Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa
File:                     1b852b6c-9aa4-3df4-a821-ac1748d70801.roa (raw, json)
Hash identifier:          To6gz+G6qjnmaUuBxpHQO6IaANqVYwBI1aEdGO7nC5U=
Subject key identifier:   C6:96:2A:D2:F6:68:32:0F:CF:D6:B9:28:2F:39:7E:FF:2E:CB:86:8D
Certificate issuer:       /CN=a91fff12-f74d-4a80-9a5d-f225534bc527
Certificate serial:       010D0C9F4328584DC29AE5A3604ED539A9CE4B00
Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     46595
IP address blocks:        64.35.144.0/20 maxlen: 24
                          104.37.76.0/23 maxlen: 24
                          104.37.78.0/24 maxlen: 24
                          174.137.64.0/20 maxlen: 24
                          216.255.192.0/19 maxlen: 24
                          2600:b000::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:e5:a3:60:4e:d5:39:a9:ce:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=c07288eb-a82c-48b4-9ee5-6fa58aa82cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:42:dc:d0:9d:29:42:d3:1a:64:eb:eb:9c:4a:
                    5b:d0:f1:eb:5d:92:8c:2c:d9:6d:c2:02:8e:d5:41:
                    be:a6:69:c9:2e:b8:e9:e4:50:5a:1c:f4:51:f6:57:
                    6b:9b:1f:b3:13:25:2e:b3:b8:1e:76:5e:44:f9:a9:
                    33:24:49:a1:f3:77:3c:2d:19:b2:67:9f:a1:0a:5d:
                    82:32:53:0f:0a:ee:a2:33:6a:4d:d6:05:04:87:34:
                    3f:f5:65:a7:4f:f8:a3:55:42:51:f1:bf:16:a2:fd:
                    96:59:5a:c6:14:d7:7e:7e:f9:c2:9e:fb:96:d6:17:
                    1d:1a:48:cd:3a:66:83:69:1b:21:e0:b5:c6:20:b0:
                    c3:d0:b9:05:06:94:76:94:25:98:34:58:fd:6c:1c:
                    cf:08:2f:70:7a:9e:5a:b6:98:ec:fa:2c:c6:64:e0:
                    e4:38:83:e4:bd:68:fe:c7:6f:b3:15:2f:81:61:34:
                    27:f8:b2:72:6e:e9:a8:34:60:87:aa:15:7a:b1:08:
                    89:41:58:f4:b2:e8:0a:95:34:07:61:98:92:2d:93:
                    b1:1a:81:5a:64:24:f2:d7:f5:d8:dd:7e:8f:cd:91:
                    ef:21:6e:e3:fa:0a:63:68:d3:73:8c:98:4a:ad:b1:
                    99:0e:0d:a0:49:f7:3f:db:a7:18:b1:c6:c6:fb:fe:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:96:2A:D2:F6:68:32:0F:CF:D6:B9:28:2F:39:7E:FF:2E:CB:86:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl

            X509v3 Authority Key Identifier:
                keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.144.0/20
                  104.37.76.0-104.37.78.255
                  174.137.64.0/20
                  216.255.192.0/19
                IPv6:
                  2600:b000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b2:a3:10:47:41:04:65:80:b4:b9:03:f9:b2:c8:b3:34:11:
         25:1b:46:c0:32:b6:fa:83:3a:9f:85:ff:41:92:13:82:a5:b5:
         ec:df:86:3a:72:c4:9a:b5:f4:a6:33:cc:7d:d1:cc:5f:87:76:
         f5:d0:fd:37:ab:05:77:68:4d:94:a8:56:5d:6a:d3:5b:1e:73:
         b5:77:16:25:95:2a:bf:39:43:32:b2:bd:16:1f:af:bb:73:a0:
         ed:e1:e8:2f:ed:2e:63:d4:f6:03:3e:28:44:91:11:b2:43:c0:
         e4:31:50:80:ca:97:3c:2d:5f:58:5f:f9:97:6d:26:ea:35:8e:
         45:7e:e8:67:50:a3:25:04:27:6d:26:39:00:82:ba:21:49:39:
         ab:0c:44:77:ef:72:95:a1:10:ee:32:f7:96:4c:66:be:ac:c6:
         6c:82:a7:d3:35:77:bb:4a:d2:16:bb:60:91:97:d6:7f:ad:43:
         cf:89:01:25:19:6b:c8:f5:8b:a3:86:ab:8d:1f:34:8a:57:45:
         56:19:09:28:98:8d:06:0b:d7:7b:22:33:0a:da:96:55:a1:72:
         c0:b0:7a:cc:bb:d7:5e:72:c5:7e:aa:b4:56:a6:1e:60:7d:43:
         53:65:b9:0b:7d:cd:58:59:4f:32:7a:2e:ee:63:89:11:da:c0:
         da:ba:70:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:27:59 2026 by rpki-client