Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/3a2e2ee3-ef73-3a0a-9029-6e6ec007d5d9.roa
File:                     3a2e2ee3-ef73-3a0a-9029-6e6ec007d5d9.roa (raw, json)
Hash identifier:          JSk5JL8uHcsCPOTa9aEJKZLxVZHFLeL4tnhSDNHOn2s=
Subject key identifier:   95:20:D1:FB:78:AA:07:57:48:A9:09:FA:92:11:50:AD:BC:3A:1D:46
Certificate issuer:       /CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6
Certificate serial:       010D0C9F4328584D9D9D95A53D67A30C85ED1D60
Authority key identifier: D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/3a2e2ee3-ef73-3a0a-9029-6e6ec007d5d9.roa
Signing time:             Fri 24 Apr 2026 19:01:00 +0000
ROA not before:           Fri 24 Apr 2026 19:01:00 +0000
ROA not after:            Thu 23 Jul 2026 19:01:00 +0000
asID:                     18859
IP address blocks:        64.250.0.0/20 maxlen: 20
                          68.235.160.0/20 maxlen: 20
                          70.40.16.0/20 maxlen: 20
                          162.222.244.0/22 maxlen: 22
                          198.46.12.0/22 maxlen: 22
                          204.154.124.0/22 maxlen: 22
                          216.45.64.0/19 maxlen: 19
                          216.82.128.0/19 maxlen: 19
                          2604:af80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9d:9d:95:a5:3d:67:a3:0c:85:ed:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6
        Validity
            Not Before: Apr 24 19:01:00 2026 GMT
            Not After : Jul 23 19:01:00 2026 GMT
        Subject: CN=6572c566-9b2e-4ebb-82c9-214b5fa7ac72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:78:f8:58:b1:9d:f0:81:23:aa:00:ca:f5:
                    60:57:9f:15:21:1e:02:06:bc:e0:41:19:0a:35:45:
                    68:19:47:e0:c5:4f:65:03:51:39:87:23:d5:95:fd:
                    dc:c5:5b:a4:d9:75:27:8b:2e:26:95:99:c0:97:44:
                    02:c4:87:c9:57:b9:58:d0:e0:02:34:52:5d:62:03:
                    93:48:87:86:17:93:66:b7:75:2f:4f:0a:b2:82:c1:
                    2b:d6:fe:c8:db:74:40:da:6a:5e:f7:90:96:f8:b6:
                    10:68:2a:8f:5d:a4:60:e8:6e:71:b5:63:9a:d9:89:
                    32:a7:05:5f:02:2e:d3:b4:6d:f4:7b:4a:51:c9:08:
                    90:02:de:b4:f6:d7:95:6b:15:0b:d7:34:03:00:5c:
                    bd:0b:08:18:d7:d0:fd:ca:f4:23:8f:17:75:dd:4b:
                    1a:9e:97:7e:89:0f:0d:8f:7b:8a:ec:d0:1b:e3:a7:
                    75:2f:8a:a7:78:ab:ef:d2:8b:9c:7c:d2:9f:53:14:
                    b0:34:0f:88:52:7b:bc:81:24:1f:92:93:28:d0:b6:
                    c3:22:0f:20:0a:28:0f:2e:43:83:4f:93:ac:df:31:
                    f0:b7:b3:56:4b:fa:7d:42:c4:ef:7b:c7:f5:cd:34:
                    be:1d:04:e9:92:72:43:a9:50:5e:a1:0c:f3:b5:a5:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:20:D1:FB:78:AA:07:57:48:A9:09:FA:92:11:50:AD:BC:3A:1D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/3a2e2ee3-ef73-3a0a-9029-6e6ec007d5d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl

            X509v3 Authority Key Identifier:
                keyid:D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.0.0/20
                  68.235.160.0/20
                  70.40.16.0/20
                  162.222.244.0/22
                  198.46.12.0/22
                  204.154.124.0/22
                  216.45.64.0/19
                  216.82.128.0/19
                IPv6:
                  2604:af80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f5:4a:c8:e0:09:7c:bf:5c:31:90:d2:8f:60:19:10:02:4e:
         71:25:e8:4e:44:64:50:fc:60:de:c7:4a:2d:3b:23:3d:6e:42:
         a0:47:49:78:33:9c:8f:5e:f1:f2:0b:98:c3:62:03:de:40:9f:
         41:46:05:ae:8e:bb:44:de:cb:0e:87:b3:a9:f8:f4:15:f6:d7:
         dc:6a:54:d0:04:5f:a9:d6:32:d9:80:bd:13:af:2d:dc:0b:94:
         03:f8:61:0c:c1:30:0e:05:8f:c7:85:90:84:49:5f:88:41:7d:
         ee:a3:20:b1:57:aa:b7:2c:22:01:65:0c:a8:ac:f6:b3:b5:ad:
         81:5c:5a:3b:22:3d:af:f6:06:85:91:29:fb:b1:74:b3:2b:e7:
         03:0f:63:69:02:ca:d6:15:4c:08:15:5f:35:b0:77:48:fa:16:
         2b:7c:7f:4d:3b:1a:83:ef:69:83:6a:98:fb:ba:74:c3:b3:4a:
         d6:1a:62:e2:3e:3e:87:6d:21:95:26:02:57:16:fa:56:9d:26:
         e2:23:e7:18:8e:7f:0e:0d:8f:d2:44:e2:00:c8:3b:24:47:a4:
         36:21:ef:27:85:05:28:63:4c:72:66:52:40:a6:c6:d3:7f:57:
         96:a9:fb:50:d8:5c:5f:95:eb:77:b8:ea:9c:41:04:d6:b4:3f:
         56:9c:31:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:32:39 2026 by rpki-client