Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/61883e41-ed64-3b70-9b28-c4b07d755075.roa
File:                     61883e41-ed64-3b70-9b28-c4b07d755075.roa (raw, json)
Hash identifier:          06QJVsNAK0kgmR1o4nmBsEfdiSfYLuvCdp131r6vD2I=
Subject key identifier:   77:A2:11:CB:78:DE:B8:1E:6A:4E:8B:3F:EF:AA:CB:0D:1A:42:56:1C
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328584DBA3ADC460B8756C8FED82A80
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/61883e41-ed64-3b70-9b28-c4b07d755075.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     53340
IP address blocks:        76.164.234.0/23 maxlen: 24
                          104.225.134.0/24 maxlen: 24
                          104.225.250.0/23 maxlen: 24
                          162.249.226.0/24 maxlen: 24
                          162.251.232.0/21 maxlen: 24
                          172.93.0.0/23 maxlen: 24
                          192.228.96.0/23 maxlen: 24
                          192.228.100.0/23 maxlen: 24
                          192.228.105.0/24 maxlen: 24
                          192.228.106.0/24 maxlen: 24
                          192.228.108.0/23 maxlen: 24
                          199.19.76.0/23 maxlen: 24
                          199.47.208.0/22 maxlen: 24
                          199.127.56.0/24 maxlen: 24
                          204.77.6.0/24 maxlen: 24
                          2604:2280::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:dc:46:0b:87:56:c8:fe:d8:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=17a3ca9a-ad73-4b77-bcf2-2371e1a6519a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:0e:c8:a9:21:e1:6d:b8:40:98:9f:ad:b4:
                    8c:d3:aa:d9:1b:07:7b:58:e5:d0:fb:ad:63:5a:58:
                    8d:f7:13:c1:16:26:26:4c:63:87:70:30:53:45:24:
                    c4:c3:9a:6b:63:15:16:0b:b2:c2:5d:36:70:70:b8:
                    f5:fb:0e:6f:00:4e:5e:8c:4b:7d:4f:b3:53:a9:7b:
                    ed:47:b0:e7:ab:1b:db:15:f7:c7:cb:85:65:a7:be:
                    05:7d:23:8e:24:c5:8a:29:dd:d6:88:af:6f:c2:43:
                    f0:74:0b:c3:c2:5d:ff:e0:4b:89:f6:af:d9:83:ee:
                    da:94:ca:a9:76:b2:24:7d:f7:e4:6d:25:26:4a:fa:
                    b5:86:26:45:8f:41:61:36:5c:44:6d:cb:84:95:dc:
                    52:3f:18:e9:bc:b7:1d:8f:c9:c5:79:8c:ad:41:7e:
                    2b:45:05:b4:e3:d3:99:17:4d:7c:15:3d:f5:58:55:
                    51:43:6c:f7:b8:fe:2d:ee:6b:da:7e:bd:6c:56:cc:
                    ab:a2:76:f3:08:60:43:b2:d2:ba:09:0f:30:1d:39:
                    a7:82:f2:7b:2c:c4:53:16:96:9e:f2:95:81:5f:18:
                    7e:03:a2:ee:09:3c:b3:10:c7:f3:88:f7:9a:d5:0f:
                    22:b1:4f:01:e6:d5:07:2b:8f:09:16:87:ee:7b:69:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A2:11:CB:78:DE:B8:1E:6A:4E:8B:3F:EF:AA:CB:0D:1A:42:56:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/61883e41-ed64-3b70-9b28-c4b07d755075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.234.0/23
                  104.225.134.0/24
                  104.225.250.0/23
                  162.249.226.0/24
                  162.251.232.0/21
                  172.93.0.0/23
                  192.228.96.0/23
                  192.228.100.0/23
                  192.228.105.0-192.228.106.255
                  192.228.108.0/23
                  199.19.76.0/23
                  199.47.208.0/22
                  199.127.56.0/24
                  204.77.6.0/24
                IPv6:
                  2604:2280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d9:53:02:ca:0a:38:10:75:10:91:f0:d8:d1:d4:f2:15:ad:
         88:49:f7:be:37:34:96:07:9a:8b:da:06:32:2f:63:03:8e:18:
         bf:67:2d:6d:7e:67:65:e3:42:eb:af:a2:ec:6b:04:a7:74:19:
         a3:a9:58:dc:b3:8a:77:b5:e2:e9:eb:2c:4f:a7:ae:ec:18:45:
         a2:0f:22:26:d0:22:90:65:31:78:28:c2:25:a4:94:bb:0f:5b:
         7f:96:74:ff:a5:51:c1:4f:1c:2a:35:3e:71:ac:ee:a0:d8:d3:
         56:23:dd:d8:53:17:9f:9a:21:36:09:5a:56:28:af:42:95:36:
         91:bf:29:ab:bf:87:35:8c:92:c0:1f:54:15:e7:06:a7:f8:a1:
         84:51:52:37:46:89:a9:78:f5:af:28:7f:02:ae:62:17:fc:24:
         a9:7e:0d:23:80:96:a8:00:80:ca:89:85:d0:50:c2:ba:0e:de:
         b0:e5:5c:a0:1b:2a:21:ec:23:83:34:ea:e6:1a:23:b5:21:b2:
         c5:19:7b:f8:76:83:89:46:c9:49:81:ad:61:f0:1c:3b:9f:cc:
         9e:55:08:05:10:3a:c8:f8:fd:4f:c8:ea:1d:c1:1d:e9:ca:7b:
         09:cf:2b:55:95:11:76:29:8c:81:e2:11:57:37:3c:e6:20:a1:
         fb:47:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:47 2026 by rpki-client