Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c/25833c95-c185-3ae6-a8a4-14d87588bcbb.roa
File:                     25833c95-c185-3ae6-a8a4-14d87588bcbb.roa (raw, json)
Hash identifier:          oYUGW/8HuestBTrRwBvtDOIvVX21gloFBpDah8ljU7U=
Subject key identifier:   56:A4:17:11:38:9A:9F:E6:89:3D:83:FE:35:F7:1B:78:78:F2:A3:5E
Certificate issuer:       /CN=aef78a58-aed2-45c8-a5b3-e6b613cc354c
Certificate serial:       010D0C9F4328584DC0324D22030A829EC1DF4DF0
Authority key identifier: 5C:56:F0:FF:68:64:26:9D:E1:B7:3B:62:1B:C0:4C:53:F6:3E:5B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c/25833c95-c185-3ae6-a8a4-14d87588bcbb.roa
Signing time:             Thu 07 May 2026 04:18:08 +0000
ROA not before:           Thu 07 May 2026 04:18:08 +0000
ROA not after:            Wed 05 Aug 2026 04:16:13 +0000
asID:                     36728
IP address blocks:        66.111.112.0/20 maxlen: 20
                          67.22.160.0/20 maxlen: 20
                          74.213.192.0/20 maxlen: 20
                          74.214.224.0/19 maxlen: 19
                          162.245.40.0/22 maxlen: 22
                          192.150.142.0/24 maxlen: 24
                          209.127.64.0/21 maxlen: 21
                          216.181.160.0/22 maxlen: 22
                          2600:b00::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c/aef78a58-aed2-45c8-a5b3-e6b613cc354c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c/aef78a58-aed2-45c8-a5b3-e6b613cc354c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c0:32:4d:22:03:0a:82:9e:c1:df:4d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef78a58-aed2-45c8-a5b3-e6b613cc354c
        Validity
            Not Before: May  7 04:18:08 2026 GMT
            Not After : Aug  5 04:16:13 2026 GMT
        Subject: CN=9e5127aa-1c4a-41b0-9e38-436a782c1efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:58:b0:a9:5d:df:8b:6b:53:5f:85:8d:35:
                    ca:73:9b:60:ac:ac:ed:56:36:b3:80:63:bc:2c:d5:
                    14:8d:8e:6c:9e:f1:55:f7:00:e5:1c:33:04:78:bf:
                    20:35:da:79:eb:52:ba:c7:07:de:e2:63:dc:33:e2:
                    be:c6:58:a5:52:b5:ae:f9:a5:a7:47:e3:74:15:3e:
                    3b:db:2f:f7:0b:d4:2f:4e:4f:03:28:81:59:61:cd:
                    f8:ef:1d:0c:9a:52:18:ea:32:04:fd:c1:69:d3:1c:
                    63:20:c4:6c:e6:4a:09:81:9b:30:90:94:8f:df:0a:
                    48:fa:a2:74:af:2e:ca:17:fc:c7:85:ce:1b:8e:31:
                    d6:b4:57:a6:41:6a:8b:12:ee:98:4f:44:a8:0b:d9:
                    61:58:b2:cd:f0:35:08:e5:fe:f6:db:33:d1:e3:01:
                    96:60:61:c7:a0:f7:26:b0:de:91:bf:ee:e2:63:4e:
                    53:0a:c3:37:2c:dd:dc:ee:3e:75:83:fe:9e:3d:3b:
                    1b:8b:e3:d2:ec:18:a2:c8:8c:8c:e5:98:ad:15:8c:
                    be:02:fa:ec:e5:ab:a7:5d:da:ca:61:fa:ff:c9:1b:
                    5e:4e:53:dc:15:0a:0b:c6:e7:ec:ee:2f:99:87:88:
                    ed:2e:18:5b:c7:2b:3f:6b:d9:97:03:ac:99:7e:23:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:17:11:38:9A:9F:E6:89:3D:83:FE:35:F7:1B:78:78:F2:A3:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c/25833c95-c185-3ae6-a8a4-14d87588bcbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c/aef78a58-aed2-45c8-a5b3-e6b613cc354c.crl

            X509v3 Authority Key Identifier:
                keyid:5C:56:F0:FF:68:64:26:9D:E1:B7:3B:62:1B:C0:4C:53:F6:3E:5B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.111.112.0/20
                  67.22.160.0/20
                  74.213.192.0/20
                  74.214.224.0/19
                  162.245.40.0/22
                  192.150.142.0/24
                  209.127.64.0/21
                  216.181.160.0/22
                IPv6:
                  2600:b00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0b:3c:e3:cf:8c:48:c2:d0:8e:cd:15:8a:97:ea:14:e7:7e:
         c9:3d:c5:86:e7:8b:4d:c6:d3:fb:dd:c4:e7:f0:57:c4:dc:58:
         67:7f:95:23:bd:cc:bd:08:71:75:9f:38:c8:c6:55:d7:7a:81:
         bc:7c:f3:97:29:8f:41:99:e6:c0:db:12:75:cf:c9:91:d6:10:
         86:ec:a5:37:c7:4e:59:4f:ad:7c:19:f5:ca:75:5a:f7:83:94:
         33:88:26:72:fa:33:e0:d3:ef:80:0f:de:b6:8a:a9:0c:fd:0d:
         8f:4d:cb:d8:8f:bd:62:e1:68:ff:7f:b2:db:c6:df:aa:e6:5f:
         fa:d8:dc:e9:83:dc:04:d8:c1:0b:03:8b:be:a4:6a:9c:12:e4:
         ee:a2:45:29:9d:71:8a:7e:4b:dd:18:9f:91:f1:e0:3b:8a:e8:
         9d:43:80:fe:50:d7:4f:ea:c5:fe:b4:36:91:b8:92:af:4c:89:
         3a:b2:ac:a3:1f:7e:53:9e:9c:bc:d3:e9:f0:35:78:3e:04:8e:
         26:ad:fc:bb:5a:50:e6:f4:4d:61:63:c2:3c:a7:69:0a:59:7a:
         cb:49:0c:5b:c8:57:df:8e:0a:ce:41:cf:49:6f:47:b8:da:95:
         e1:70:24:09:96:6a:ce:22:cb:c9:5d:b3:eb:9c:b7:c9:2b:1a:
         c0:e5:9c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:52:29 2026 by rpki-client