Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa
File:                     90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa (raw, json)
Hash identifier:          mxk5Dzu4PVsKT5gRcV29rbQ6RREO7G/pgUwu06mcfKQ=
Subject key identifier:   01:64:EF:73:2B:98:2E:82:72:12:FF:82:8F:99:57:1E:BA:6C:C1:D8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D20AF42DA5807B3F8806D5EC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6424
IP address blocks:        128.242.128.0/19 maxlen: 24
                          128.242.224.0/20 maxlen: 24
                          128.242.240.0/20 maxlen: 24
                          130.94.176.0/20 maxlen: 24
                          130.94.208.0/20 maxlen: 24
                          131.103.0.0/20 maxlen: 24
                          131.103.96.0/20 maxlen: 24
                          168.143.160.0/20 maxlen: 24
                          198.64.80.0/20 maxlen: 24
                          198.64.192.0/19 maxlen: 24
                          204.1.192.0/19 maxlen: 24
                          204.3.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:42:da:58:07:b3:f8:80:6d:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=829319cf-4caa-4a52-9519-680142cf0ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ce:cf:32:fa:32:e4:2a:24:8d:34:cc:10:ed:
                    74:10:83:ed:c5:5f:90:f1:64:ac:88:78:8b:77:f8:
                    03:e1:fd:be:70:81:35:db:01:4f:39:c6:d1:b1:67:
                    d1:55:ff:9e:8e:67:47:8c:7a:33:94:ec:96:a5:6a:
                    c6:e8:6d:9c:bd:72:64:79:a3:70:40:88:44:02:7a:
                    b7:64:fb:15:76:39:b8:0a:7d:28:3e:79:ea:b7:c7:
                    d6:87:8a:e7:a7:09:74:a1:7d:4f:20:1a:7f:6e:da:
                    91:14:9f:34:1e:24:d3:64:a1:c3:3e:20:87:e1:12:
                    a6:be:7e:e3:f4:e1:eb:08:06:fb:ed:98:f3:f2:08:
                    bd:ac:34:92:60:d5:58:47:d4:ff:22:1c:ad:74:8c:
                    41:9a:88:f5:f6:40:55:a1:8e:76:df:90:50:fc:9c:
                    dc:27:f8:24:53:3c:ef:7e:8b:f8:ba:61:ab:17:6a:
                    cd:d3:d8:f6:d7:12:f6:07:24:7c:f3:5a:bc:27:e6:
                    45:36:b9:a8:1e:75:84:aa:64:3e:f8:ee:e9:d0:90:
                    fc:aa:51:26:2d:c6:61:57:a0:d1:4e:c7:47:05:93:
                    bc:b6:cc:a1:88:a8:56:dc:ac:c7:b8:a8:22:65:be:
                    a5:d3:81:6b:9f:95:76:8c:13:5c:7d:5c:d2:c1:24:
                    83:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:EF:73:2B:98:2E:82:72:12:FF:82:8F:99:57:1E:BA:6C:C1:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.242.128.0/19
                  128.242.224.0/19
                  130.94.176.0/20
                  130.94.208.0/20
                  131.103.0.0/20
                  131.103.96.0/20
                  168.143.160.0/20
                  198.64.80.0/20
                  198.64.192.0/19
                  204.1.192.0/19
                  204.3.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:1a:00:1a:d3:d2:1f:f1:51:ef:a7:57:9a:77:fb:03:c3:e9:
         96:04:fb:8c:f8:ea:0a:7a:d9:d8:16:ac:61:4e:21:f6:d1:ad:
         78:2c:53:60:76:ec:76:6a:cf:8b:3e:7b:5d:0d:cb:72:b4:9b:
         8e:89:dc:cd:29:65:f0:a0:6b:81:23:27:e7:81:41:f0:c9:62:
         9d:fb:2e:3e:ca:72:9c:1f:d9:81:49:d5:c6:12:d8:34:bd:3f:
         5c:32:be:3c:cc:1f:4f:30:50:92:bf:df:3b:d0:1a:60:26:fc:
         0d:11:cf:cc:51:5c:c0:f7:3c:4c:af:69:de:ca:ac:fe:a3:d7:
         72:fd:4a:51:44:e0:96:72:7e:5d:6d:e1:57:8e:84:61:85:7f:
         bd:6e:8a:c0:72:ba:56:6c:82:34:1d:f9:34:85:c8:8c:cd:98:
         e5:f3:e0:2a:59:58:9a:38:af:53:47:82:33:2e:17:70:2f:48:
         98:9b:66:2a:ce:24:f8:b9:1c:c3:5e:2e:a0:db:bd:de:f3:76:
         6a:7a:ab:08:c3:93:e5:75:83:12:c9:f0:1a:e0:47:56:60:dc:
         ae:41:96:e8:39:20:44:fd:cd:64:6e:5b:8d:a4:54:fc:96:63:
         5b:aa:1e:44:8e:f0:44:82:1b:4e:81:c5:f1:86:6d:20:87:2b:
         bb:1b:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:07 2026 by rpki-client