:b4:b6:78:bc:3c:c5:a1:22:
                    57:79:a9:e4:00:47:ef:55:71:d4:d9:18:5e:dc:af:
                    6d:c2:91:09:cd:28:a6:15:d2:ad:4b:3f:60:de:f2:
                    e5:b0:c6:b5:11:ba:1f:be:e2:8f:a2:45:5b:fb:02:
                    ad:0c:a4:83:c5:33:a0:91:97:20:69:4d:b1:7c:8a:
                    a6:b0:f9:f9:bc:8d:f7:55:ac:22:ec:e3:b7:b1:d4:
                    82:80:a1:55:11:94:e5:91:ba:50:f7:3e:33:4d:0e:
                    d0:a3:71:dc:38:63:a5:46:fd:38:5e:c8:11:f9:70:
                    c7:b9:c7:fb:84:f8:73:50:ab:d4:8e:77:b4:71:a9:
                    05:94:7f:60:20:a6:26:16:2d:d4:14:f1:ce:09:f0:
                    10:8f:02:c4:13:1b:5f:b0:28:5f:df:ba:90:99:d5:
                    9c:8f:2b:8b:f5:46:76:bb:91:17:c8:5a:03:61:a6:
                    8e:67:f0:81:c1:ec:84:36:10:7d:a1:54:93:b8:51:
                    f1:21:0d:79:49:53:6c:bb:7a:63:93:41:47:ed:69:
                    68:a4:66:e2:1f:b5:d1:b3:88:21:a3:76:d1:ad:9e:
                    0d:2a:16:13:6a:09:c4:7f:9a:bb:38:4d:5b:1b:2f:
                    ca:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:90:CC:A4:52:DA:52:EA:19:2C:97:F8:3C:42:49:C4:50:04:FC:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.70.0/23
                  162.222.225.0-162.222.227.255
                  162.251.80.0/24
                  162.251.85.0/24
                  199.79.62.0/23
                  204.11.58.0/23
                  207.174.212.0/22
                  208.91.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:04:3d:b8:4a:fe:49:14:77:10:6c:a1:4c:81:89:fc:78:77:
         d1:3a:9a:b1:ef:9a:f4:6f:4f:fc:5d:16:6d:7a:f4:8b:90:74:
         9c:f8:95:8e:3f:00:b6:84:ea:f5:f0:52:f3:ea:de:43:b7:06:
         cc:29:b3:97:18:8a:cf:20:c2:a5:eb:7b:41:8b:08:0e:8a:6d:
         d6:10:24:9d:86:cf:53:4d:89:5e:d4:79:d9:17:b6:b6:4a:ac:
         83:7b:5a:be:30:1f:bf:01:18:86:3f:fb:4f:8d:c6:ab:1f:c8:
         30:82:c3:83:c6:3c:18:3f:62:c1:71:82:5e:9f:77:96:79:76:
         2c:7a:97:14:30:4c:8b:85:08:8c:86:04:88:1a:a2:55:ca:cc:
         3c:60:cf:a5:ad:cd:a8:1c:19:f9:43:6c:62:08:ff:d3:6c:b4:
         68:aa:c9:6d:7e:0b:60:35:b1:59:52:7d:07:77:63:c1:57:31:
         de:0e:92:2c:bb:15:bf:91:dc:8d:a0:dc:96:5c:e3:fd:a8:c3:
         59:e7:07:41:61:4d:d3:e6:d0:c0:2a:de:69:cf:7e:29:e8:fd:
         89:0d:71:8b:88:41:65:f4:6e:3d:12:84:15:1c:67:09:4c:87:
         6e:78:c1:0b:8a:88:63:07:f2:54:a4:12:22:5c:2c:5e:14:d5:
         80:84:81:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:37:17 2026 by rpki-client