Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/00db9840-1a63-3593-bb93-3e91d388db8f.roa
File:                     00db9840-1a63-3593-bb93-3e91d388db8f.roa (raw, json)
Hash identifier:          tdxTiKKzzL1JqJDqnnjweWFVEjecijngL4z2Y2n4Dtg=
Subject key identifier:   55:30:48:27:7D:15:21:06:A8:04:1F:37:FF:E2:BD:DC:54:E5:07:96
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584D48B1B0672A85906BE743C880
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/00db9840-1a63-3593-bb93-3e91d388db8f.roa
Signing time:             Wed 25 Mar 2026 08:56:56 +0000
ROA not before:           Wed 25 Mar 2026 08:56:56 +0000
ROA not after:            Tue 23 Jun 2026 08:56:56 +0000
asID:                     137535
IP address blocks:        104.143.32.0/20 maxlen: 24
                          172.81.96.0/22 maxlen: 24
                          172.81.100.0/23 maxlen: 24
                          198.176.59.0/24 maxlen: 24
                          198.176.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:48:b1:b0:67:2a:85:90:6b:e7:43:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Mar 25 08:56:56 2026 GMT
            Not After : Jun 23 08:56:56 2026 GMT
        Subject: CN=49c1538c-e16d-44f7-80a3-c109af654d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:80:17:46:03:72:68:66:60:12:6a:f0:2a:a6:
                    ea:08:26:20:bd:c8:47:14:47:31:f5:90:fa:b8:25:
                    7e:fe:cc:d5:22:89:90:95:c9:45:73:47:13:7a:71:
                    69:b8:74:92:5d:eb:07:17:ba:cc:99:05:e1:49:57:
                    56:8c:57:11:2e:89:39:f1:64:40:bb:87:80:8f:ad:
                    4f:a7:03:e9:92:d1:d0:90:ee:d6:b8:0e:1e:0d:e7:
                    49:ca:44:86:95:e0:ae:cc:20:3a:47:cc:19:a8:76:
                    fd:51:05:66:2e:2e:08:24:64:8d:2b:ad:c5:ff:32:
                    a3:9d:71:da:24:d1:89:71:04:98:08:f9:94:a7:6b:
                    c1:2f:2b:bf:2c:5c:7c:1c:c7:0e:1d:53:30:1a:50:
                    34:42:23:f6:14:62:25:88:2f:f6:b3:47:07:63:65:
                    ad:8c:a4:2e:ad:48:b6:77:26:b6:a4:4c:ca:84:13:
                    35:c4:4a:b7:2e:55:3a:4c:27:93:87:b1:81:e9:73:
                    40:a3:c6:2f:0d:a4:3a:29:eb:3f:f9:a7:c1:9e:e6:
                    be:e4:fd:b6:52:29:70:87:69:cc:f9:ca:5c:0a:1c:
                    3b:99:75:5e:60:50:26:64:cc:e3:c6:7c:49:31:c4:
                    ae:e3:48:10:32:6e:a8:69:4f:a4:1f:1f:7e:16:44:
                    76:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:30:48:27:7D:15:21:06:A8:04:1F:37:FF:E2:BD:DC:54:E5:07:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/00db9840-1a63-3593-bb93-3e91d388db8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.32.0/20
                  172.81.96.0-172.81.101.255
                  198.176.59.0-198.176.63.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d9:fb:e2:60:87:49:d7:51:93:61:79:60:47:00:f1:dd:36:
         53:74:d0:77:06:6e:51:a0:50:8d:4b:2f:8e:b5:de:7c:a6:54:
         0d:aa:3f:90:98:3d:9f:d5:ed:a4:01:06:73:30:83:df:ff:66:
         a7:43:29:38:29:0b:f3:ab:02:bb:bd:6b:56:01:da:7d:61:b1:
         ef:84:5c:72:67:48:d1:11:e4:f7:ee:bb:7a:5b:69:e4:e8:8a:
         5b:3f:8c:84:4c:47:03:0c:a0:30:52:83:80:27:e2:8d:f6:c0:
         90:c3:ea:c6:ab:72:8f:f7:29:b9:59:78:bc:32:97:b1:de:86:
         a7:f4:89:86:e7:c8:a2:04:9f:87:7d:d7:28:5c:69:80:65:6f:
         9f:30:86:2e:fb:eb:ba:f3:09:83:48:a7:b8:d2:bf:cd:09:13:
         1d:7f:b3:0a:0f:dc:67:e6:92:18:f7:53:12:4d:bd:1c:6a:16:
         34:17:af:42:ba:e4:43:1b:db:3d:70:8f:0a:a1:35:88:c6:78:
         54:38:2d:57:bd:09:63:64:1e:7e:f7:80:a0:fa:61:e4:93:7e:
         35:c2:6c:e2:b2:0b:3e:14:51:4a:d8:fa:80:87:1a:dd:59:7a:
         2e:f7:8f:e3:b1:db:3c:21:89:66:e4:8d:06:3b:3b:cd:c8:3b:
         a6:e4:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:37 2026 by rpki-client