Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa
File:                     b0347528-51f9-3df1-ad01-53232c57299c.roa (raw, json)
Hash identifier:          Ymd5qC3+V98mOPrgUfy3tPZckmCECukW90c78SHtM4U=
Subject key identifier:   4F:A9:E2:48:A6:8C:E1:F5:F4:5B:FF:AC:52:28:40:CD:5B:CD:63:3F
Certificate issuer:       /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial:       010D0C9F4328584E9A7FBACA3AD574C3F0ECAE40
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     55064
IP address blocks:        74.123.28.0/22 maxlen: 24
                          162.210.128.0/22 maxlen: 24
                          2620:a0:4000::/44 maxlen: 48
                          2620:114:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ba:ca:3a:d5:74:c3:f0:ec:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=25362bf7-487a-4580-9dcd-2af9ba580895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:0c:95:c6:6f:ed:4a:1a:61:bd:31:8e:11:
                    47:1f:c7:ed:d1:1e:48:10:d6:24:16:ce:b4:e6:ea:
                    a2:72:5a:fb:b5:2c:e3:dd:1f:7a:2f:a0:99:ae:d3:
                    36:0c:3d:de:5f:ca:77:47:8b:b1:c2:5f:83:8a:47:
                    ed:54:49:f5:05:db:c9:7a:c8:ad:57:75:6e:cb:71:
                    07:45:15:71:69:f6:bd:8d:f6:65:9b:58:b4:e5:f1:
                    e6:0a:57:bb:6e:38:e0:51:14:1e:f7:e6:10:87:ab:
                    83:4c:52:f3:5f:d3:9f:24:6c:e4:73:d2:91:50:f5:
                    90:bd:f8:ec:84:da:83:58:1c:a0:e4:50:15:c4:62:
                    01:cf:2c:35:75:e4:e3:0e:d0:9f:22:74:6b:27:81:
                    11:c6:64:9c:9c:22:1f:30:35:88:2b:f2:28:8f:82:
                    b6:f9:03:a3:4d:2d:da:26:d2:0a:ad:89:10:72:1d:
                    5d:fc:b3:fb:2e:f8:cc:2a:75:df:fd:ac:33:33:82:
                    4d:e2:9a:58:40:c6:52:36:c3:18:05:fb:10:4f:07:
                    d1:8b:28:5e:3e:e9:ba:b9:2f:b4:84:20:99:41:8f:
                    40:24:9e:fa:a5:70:e0:6e:85:c0:61:06:f2:17:28:
                    0f:92:40:9a:9f:56:98:64:4a:ed:c3:d9:a4:da:bf:
                    6d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:E2:48:A6:8C:E1:F5:F4:5B:FF:AC:52:28:40:CD:5B:CD:63:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.28.0/22
                  162.210.128.0/22
                IPv6:
                  2620:a0:4000::/44
                  2620:114:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:08:6e:5c:4c:50:05:b7:ac:85:8e:2a:0b:69:5e:63:ff:29:
         65:93:e7:62:bf:5a:32:57:60:e9:42:f0:8f:1d:e5:39:ab:48:
         70:07:a4:b1:13:db:72:36:b8:b2:14:42:6a:2e:f5:c5:bc:4e:
         46:f9:48:2d:78:6b:1c:29:00:14:e2:96:be:da:81:10:e5:e4:
         11:78:3d:06:7e:6e:b0:2c:38:89:5d:78:8f:ce:9b:4d:b6:c4:
         e3:88:1a:a4:e8:e6:d3:8c:72:5c:8e:07:b5:d4:41:8f:4d:71:
         06:34:76:8e:de:f4:79:53:f4:f7:08:dc:ad:31:fc:f4:47:81:
         7a:6d:d2:4a:3a:5a:54:b8:08:f0:b4:3c:e6:48:43:ae:40:da:
         27:f8:f5:ce:05:15:8e:8c:6c:ae:6e:1d:65:29:32:9c:d1:a7:
         73:bc:81:f1:6d:73:dc:b9:2a:dc:b0:23:bb:48:4e:d0:cf:b8:
         9b:03:01:41:01:d5:3a:0f:09:67:f4:88:b7:9d:5a:45:5e:42:
         80:53:16:0f:21:e2:9d:46:87:32:91:0a:02:29:db:06:7c:ba:
         1f:4c:d2:d9:bc:e3:fd:e2:0b:d3:0a:35:c7:b9:b7:6e:0f:dc:
         ed:05:8d:ef:92:54:6f:2b:7f:33:db:1c:02:0b:c8:ae:08:1f:
         9c:e9:27:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:28 2026 by rpki-client