Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa
File:                     8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa (raw, json)
Hash identifier:          BxEyLav9pX0O84jA74oKvYxP2hEZ5zXCcwm8kgwPDHg=
Subject key identifier:   51:33:F4:1C:AC:0E:30:74:0E:6C:93:76:D2:F6:A7:6E:CA:D7:5F:F8
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584DD0905761937DDA0E781CBB40
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     6621
IP address blocks:        72.169.32.0/19 maxlen: 19
                          72.169.64.0/22 maxlen: 22
                          72.169.68.0/23 maxlen: 23
                          72.169.70.0/24 maxlen: 24
                          72.169.72.0/24 maxlen: 24
                          72.169.74.0/23 maxlen: 23
                          72.169.76.0/22 maxlen: 22
                          72.169.80.0/22 maxlen: 22
                          72.169.81.0/24 maxlen: 24
                          72.169.82.0/23 maxlen: 23
                          72.169.84.0/22 maxlen: 22
                          72.169.88.0/22 maxlen: 22
                          72.169.92.0/22 maxlen: 22
                          72.169.96.0/22 maxlen: 22
                          72.169.100.0/22 maxlen: 22
                          72.169.104.0/22 maxlen: 22
                          72.169.108.0/22 maxlen: 22
                          72.169.112.0/20 maxlen: 20
                          72.169.192.0/20 maxlen: 20
                          72.169.208.0/22 maxlen: 22
                          72.169.212.0/23 maxlen: 23
                          72.169.214.0/24 maxlen: 24
                          72.169.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:57:61:93:7d:da:0e:78:1c:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=25c9df61-e418-49b8-bb8a-67f12bbb5b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c1:37:75:50:af:12:65:55:32:f9:90:67:f5:
                    ce:83:1c:8d:c3:e4:3e:54:fe:fd:46:4b:59:d3:24:
                    86:71:f8:49:b5:a3:92:06:23:f1:d7:fc:76:5f:4e:
                    64:ea:d5:90:f7:48:7c:c5:1e:b7:f5:18:c7:9d:30:
                    3d:c1:5b:5b:e9:e4:a4:ed:55:22:e4:b2:1b:d7:84:
                    0f:91:fe:f4:eb:8f:3a:0e:6c:4e:77:f6:65:07:bf:
                    b3:2b:94:1b:49:38:b5:04:7d:b0:29:8f:1c:1c:ee:
                    5e:80:be:3b:cc:23:33:77:94:43:2e:17:9f:e0:e0:
                    99:0c:6d:e6:c4:69:a4:b0:d2:f9:6a:ef:2e:5e:72:
                    89:3e:37:69:25:aa:d4:b2:c1:09:e6:3f:28:49:19:
                    cb:7f:c5:d4:b5:24:53:99:e4:d0:e2:7c:bb:17:ad:
                    e5:e1:0e:ef:b4:ef:77:32:1a:42:c9:40:57:7a:2b:
                    60:d2:c9:cd:eb:cf:a4:b0:9e:0c:c4:60:99:61:96:
                    b8:8e:bd:27:70:44:e4:c4:c0:26:6b:ad:af:2a:b6:
                    04:b9:d3:ac:f6:c4:c5:99:11:c6:ae:7f:17:7b:34:
                    bb:c8:4f:62:d5:26:0c:b9:86:d8:09:fa:3e:07:3e:
                    2e:c3:5a:1e:a6:be:c5:1a:cf:7b:67:d8:c5:59:f4:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:33:F4:1C:AC:0E:30:74:0E:6C:93:76:D2:F6:A7:6E:CA:D7:5F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.169.32.0-72.169.70.255
                  72.169.72.0/24
                  72.169.74.0-72.169.127.255
                  72.169.192.0-72.169.214.255
                  72.169.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:04:84:25:b1:52:34:ba:de:8c:8f:92:f8:de:aa:6f:b6:47:
         fe:bd:34:d7:cc:4e:28:58:75:f3:f9:de:84:c0:4f:6c:78:90:
         2a:51:53:c1:40:aa:2a:d7:f5:2e:40:f6:2a:7a:f9:16:6c:cf:
         12:8e:1f:84:35:2b:13:4f:99:43:56:13:5a:b8:22:54:e6:c6:
         d1:b6:9c:62:39:68:19:aa:63:f5:14:c1:35:e1:81:02:e3:fc:
         62:a2:63:8c:bd:49:a4:dd:39:88:54:64:10:a9:07:e0:90:d9:
         ba:35:96:fb:b0:36:7c:fe:ac:ea:5b:ae:5b:f8:48:6a:e4:e5:
         31:c9:0a:b4:cd:6b:78:c5:53:52:bb:fc:99:2c:75:ce:90:ab:
         c0:48:c4:ab:f0:14:de:dc:bb:5f:c6:07:c6:9a:57:ec:99:49:
         e1:12:eb:57:9b:9f:6a:be:05:34:2d:44:20:28:3f:0e:b4:d6:
         8f:be:cc:bb:49:d8:f5:b4:0d:84:46:be:cb:c7:47:01:1c:c7:
         08:27:86:82:9c:1e:8d:17:3e:0e:e7:f0:6d:e0:10:f1:8c:90:
         e6:1f:b0:86:2e:7e:35:6a:05:97:75:e3:50:49:b1:90:a0:59:
         39:4b:c2:64:82:a5:1f:c1:0f:bb:66:29:e6:50:92:29:cc:2d:
         96:46:f2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:10:39 2026 by rpki-client