Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa
File:                     3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa (raw, json)
Hash identifier:          bu2Rs6k2SGp//MDhrRy1rfSd8io51xujvlxMOTvMczs=
Subject key identifier:   15:AE:E9:CB:DA:75:93:BE:52:C6:35:72:58:BB:59:6C:37:79:23:CF
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F4328584D95EFED27217EC38515197500
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     30698
IP address blocks:        209.221.240.0/24 maxlen: 24
                          209.221.241.0/24 maxlen: 24
                          209.221.242.0/24 maxlen: 24
                          209.221.243.0/24 maxlen: 24
                          209.221.244.0/24 maxlen: 24
                          209.221.245.0/24 maxlen: 24
                          209.221.246.0/24 maxlen: 24
                          209.221.247.0/24 maxlen: 24
                          209.221.248.0/24 maxlen: 24
                          209.221.249.0/24 maxlen: 24
                          209.221.250.0/24 maxlen: 24
                          209.221.251.0/24 maxlen: 24
                          209.221.252.0/24 maxlen: 24
                          209.221.253.0/24 maxlen: 24
                          216.213.48.0/24 maxlen: 24
                          216.213.49.0/24 maxlen: 24
                          216.213.50.0/24 maxlen: 24
                          216.213.51.0/24 maxlen: 24
                          216.213.56.0/24 maxlen: 24
                          216.213.57.0/24 maxlen: 24
                          216.213.58.0/24 maxlen: 24
                          216.213.59.0/24 maxlen: 24
                          216.213.60.0/24 maxlen: 24
                          216.213.61.0/24 maxlen: 24
                          216.213.62.0/24 maxlen: 24
                          216.213.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:ed:27:21:7e:c3:85:15:19:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=079aadb4-0494-40f7-9cb4-5152612bd22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8b:6a:8d:09:94:e7:fa:c6:e6:c2:1e:14:42:
                    d7:8a:97:f3:c4:58:59:4c:fb:42:f8:31:c4:bc:7e:
                    26:5b:18:e4:e5:ee:90:70:d6:51:f1:e7:23:1e:9f:
                    18:46:57:be:bc:5a:88:6f:b1:57:63:eb:4d:6e:98:
                    99:c2:ce:b2:eb:0e:72:48:78:fe:44:11:98:b5:bb:
                    76:cb:96:c6:4f:33:ef:f2:b2:ea:3d:69:b7:0a:7f:
                    23:56:6d:d6:f4:d4:8d:d5:2c:f0:d8:7e:7d:a2:87:
                    4e:5b:00:62:b9:0a:a6:cc:96:43:f5:0b:e6:e2:24:
                    05:bb:c4:8b:f5:de:05:20:5f:36:8c:4a:5e:a1:fa:
                    f8:cd:6c:23:45:05:cc:58:ac:1f:6e:cb:5b:3c:d7:
                    05:5c:70:5b:79:53:8f:a5:8a:01:ab:b8:d9:98:01:
                    25:a7:50:ff:01:6b:d5:3b:b5:d9:74:c2:b5:d2:ae:
                    83:d4:06:82:42:94:78:ab:4d:07:39:a0:69:f8:ff:
                    7c:58:05:dd:8b:2e:07:e4:ef:f1:49:7f:69:93:91:
                    e4:c4:d3:41:04:5d:03:7a:80:d5:03:c6:cc:14:64:
                    1d:04:90:b7:02:16:3b:04:89:01:7f:a1:3d:dd:8f:
                    b2:94:4f:d5:98:3c:af:e8:aa:15:7f:37:1d:12:83:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AE:E9:CB:DA:75:93:BE:52:C6:35:72:58:BB:59:6C:37:79:23:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.240.0-209.221.253.255
                  216.213.48.0/22
                  216.213.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:fb:ca:02:01:b2:8f:06:d4:f1:bb:33:7b:9f:84:52:93:88:
         63:32:9e:b0:08:17:af:0f:4e:aa:73:6e:ee:0f:d9:de:80:35:
         df:02:41:26:3a:f9:08:06:54:33:31:53:57:67:2f:ca:46:97:
         5d:7d:3f:10:fa:77:d3:b3:46:57:3b:a0:9a:81:57:41:00:d4:
         ce:3b:20:d5:b6:65:e7:7a:ea:68:41:eb:6d:3a:c2:54:02:ed:
         a7:70:22:b1:bb:3f:12:57:7f:3c:ca:d0:aa:77:e3:cf:f0:cc:
         c7:05:49:23:56:c7:17:ce:69:ed:5f:ee:46:9c:97:34:46:df:
         a2:bd:fd:a4:db:05:c3:f0:89:59:ba:2a:d6:c6:47:b4:1d:f6:
         c9:fb:12:10:38:e1:a7:a8:e4:e7:52:c6:f0:d7:f8:3d:53:01:
         ef:43:20:9d:e8:48:84:36:6d:f6:a9:ef:12:51:6b:ee:bf:4f:
         56:d0:e6:be:cf:cd:2f:16:05:16:78:97:3f:3d:7d:b1:5b:f9:
         31:c4:f9:c1:73:b2:f4:cf:7b:17:f2:91:64:43:74:c7:eb:53:
         a7:03:b2:17:82:1c:c5:dd:78:c9:ef:b9:c7:15:c7:4e:54:69:
         fb:6a:48:74:29:65:6c:73:ee:bc:bd:ed:79:36:8f:33:88:ee:
         20:2c:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:49 2026 by rpki-client