Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa
File:                     735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa (raw, json)
Hash identifier:          eCWhQGAI/MlN2Oe4vPpGRJbgTwnRi90cuWeIxDm2mZA=
Subject key identifier:   80:4F:03:FD:FA:E3:9D:27:4A:42:E3:10:45:2A:14:0A:F9:64:13:2A
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584DC83048D30BE0B4495EED1600
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     140224
IP address blocks:        104.143.46.0/23 maxlen: 24
                          172.81.96.0/22 maxlen: 24
                          172.81.100.0/23 maxlen: 24
                          198.176.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:48:d3:0b:e0:b4:49:5e:ed:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=c82b22fd-f226-4225-949a-2bdc10b3b46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:09:03:33:69:10:13:25:16:40:ed:55:da:
                    79:b1:1b:9b:d7:1c:a5:e1:78:06:54:83:75:4a:5f:
                    54:52:0c:c3:4c:b2:aa:da:40:b2:3e:05:9d:2c:fe:
                    a9:1d:6a:6a:63:af:7f:b1:03:02:be:b3:93:4f:eb:
                    ae:59:32:b4:64:ee:b7:06:bd:10:7f:64:ea:39:d5:
                    e0:41:b1:48:d0:8f:90:d7:fa:23:17:00:9c:ea:1a:
                    fd:33:ac:3c:b1:15:1a:13:44:8a:98:33:98:e0:7b:
                    a4:0d:87:3d:50:af:7c:36:a9:89:dc:d2:61:66:87:
                    ad:0f:5e:9d:03:3c:a5:5c:50:46:63:00:e7:da:15:
                    02:cc:f6:be:df:c1:13:39:79:0a:35:5d:fe:48:dd:
                    92:91:58:e7:c6:84:88:c8:49:0a:30:64:ee:a8:77:
                    68:0a:14:e9:52:d0:47:c2:55:1b:50:74:76:01:83:
                    12:f0:22:68:0f:13:f0:45:2c:e0:a2:ce:f9:04:b5:
                    af:7b:be:62:eb:3c:7c:c6:45:94:56:5f:c9:73:b3:
                    98:5e:a0:6e:0b:b2:ec:98:ff:18:8d:2b:48:56:c1:
                    7a:25:e0:01:d8:7b:f7:ba:42:47:93:3c:70:fb:59:
                    a8:20:b1:64:1a:8b:5c:76:29:fe:de:9d:ee:2e:fc:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4F:03:FD:FA:E3:9D:27:4A:42:E3:10:45:2A:14:0A:F9:64:13:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.46.0/23
                  172.81.96.0-172.81.101.255
                  198.176.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:eb:cc:24:65:a8:1e:22:12:58:a4:6e:e4:fd:f8:fa:36:
         01:72:46:78:2b:33:15:d0:f1:8f:33:02:be:41:df:2c:91:c7:
         2d:28:93:8d:2d:02:fc:4d:48:53:16:33:c7:2f:e3:3c:c3:ef:
         b1:2a:5a:d8:83:34:4d:fc:b4:fa:bc:72:b3:75:7d:3b:aa:35:
         95:a6:c7:30:20:a8:40:6e:ef:3a:99:0a:73:69:9c:8a:92:ef:
         6f:e1:d6:7d:eb:bb:dd:b3:6b:cb:f4:7b:d3:4c:21:52:73:94:
         65:86:e0:9c:f1:22:0b:69:d7:aa:15:6a:b5:62:b9:fe:86:6f:
         b1:c6:09:fb:94:95:d2:b9:bc:fa:e8:1a:67:87:eb:96:d4:40:
         1a:dc:f2:2e:2e:a1:1d:d6:24:ad:a9:ed:1f:79:6b:e9:a9:4f:
         5a:5e:0c:71:5d:f6:fc:8f:d0:45:69:97:58:d5:83:a6:3b:29:
         ab:bf:e4:13:f3:a5:37:b4:e8:f8:a3:81:a7:36:73:ed:b8:21:
         f0:2d:38:f5:8a:52:6c:bf:a8:c2:cf:70:4f:7c:9b:9e:3a:66:
         16:fb:1b:a3:1f:0f:f2:b7:17:b7:85:30:c6:6a:68:e4:b8:45:
         c3:1c:87:0f:d4:2e:88:bf:35:99:9b:1a:35:93:3e:13:22:ed:
         77:3f:40:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:52:38 2026 by rpki-client