Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/a810223a-024a-3959-960a-99f4869de95f.roa
File:                     a810223a-024a-3959-960a-99f4869de95f.roa (raw, json)
Hash identifier:          qQRrlM2gNyuK+sBohmIFe4cRbVLxZ7qVr3biDNyLl1Y=
Subject key identifier:   8B:A3:99:77:EB:00:74:41:67:BC:10:91:53:2D:A5:D3:37:D1:F1:B4
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584D12438D7937CB32C916202860
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/a810223a-024a-3959-960a-99f4869de95f.roa
Signing time:             Tue 13 Jan 2026 02:00:31 +0000
ROA not before:           Tue 13 Jan 2026 02:00:31 +0000
ROA not after:            Mon 13 Apr 2026 01:00:31 +0000
asID:                     8075
IP address blocks:        64.40.128.0/24 maxlen: 24
                          64.40.142.0/24 maxlen: 24
                          64.40.143.0/24 maxlen: 24
                          2607:9240:40::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:12:43:8d:79:37:cb:32:c9:16:20:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Jan 13 02:00:31 2026 GMT
            Not After : Apr 13 01:00:31 2026 GMT
        Subject: CN=36de8ab3-1856-4cf6-94f9-d917437d7fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:84:82:0f:0d:81:41:85:3a:2a:26:a2:64:
                    a3:9d:01:58:b1:12:09:55:b5:48:1f:48:71:fb:78:
                    56:be:9e:a9:bc:81:df:15:a2:b1:3d:bb:10:88:90:
                    82:85:7f:01:9a:14:84:2a:45:b3:09:cd:f2:98:1d:
                    32:cb:27:fc:df:0b:03:a6:a3:c8:1a:8b:50:70:bb:
                    6e:c2:75:64:db:3c:41:09:7d:da:8c:0b:99:b2:fe:
                    28:fc:ff:53:b2:98:68:b1:68:bb:46:8c:36:fd:e6:
                    6d:6e:70:c7:cc:5b:6d:45:04:51:ba:28:3a:73:30:
                    52:d1:75:bf:64:ff:88:a3:d7:ff:97:7e:9d:16:8b:
                    b9:a7:19:ba:86:c9:55:8c:96:f5:87:a7:d5:6b:55:
                    3d:d3:5e:d3:c5:3a:d7:2a:96:32:3f:ff:57:f4:ba:
                    0a:cf:54:bf:8c:a7:41:68:59:c9:23:e5:bb:13:b4:
                    cc:64:3e:41:8e:fd:98:a5:9f:f1:28:cf:18:bf:f6:
                    7a:33:0b:5d:75:20:5c:91:23:88:67:f4:5f:12:75:
                    7e:fa:42:b1:5d:23:6a:39:c1:44:68:dc:63:49:8d:
                    21:6a:4c:46:ce:d8:9d:83:9f:a8:8f:e1:92:f8:97:
                    84:28:1c:49:97:e8:fc:14:b6:86:14:bb:ee:e6:31:
                    f0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:99:77:EB:00:74:41:67:BC:10:91:53:2D:A5:D3:37:D1:F1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/a810223a-024a-3959-960a-99f4869de95f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.128.0/24
                  64.40.142.0/23
                IPv6:
                  2607:9240:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:12:5b:1c:69:8a:cb:95:b3:11:61:2b:98:cf:14:10:e0:
         2a:e5:ee:12:81:c7:5e:62:a9:61:22:6c:04:dc:3b:f3:d8:fe:
         ff:ad:82:d7:5e:0c:76:d0:d5:7a:69:83:54:e2:56:71:e7:ca:
         92:aa:19:37:5a:f2:d3:6b:08:45:c0:a4:78:8f:8a:3d:f2:b2:
         ed:12:a5:29:eb:d2:cf:da:3d:71:ea:e9:21:62:75:75:39:4e:
         cc:43:42:b9:d2:8a:79:5e:bf:fb:28:fb:9f:32:64:2c:36:84:
         5b:a1:9d:58:ce:dc:ea:f8:26:40:d0:d8:7e:1c:7f:96:ad:6b:
         6b:ca:b9:b3:ce:99:08:78:ff:fb:9f:fe:22:e3:29:aa:fd:a7:
         29:96:dc:e7:2d:45:95:25:13:37:4f:ba:03:1d:bc:aa:1d:d4:
         95:85:ce:6f:32:f9:2c:89:81:39:1c:d2:ed:31:e4:fd:7b:49:
         72:49:cf:2f:95:09:f2:f1:de:1d:b9:b8:b5:fd:d5:d9:ad:48:
         20:ea:3f:20:e5:47:90:f6:86:9b:5f:98:a9:f7:f4:18:87:b8:
         ca:44:4d:4c:dc:26:5c:63:bc:76:ed:6a:09:4a:13:9b:36:97:
         0e:ac:03:18:06:e0:37:e6:05:91:98:70:e7:0d:c1:25:29:23:
         39:e7:20:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:52 2026 by rpki-client