Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/35ebb7af-db71-3921-bcab-d7f1d4476a1e.roa
File:                     35ebb7af-db71-3921-bcab-d7f1d4476a1e.roa (raw, json)
Hash identifier:          ZejSlzNtt+wLbcnjq4Oo2ph6vNXYtFF8FHo8af2KyhQ=
Subject key identifier:   53:C8:C0:69:51:9F:AA:7C:95:25:25:D6:07:76:33:76:B3:27:D7:90
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584D2379F508A2F5A627D1511F80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/35ebb7af-db71-3921-bcab-d7f1d4476a1e.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     62610
IP address blocks:        107.151.192.0/24 maxlen: 24
                          107.151.193.0/24 maxlen: 24
                          107.151.195.0/24 maxlen: 24
                          107.151.240.0/24 maxlen: 24
                          107.151.241.0/24 maxlen: 24
                          107.151.249.0/24 maxlen: 24
                          107.151.250.0/24 maxlen: 24
                          107.151.251.0/24 maxlen: 24
                          198.44.166.0/24 maxlen: 24
                          198.44.167.0/24 maxlen: 24
                          198.44.168.0/24 maxlen: 24
                          198.44.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:79:f5:08:a2:f5:a6:27:d1:51:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=edc83791-08dd-4f66-abde-c96c5c25cd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:35:56:a9:6f:52:40:19:35:5e:42:93:92:db:
                    bd:9f:b8:d2:e4:23:a3:4c:96:77:1e:9b:cd:9e:9f:
                    3a:a4:c4:f9:b2:fa:76:96:7a:ef:a1:9d:57:6b:a3:
                    21:e2:ef:d3:67:cb:2f:fb:c1:17:30:9b:5a:fc:04:
                    cb:14:95:79:bb:28:49:39:d6:80:7b:05:cf:40:b7:
                    20:80:39:5b:04:0e:21:93:ae:8e:35:df:15:c8:dd:
                    74:d5:ac:24:15:17:70:fe:4c:d0:63:ca:0b:63:68:
                    61:d0:8b:15:fd:1c:75:1e:25:d6:4e:46:38:5b:fd:
                    0a:ab:fb:6c:a3:4e:f6:59:95:28:4f:09:f1:97:15:
                    20:8e:84:b2:31:10:ec:eb:96:44:d7:43:89:1e:a7:
                    7a:90:7c:4e:48:5a:df:2f:98:91:45:e2:59:8d:53:
                    ff:0a:d7:65:33:aa:59:b4:42:c5:b0:66:84:de:49:
                    3b:6d:ab:b1:7d:04:ae:fa:ee:6d:a4:55:16:df:bf:
                    b2:80:a7:2d:81:f9:c9:b0:d8:15:64:01:ca:02:3a:
                    d3:26:53:18:e8:81:f5:45:70:3b:e8:b3:10:78:b7:
                    6d:c5:f1:42:11:6f:16:71:08:dd:3a:6e:77:78:c2:
                    af:ca:35:4c:cf:f8:60:60:58:24:67:b3:d1:c3:9b:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C8:C0:69:51:9F:AA:7C:95:25:25:D6:07:76:33:76:B3:27:D7:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/35ebb7af-db71-3921-bcab-d7f1d4476a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.192.0/23
                  107.151.195.0/24
                  107.151.240.0/23
                  107.151.249.0-107.151.251.255
                  198.44.166.0-198.44.169.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:fe:3e:d6:76:52:44:fb:29:4f:c7:1b:13:1b:1a:0b:88:20:
         80:00:f1:8b:6d:79:6f:1d:54:1b:22:23:57:07:62:63:1c:b8:
         74:0e:87:63:3a:d8:bd:fe:39:77:f8:1c:53:ad:e8:3f:ac:1c:
         79:a1:0e:aa:f0:97:76:9d:68:44:dc:fd:fd:f9:ef:ee:fb:03:
         ea:82:29:2f:43:5f:d3:5e:25:8d:63:cb:e6:b0:53:5c:87:24:
         85:87:a3:73:f7:03:d2:2d:66:f4:94:3d:e4:ef:72:82:88:69:
         bc:33:c3:60:ca:bd:e1:58:3c:9f:e1:de:1a:a6:01:fe:f1:cd:
         d7:ae:b2:55:a3:29:8c:ac:e0:64:1c:f0:81:a6:3a:57:d1:d3:
         ee:3d:78:7a:9e:15:ac:af:03:ef:8a:2e:ab:96:a9:84:e2:05:
         71:60:fa:bd:7f:7f:16:2c:75:b4:cc:51:02:ff:08:8f:14:68:
         df:42:c4:18:11:f5:95:d2:be:a0:75:86:82:2a:13:30:e5:f5:
         68:25:27:9f:df:21:75:91:ea:6d:1b:2d:f5:32:0c:fb:60:fe:
         67:45:c4:1d:93:78:df:4a:83:42:bf:1c:9b:19:6c:ae:5f:0e:
         8f:6e:2c:2b:f7:c0:88:00:5b:ce:c5:03:ad:52:56:e9:e0:da:
         53:5c:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:31 2026 by rpki-client