Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/70522c27-eece-3153-811b-bb032ea647fb.roa
File:                     70522c27-eece-3153-811b-bb032ea647fb.roa (raw, json)
Hash identifier:          sFyeq0JOKWzdhjGMLmU7jvmPiayGg+48WFSgLukJ2rw=
Subject key identifier:   59:AB:68:2D:DE:0C:5E:77:10:55:5C:F4:5F:74:1E:22:EC:A5:26:D3
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584DA8935ABD200375C9D9304F00
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/70522c27-eece-3153-811b-bb032ea647fb.roa
Signing time:             Tue 28 Apr 2026 17:14:17 +0000
ROA not before:           Tue 28 Apr 2026 17:14:17 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        64.40.132.0/24 maxlen: 24
                          64.40.133.0/24 maxlen: 24
                          64.40.136.0/24 maxlen: 24
                          64.40.137.0/24 maxlen: 24
                          64.40.139.0/24 maxlen: 24
                          153.57.0.0/24 maxlen: 24
                          2607:9240:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:93:5a:bd:20:03:75:c9:d9:30:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Apr 28 17:14:17 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=e8063eae-9950-405d-a094-127f46e90261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:27:59:7f:5c:c4:da:59:1e:5a:75:16:82:
                    c9:f6:84:e4:e7:76:b0:72:be:67:ad:bb:f6:24:87:
                    0e:85:5e:9a:82:00:19:9e:81:c1:59:6b:8f:92:33:
                    1b:b5:62:b3:07:30:14:4a:8a:d4:64:7f:18:54:25:
                    cb:95:f8:df:67:ff:1c:e3:10:e1:05:93:36:46:0e:
                    7b:6b:27:7f:60:57:3a:b4:88:97:ac:45:68:59:e6:
                    3c:51:f1:56:d8:26:ef:fc:df:dd:41:19:f0:2b:24:
                    95:32:d5:38:0e:fa:ce:1c:39:92:fe:0f:e9:b0:6f:
                    56:29:3c:1c:1c:47:9b:cd:8f:30:de:eb:df:91:1b:
                    79:51:8d:7b:c0:2f:bf:73:0e:42:9b:3e:2f:c1:26:
                    25:96:d0:e4:bc:e9:c5:6b:84:39:7f:26:44:47:a4:
                    86:62:e0:9c:06:57:3c:0a:84:e7:4d:bd:6e:b2:72:
                    58:6b:5b:34:4d:5c:32:4f:9d:34:34:4c:c6:6c:aa:
                    5f:a8:bb:15:ac:de:08:73:51:cb:63:f2:60:4b:be:
                    7e:c4:aa:7c:3b:19:a6:4d:33:76:8e:f5:1d:ab:96:
                    55:82:3f:f5:8f:e4:53:ef:c7:2c:0f:c4:ba:4f:29:
                    4d:dc:d5:67:d8:d6:4a:45:f2:77:e9:d9:db:cc:c1:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AB:68:2D:DE:0C:5E:77:10:55:5C:F4:5F:74:1E:22:EC:A5:26:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/70522c27-eece-3153-811b-bb032ea647fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.132.0/23
                  64.40.136.0/23
                  64.40.139.0/24
                  153.57.0.0/24
                IPv6:
                  2607:9240:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:76:2d:99:38:07:58:d3:42:34:7d:c5:20:c6:2b:ec:9d:
         45:88:4e:81:b9:d0:06:7b:f3:e5:79:6a:2a:17:f1:93:66:f9:
         4e:c4:ed:ce:7c:70:b9:ac:57:0f:9f:e4:7d:d6:09:a3:ad:91:
         23:c4:7a:a3:f2:05:ec:82:10:62:5f:64:fa:3b:37:fd:15:f8:
         be:f7:65:3b:6f:8a:d6:b6:8f:4c:ac:65:07:bb:13:e3:87:81:
         6d:33:cc:3b:6d:b3:75:f5:26:08:82:ae:6a:fd:b5:5f:ea:15:
         9a:f7:7b:c7:44:56:f8:d5:c8:7b:37:71:21:8a:e8:ed:6a:7a:
         7a:8f:19:18:a8:8a:da:12:69:62:6f:75:4a:b6:09:08:73:06:
         22:7f:28:78:4d:9a:10:19:6b:1d:ce:6c:7b:4a:d8:ad:32:08:
         f0:50:78:53:0c:01:f6:51:7f:7a:70:0c:42:44:ea:59:c4:b4:
         8d:82:56:4f:32:74:88:76:85:18:e2:b6:30:d6:ea:b7:01:ce:
         ca:ae:42:5f:cf:d8:c4:22:01:9c:fa:50:9f:fb:6f:db:ee:8c:
         89:ae:bd:c9:8f:c5:8f:61:4b:0a:b1:3e:47:3f:2e:fd:b0:5a:
         1b:60:2d:51:2a:b3:e1:da:73:d8:9f:2e:41:e6:6a:31:f8:ec:
         ee:f1:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:05 2026 by rpki-client