Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa
File:                     a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa (raw, json)
Hash identifier:          vTcMWzuAA340lVmTbxxExHJv2DmS5CUxCGDMLMlcgHA=
Subject key identifier:   11:58:33:14:4D:67:1D:B1:09:18:42:FC:5A:60:27:C0:36:56:A6:23
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584D4A8FB2BB63DC94E7CA642000
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     17378
IP address blocks:        208.69.108.0/22 maxlen: 24
                          208.88.240.0/22 maxlen: 24
                          209.59.0.0/19 maxlen: 24
                          209.92.7.0/24 maxlen: 24
                          209.92.39.0/24 maxlen: 24
                          209.92.44.0/24 maxlen: 24
                          209.92.53.0/24 maxlen: 24
                          209.92.56.0/24 maxlen: 24
                          209.92.62.0/24 maxlen: 24
                          209.92.68.0/24 maxlen: 24
                          209.92.70.0/23 maxlen: 24
                          209.92.74.0/23 maxlen: 24
                          209.92.79.0/24 maxlen: 24
                          209.92.88.0/24 maxlen: 24
                          209.92.90.0/23 maxlen: 24
                          209.92.137.0/24 maxlen: 24
                          209.92.224.0/21 maxlen: 24
                          209.177.16.0/22 maxlen: 24
                          216.27.0.0/18 maxlen: 24
                          216.27.64.0/19 maxlen: 24
                          216.46.48.0/20 maxlen: 24
                          216.48.112.0/20 maxlen: 24
                          216.58.224.0/19 maxlen: 24
                          216.150.128.0/19 maxlen: 24
                          216.182.80.0/20 maxlen: 24
                          216.211.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:b2:bb:63:dc:94:e7:ca:64:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=6e6daa8a-2b93-4931-abae-f6e98e84a91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ae:06:97:f4:ce:08:74:63:ee:01:59:51:10:
                    32:22:8b:aa:48:09:aa:3e:79:7e:44:37:c9:91:ef:
                    de:17:6b:bb:cb:9d:82:4f:38:a9:6b:e6:c6:9e:49:
                    af:92:f1:7d:50:14:98:91:e0:4d:cd:7d:32:a8:5f:
                    90:c9:24:2b:14:eb:7d:87:0f:89:fe:7a:fe:44:c2:
                    2f:69:2f:16:2d:e4:a4:7a:9a:73:44:23:24:c0:50:
                    e4:f2:86:88:bb:64:e2:a3:61:10:46:5f:01:d8:1d:
                    d0:31:45:a6:be:2e:29:02:ae:c8:35:5a:22:4a:05:
                    02:16:d4:94:26:f2:d3:ef:f7:ed:dc:2d:f3:8e:87:
                    5a:37:3f:c4:0d:92:48:94:a8:0f:09:3b:19:6a:6c:
                    02:72:b1:64:0d:9a:87:16:1d:ce:b6:a0:5a:7e:e1:
                    4f:09:fa:25:dc:64:07:bd:37:fc:9b:65:78:30:e9:
                    11:49:34:f1:d4:03:4d:b3:b8:88:52:5f:c3:e5:c6:
                    8d:b8:10:f9:b3:90:c3:33:da:c8:73:f9:5c:b3:56:
                    7d:45:03:33:8c:26:db:9a:d5:df:41:b9:7e:18:95:
                    1c:5f:a2:50:a7:92:18:14:6e:12:5f:f4:04:63:48:
                    ee:42:54:4b:32:8d:36:f9:fd:d9:f5:fb:a6:d7:31:
                    e8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:58:33:14:4D:67:1D:B1:09:18:42:FC:5A:60:27:C0:36:56:A6:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.108.0/22
                  208.88.240.0/22
                  209.59.0.0/19
                  209.92.7.0/24
                  209.92.39.0/24
                  209.92.44.0/24
                  209.92.53.0/24
                  209.92.56.0/24
                  209.92.62.0/24
                  209.92.68.0/24
                  209.92.70.0/23
                  209.92.74.0/23
                  209.92.79.0/24
                  209.92.88.0/24
                  209.92.90.0/23
                  209.92.137.0/24
                  209.92.224.0/21
                  209.177.16.0/22
                  216.27.0.0-216.27.95.255
                  216.46.48.0/20
                  216.48.112.0/20
                  216.58.224.0/19
                  216.150.128.0/19
                  216.182.80.0/20
                  216.211.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:df:5c:39:3b:a5:77:24:22:cb:c1:16:d2:76:6c:cd:f9:cb:
         44:5d:f5:9c:19:e8:73:4e:c1:ad:62:bf:44:c0:2d:26:7f:0b:
         4a:56:3a:d9:f4:3a:7a:c4:b0:a2:b1:5c:ce:b8:98:07:5e:18:
         ad:48:cb:52:d1:46:b6:03:0d:dc:53:c4:37:38:ee:ea:61:20:
         a8:36:fb:0c:9f:84:67:f7:ae:0c:4c:66:73:e7:a6:29:c8:70:
         e9:d0:f0:37:13:b0:7f:c2:24:70:6a:c7:ce:3c:e3:fa:94:62:
         c8:5a:52:ce:0d:ca:a4:0d:7f:e0:41:1f:2d:75:3e:9b:c9:7b:
         6e:b0:a9:79:a0:fe:53:e5:e2:e5:84:77:9a:59:d4:55:2c:eb:
         0d:44:11:73:79:f6:ec:ac:4c:a2:41:4e:01:bc:7d:cd:52:1b:
         c3:0e:00:c0:dd:87:5e:89:a5:c0:7d:df:49:de:b5:c6:b0:5d:
         ef:95:46:9e:53:0d:b9:f3:1c:7f:b2:15:12:81:cd:ac:86:e1:
         07:bf:d5:3d:3a:59:3b:48:73:a3:e7:c6:4f:94:6c:fb:19:26:
         73:0e:ca:a9:bd:16:15:c6:67:9c:9d:aa:a9:b5:68:26:e7:a6:
         61:d7:bd:61:31:cb:7b:a9:16:0d:99:fb:27:af:10:92:1a:09:
         4f:dd:dc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:30 2026 by rpki-client