Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eff43aba-ff66-3314-9e21-f51fa875f38a.roa
File:                     eff43aba-ff66-3314-9e21-f51fa875f38a.roa (raw, json)
Hash identifier:          pYqJb3uFN75TnOGUxFNlbo/aruL2n/d1iP2+LPXohgY=
Subject key identifier:   A0:61:C8:E1:0B:46:B0:25:BE:01:CF:40:79:DA:E6:13:6C:1B:15:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D47C4DD4C3A20B504C4ED5680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eff43aba-ff66-3314-9e21-f51fa875f38a.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     7016
IP address blocks:        184.113.0.0/18 maxlen: 18
                          184.114.128.0/17 maxlen: 17
                          2001:558:a002::/48 maxlen: 48
                          2001:558:a005::/48 maxlen: 48
                          2603:3087::/32 maxlen: 32
                          2603:3089::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:dd:4c:3a:20:b5:04:c4:ed:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=92dcf386-9de8-4331-8757-5f5c874de9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:1f:f9:1c:b6:19:94:8a:2b:dd:ba:fe:d9:
                    b5:ba:a9:fd:68:da:72:d2:d7:2f:dc:37:7b:42:cf:
                    ef:49:b8:f3:3f:80:37:e7:07:ce:bb:ba:cb:0a:7b:
                    d3:8a:64:a1:d6:50:dd:63:5a:7e:76:ec:f9:b8:19:
                    f3:62:c8:7b:f7:44:e4:04:e5:87:4e:5b:4f:e8:3d:
                    5e:22:f9:5e:b9:d7:20:7a:9c:7a:c3:48:08:ab:34:
                    eb:27:c2:d6:36:af:34:2d:6f:3a:f4:54:0e:95:2f:
                    8a:c6:bc:e7:62:87:62:d9:a2:91:9a:40:72:1b:c6:
                    ad:4b:ab:70:73:93:cd:fa:b9:26:bd:16:2f:1b:b5:
                    88:4e:ab:9f:59:c6:54:e3:34:b4:34:37:14:0e:2d:
                    15:0f:db:40:5d:dc:ee:07:ed:47:f2:32:e0:85:cf:
                    ba:9f:2a:98:15:e9:72:6f:80:92:74:10:81:85:1a:
                    fa:dd:09:07:cf:17:67:84:28:94:52:17:6d:94:8d:
                    e5:05:eb:f4:16:af:0f:a5:ac:d1:2a:4f:e5:ff:8c:
                    ab:5f:12:55:49:ef:91:ff:e3:ba:82:c7:6b:7b:1f:
                    45:e2:b1:90:1d:6f:7b:26:58:02:ed:ea:c2:65:6b:
                    21:6c:87:50:ec:cf:2d:51:11:a8:a4:f7:f4:da:a6:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:61:C8:E1:0B:46:B0:25:BE:01:CF:40:79:DA:E6:13:6C:1B:15:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eff43aba-ff66-3314-9e21-f51fa875f38a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.113.0.0/18
                  184.114.128.0/17
                IPv6:
                  2001:558:a002::/48
                  2001:558:a005::/48
                  2603:3087::/32
                  2603:3089::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:fe:9e:7a:7c:0f:53:91:1c:a3:d1:34:03:d2:ae:3e:78:f6:
         a2:dc:72:67:69:28:88:14:2c:6d:4d:fa:d2:5c:6e:5c:d6:9b:
         a5:23:5b:f7:57:c5:f2:cf:bf:6c:95:46:99:e7:3b:12:de:0a:
         99:73:5a:9f:ff:d8:13:1a:c7:fd:b2:cb:98:cb:47:6c:97:f6:
         44:4b:eb:8f:3d:0f:08:20:01:06:59:12:63:12:43:f7:d5:46:
         4c:4f:d9:55:cb:e0:b9:3e:0d:2a:06:6b:15:58:93:bc:5c:b3:
         48:1e:d3:0a:32:a3:a2:1f:98:d8:d5:e5:ca:bc:20:09:6e:f3:
         46:46:20:da:42:b6:0c:8c:a3:78:da:d9:d5:9a:cb:ae:78:cb:
         a1:61:20:e9:14:d5:a6:7e:8a:c1:c3:53:9d:e4:20:f8:be:e0:
         08:88:3a:a3:e6:65:d6:81:f2:71:3b:1e:c8:fd:db:68:d2:40:
         e6:33:cb:e3:e0:0d:b9:28:24:78:34:f5:a0:89:a5:3a:2d:79:
         90:df:7d:c2:f8:23:1f:49:aa:d2:9a:42:5d:00:fd:18:6d:65:
         38:b1:3f:1b:23:0d:52:7f:b5:2e:26:7a:0e:4d:04:7d:8f:5c:
         ca:f8:d1:9b:76:28:79:07:7f:98:8a:82:59:32:70:75:9b:4a:
         b0:55:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:57 2026 by rpki-client