Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a545cb6a-d67e-3908-a597-d3e26364ede7.roa
File:                     a545cb6a-d67e-3908-a597-d3e26364ede7.roa (raw, json)
Hash identifier:          ZQDLnTXf6PX1ZI0SWBkOHItZqp1dz4FVZWVyr02JJfg=
Subject key identifier:   26:BA:13:D7:D5:9C:98:82:F4:6D:6B:11:28:47:4F:D8:EB:77:83:34
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584D143DA7F6250B19A86DCE1480
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a545cb6a-d67e-3908-a597-d3e26364ede7.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     3842
IP address blocks:        23.226.232.0/21 maxlen: 24
                          107.161.20.0/22 maxlen: 24
                          107.161.28.0/22 maxlen: 24
                          107.191.100.0/22 maxlen: 24
                          107.191.114.0/23 maxlen: 24
                          107.191.120.0/22 maxlen: 24
                          107.191.124.0/22 maxlen: 24
                          167.88.116.0/22 maxlen: 24
                          167.88.120.0/22 maxlen: 24
                          192.30.32.0/22 maxlen: 24
                          192.73.232.0/21 maxlen: 24
                          192.184.80.0/21 maxlen: 24
                          192.249.56.0/22 maxlen: 24
                          199.241.28.0/22 maxlen: 24
                          2604:180::/48 maxlen: 48
                          2604:180:a::/48 maxlen: 48
                          2604:180:b::/48 maxlen: 48
                          2604:180:f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:a7:f6:25:0b:19:a8:6d:ce:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=e22d05ac-f632-4f34-a6a7-45d940742703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:39:f4:09:15:b4:5b:b1:89:03:d9:92:05:d3:
                    9e:df:d7:3b:53:dc:3b:3e:56:c7:09:cb:5b:fe:f9:
                    c9:4e:f2:92:e4:3f:71:8d:2c:00:f3:1f:3c:1f:9d:
                    69:49:ea:6a:67:40:a8:bd:62:c6:85:0c:db:69:cb:
                    4b:02:dd:23:cd:0e:aa:1b:be:8c:b7:ca:d9:cc:32:
                    fd:78:7c:ff:da:38:8b:55:22:9c:85:4f:00:ec:e7:
                    71:cc:9e:16:11:05:44:75:97:1b:b8:76:50:c8:7b:
                    20:35:4d:f4:19:6f:9e:58:0f:1a:01:2b:55:6b:95:
                    0d:37:70:26:a2:1e:b3:9a:85:cc:94:aa:b7:0c:2d:
                    09:5c:85:3d:45:7c:f7:6f:3d:27:49:c5:f0:a8:ea:
                    e4:98:dc:8d:a5:c0:2d:50:01:8c:34:25:fe:6a:7c:
                    dc:2e:74:8f:58:42:2e:c6:04:c5:2b:6f:0a:d6:c6:
                    d4:26:df:61:e2:1e:55:c7:f8:07:5e:83:69:bd:fb:
                    8a:6d:e8:da:d4:54:91:bf:17:86:67:48:af:81:3a:
                    e2:f6:73:b5:30:99:27:1d:eb:66:21:38:3a:62:6b:
                    cb:68:cc:1b:c6:52:a1:af:d7:3e:41:d6:4d:59:4d:
                    1e:1c:4f:e8:01:08:7d:88:bb:df:31:41:ba:c9:ba:
                    e4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BA:13:D7:D5:9C:98:82:F4:6D:6B:11:28:47:4F:D8:EB:77:83:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a545cb6a-d67e-3908-a597-d3e26364ede7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.232.0/21
                  107.161.20.0/22
                  107.161.28.0/22
                  107.191.100.0/22
                  107.191.114.0/23
                  107.191.120.0/21
                  167.88.116.0-167.88.123.255
                  192.30.32.0/22
                  192.73.232.0/21
                  192.184.80.0/21
                  192.249.56.0/22
                  199.241.28.0/22
                IPv6:
                  2604:180::/48
                  2604:180:a::/47
                  2604:180:f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a0:31:ec:46:6e:69:3b:bf:0b:cd:89:46:ce:33:63:30:72:
         85:55:31:0a:8a:d4:d9:82:71:4d:f3:fc:57:eb:22:b4:48:1f:
         f3:84:38:b8:fc:44:45:fc:d8:bc:86:34:82:75:f6:5b:d4:e5:
         dd:f0:f0:5f:6b:ab:13:41:5f:3e:8e:31:fa:87:93:75:c5:21:
         bb:df:d8:96:31:07:d1:2f:77:78:15:17:4a:4a:c1:e4:c7:e4:
         48:49:6e:76:72:eb:a6:f8:41:78:06:ff:ba:3f:5e:e4:ef:ac:
         ae:d0:2d:44:84:a0:8a:7c:26:f2:c8:dd:28:19:2e:3b:d6:2d:
         c7:54:3e:06:91:86:fc:e6:80:1d:09:87:6b:76:77:26:6d:d1:
         b2:7f:04:49:fb:7a:82:00:89:73:64:0b:1d:a4:4d:0f:09:de:
         4f:f7:f4:74:9a:12:e8:8d:b3:fd:bc:00:ad:15:83:f8:f1:6b:
         cd:ce:56:70:aa:07:2b:d9:54:e0:fc:e3:8d:ca:79:e9:c5:8e:
         c7:a7:15:97:91:82:80:9c:ab:4e:69:e0:d0:0c:87:e2:ba:63:
         d9:1b:13:45:70:86:dc:95:b9:91:74:92:c4:b6:86:52:04:8f:
         eb:31:fa:66:fa:e2:3e:9f:72:64:7c:1e:da:30:ef:03:a9:52:
         14:05:ac:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:57:41 2026 by rpki-client