Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0dfd3e25-c4cc-3813-8714-9c669957c21d.roa
File:                     0dfd3e25-c4cc-3813-8714-9c669957c21d.roa (raw, json)
Hash identifier:          oNZW3HWKUPP+m+SzR9mv7i5yMndA12XSTIh7LkYtSpo=
Subject key identifier:   DC:2C:99:A4:17:6A:8F:BD:14:B7:93:57:17:68:89:D8:D4:DF:4D:66
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584D8EF55DE5A04897164A445530
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0dfd3e25-c4cc-3813-8714-9c669957c21d.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     54004
IP address blocks:        65.51.0.0/20 maxlen: 24
                          65.51.16.0/21 maxlen: 24
                          65.51.24.0/22 maxlen: 24
                          65.51.30.0/24 maxlen: 24
                          65.51.32.0/19 maxlen: 24
                          65.51.48.0/20 maxlen: 24
                          65.51.64.0/18 maxlen: 24
                          65.51.80.0/20 maxlen: 24
                          65.51.96.0/20 maxlen: 24
                          65.51.112.0/20 maxlen: 24
                          65.51.128.0/17 maxlen: 24
                          65.51.144.0/20 maxlen: 24
                          65.51.160.0/20 maxlen: 24
                          65.51.176.0/20 maxlen: 24
                          65.51.192.0/20 maxlen: 24
                          65.51.208.0/20 maxlen: 24
                          65.51.224.0/20 maxlen: 24
                          65.51.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5d:e5:a0:48:97:16:4a:44:55:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=70085134-30d8-4c0a-8604-4c5dc60d5cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:d9:3c:d5:ed:c4:cc:e8:ae:bb:ee:f2:df:
                    d9:16:5d:2a:b6:7d:74:ef:ea:a7:70:34:4f:89:26:
                    6b:5b:6d:0d:44:f8:4c:e7:6d:71:d0:73:0c:c1:d6:
                    b6:91:16:86:0b:7f:20:ff:9a:73:93:4c:e3:f9:29:
                    e4:0d:18:3f:57:e3:92:fd:0d:9d:5c:ab:44:92:ac:
                    d7:65:ff:8f:ab:a3:df:70:93:e9:42:16:4b:9e:d5:
                    cc:98:9e:0c:fb:92:1a:50:b5:a7:67:76:59:1c:15:
                    2f:4e:e9:12:6b:41:9d:a4:56:75:9b:d0:20:68:34:
                    45:81:28:13:4f:81:a2:db:24:9a:69:d0:9f:bf:bc:
                    5a:10:cc:de:88:b3:7f:1e:c8:dd:9f:d0:3f:d2:47:
                    38:0b:ae:9c:41:3e:b4:77:af:2a:0d:c6:ca:39:49:
                    78:6d:b7:ab:d5:12:0d:17:ca:58:18:3f:d9:ea:2c:
                    fc:40:79:3a:6d:e9:ed:1a:6c:6a:47:05:d2:4d:f9:
                    bf:20:38:ad:4a:8d:fc:e5:21:85:65:94:6a:4b:eb:
                    19:2c:45:91:d2:08:5f:2c:8e:5c:5a:3d:ed:56:67:
                    90:2f:94:57:24:40:80:1c:bd:70:61:6d:a7:aa:15:
                    55:01:08:e4:ae:10:8a:69:c4:b3:6f:e5:be:6d:9d:
                    d4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2C:99:A4:17:6A:8F:BD:14:B7:93:57:17:68:89:D8:D4:DF:4D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0dfd3e25-c4cc-3813-8714-9c669957c21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.0.0-65.51.27.255
                  65.51.30.0/24
                  65.51.32.0-65.51.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:a7:d7:d0:ed:12:79:f1:ec:52:ec:9f:5b:5d:40:10:65:20:
         19:88:82:28:d9:c8:6f:ab:6a:a2:ef:47:51:2e:a9:fc:23:ee:
         a6:3d:35:e8:63:49:e1:0d:ee:af:5b:de:62:a4:c5:cd:31:e8:
         9d:52:9e:82:f8:42:b3:32:99:e4:5a:94:99:7f:10:c6:20:52:
         d5:99:2f:89:ea:f4:50:0e:7d:23:bf:9b:8f:30:71:4e:db:a7:
         0e:82:3f:08:24:55:08:d6:ba:58:17:8d:53:85:2e:50:18:1b:
         ef:2f:1b:5d:e8:02:2f:aa:c6:2b:21:37:64:0a:d1:0a:12:f1:
         aa:62:df:e4:13:eb:7b:b8:d3:37:2b:37:72:31:f2:26:da:ae:
         d0:6d:55:79:eb:e6:bf:3c:e3:77:5f:24:18:0a:1a:3b:7f:2b:
         40:68:d6:40:51:3c:3a:ef:bf:4b:3d:55:07:6a:9f:ff:f8:49:
         20:5c:07:10:26:55:6a:2d:7c:4d:a0:f9:89:46:3c:e2:c1:db:
         45:87:ac:a5:7d:5d:ae:b3:24:d4:df:45:3a:b4:79:87:bd:24:
         6e:ee:cf:74:1a:21:db:b9:bf:eb:73:8a:84:32:fe:93:68:d4:
         88:5f:9a:9c:85:cb:ee:6e:ab:25:e3:40:09:e9:c0:0c:82:10:
         af:48:52:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:33:15 2026 by rpki-client