Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa
File:                     e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa (raw, json)
Hash identifier:          jHYaUpQN3tibnK1zUKi3wex+aPHMfqgTrjSTEDbt0+U=
Subject key identifier:   9A:5A:AD:8C:23:F6:78:A6:60:22:23:86:2C:9C:A6:65:A3:78:65:8D
Certificate issuer:       /CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
Certificate serial:       010D0C9F4328584D3F65035E833C78B1C4060100
Authority key identifier: 77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     11192
IP address blocks:        24.56.133.0/24 maxlen: 24
                          24.56.136.0/24 maxlen: 24
                          24.56.140.0/24 maxlen: 24
                          24.56.184.0/22 maxlen: 24
                          24.75.228.0/22 maxlen: 24
                          24.75.240.0/22 maxlen: 24
                          24.236.56.0/22 maxlen: 24
                          66.78.200.0/21 maxlen: 24
                          66.78.232.0/22 maxlen: 24
                          66.78.242.0/23 maxlen: 24
                          66.78.244.0/23 maxlen: 24
                          66.78.250.0/23 maxlen: 24
                          66.78.252.0/24 maxlen: 24
                          66.78.253.0/24 maxlen: 24
                          67.217.0.0/22 maxlen: 24
                          96.8.34.0/24 maxlen: 24
                          96.8.36.0/22 maxlen: 24
                          96.8.40.0/22 maxlen: 24
                          96.8.46.0/23 maxlen: 24
                          208.115.66.0/24 maxlen: 24
                          208.115.76.0/23 maxlen: 24
                          208.115.81.0/24 maxlen: 24
                          208.115.82.0/24 maxlen: 24
                          208.115.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:65:03:5e:83:3c:78:b1:c4:06:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=e16afbd1-8ce9-4d55-b3c5-3ba3892785cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:22:4e:09:a5:6c:65:6d:26:7c:aa:bc:cf:93:
                    f2:e8:e9:65:56:92:b6:58:ce:50:d8:d5:3a:6a:d2:
                    ac:a6:72:0b:60:ce:82:05:53:a3:bb:04:8c:a1:10:
                    2a:a2:70:e7:72:5e:4f:20:22:fe:32:bf:1e:06:54:
                    7b:59:b9:03:0c:57:81:e7:5f:13:cc:07:ac:20:9d:
                    5e:f0:69:8a:49:2d:6c:15:c4:b7:c6:83:58:4c:01:
                    dd:39:ea:45:90:18:73:2d:07:05:8c:c3:f1:f6:18:
                    61:47:36:bb:db:95:36:99:de:6c:b6:73:ce:f6:29:
                    83:56:a1:c0:c9:2e:e3:69:15:c5:e2:eb:3c:02:b4:
                    22:13:c6:f7:21:52:eb:ba:8f:62:72:6c:5a:29:22:
                    64:b1:f9:b2:78:bf:f2:f4:7c:36:d1:21:8d:43:a6:
                    65:5e:76:c9:1d:90:d7:30:74:04:bc:bb:66:e4:5d:
                    2e:9e:9b:c9:54:86:46:cf:3e:f3:e5:22:ed:5e:b7:
                    ba:ae:bd:84:34:ff:46:13:ea:7b:82:09:a0:c5:90:
                    c5:91:13:b7:fb:e9:24:fb:33:0b:c5:8e:9f:ac:5d:
                    38:56:b9:77:21:b5:5d:3d:e6:2a:df:a0:5b:63:7f:
                    7c:a4:5e:2b:4a:db:a1:69:7f:2d:ac:4f:86:2f:60:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5A:AD:8C:23:F6:78:A6:60:22:23:86:2C:9C:A6:65:A3:78:65:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl

            X509v3 Authority Key Identifier:
                keyid:77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.133.0/24
                  24.56.136.0/24
                  24.56.140.0/24
                  24.56.184.0/22
                  24.75.228.0/22
                  24.75.240.0/22
                  24.236.56.0/22
                  66.78.200.0/21
                  66.78.232.0/22
                  66.78.242.0-66.78.245.255
                  66.78.250.0-66.78.253.255
                  67.217.0.0/22
                  96.8.34.0/24
                  96.8.36.0-96.8.43.255
                  96.8.46.0/23
                  208.115.66.0/24
                  208.115.76.0/23
                  208.115.81.0-208.115.82.255
                  208.115.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ea:6b:06:ab:06:4d:15:60:83:2a:2a:56:12:b3:87:6f:92:
         2c:72:f1:36:45:7f:55:7f:6f:7b:41:ed:12:f2:31:05:c6:75:
         f6:5a:c5:9b:69:ee:72:4d:9e:4b:d3:5f:14:a0:75:93:6b:48:
         46:be:78:cc:b4:1b:64:d9:29:ea:27:7f:c5:d9:94:f3:81:03:
         a3:2b:49:3a:a0:36:b0:53:9f:61:95:dc:f0:29:4a:c6:6c:90:
         f8:c6:82:f3:11:a9:79:c0:03:a8:52:2d:bc:eb:e1:8f:60:b7:
         71:df:69:46:2f:d3:29:ee:0c:23:d2:b9:d6:9e:80:e9:71:04:
         1d:6f:16:9b:70:62:ee:d0:62:85:98:c1:0c:5f:9c:d5:5d:4c:
         06:91:de:d4:d1:bb:2c:8c:19:56:36:01:d0:e7:64:08:ad:17:
         2e:61:35:b3:85:53:ba:22:01:e1:20:67:b9:de:d6:3f:b1:49:
         7f:7c:8d:56:b1:de:83:4c:bf:82:37:46:f1:fa:86:11:ef:07:
         3c:fd:1a:d3:78:02:02:90:29:28:01:d9:77:a8:0c:55:d5:ff:
         db:1d:b7:4d:00:3f:b7:db:51:84:d3:9b:13:4d:95:7e:75:55:
         64:2a:6f:22:0b:f8:27:d8:77:cd:18:02:92:5c:33:84:31:99:
         85:06:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:13:35 2026 by rpki-client