Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba/8db23c19-169f-345d-9872-1380bc6f59aa.roa
File:                     8db23c19-169f-345d-9872-1380bc6f59aa.roa (raw, json)
Hash identifier:          NetQdYNrbQ73ZY+VeQZt169ZfTnRGMh6JfPGVbjqBH0=
Subject key identifier:   AE:1A:C6:85:65:7D:EB:30:63:F1:4A:98:9F:13:80:8A:9F:2A:B2:B6
Certificate issuer:       /CN=4b3a1476-b23b-4161-a034-14838a929eba
Certificate serial:       010D0C9F4328584D12D799A753CDC2276EDF2A00
Authority key identifier: A1:B8:74:60:76:D1:C5:C5:CA:F8:08:C7:46:E9:37:07:20:0E:E9:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba/8db23c19-169f-345d-9872-1380bc6f59aa.roa
Signing time:             Fri 06 Mar 2026 02:00:31 +0000
ROA not before:           Fri 06 Mar 2026 02:00:31 +0000
ROA not after:            Thu 04 Jun 2026 01:00:31 +0000
asID:                     1423
IP address blocks:        76.77.208.0/20 maxlen: 20
                          153.55.128.0/19 maxlen: 19
                          162.244.224.0/22 maxlen: 22
                          199.193.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba/4b3a1476-b23b-4161-a034-14838a929eba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba/4b3a1476-b23b-4161-a034-14838a929eba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:12:d7:99:a7:53:cd:c2:27:6e:df:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3a1476-b23b-4161-a034-14838a929eba
        Validity
            Not Before: Mar  6 02:00:31 2026 GMT
            Not After : Jun  4 01:00:31 2026 GMT
        Subject: CN=2186cd20-ec4f-41bd-b5cb-32480e8fc408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:22:7b:96:cb:53:9c:fd:a3:03:93:94:2e:
                    db:b7:ba:78:5a:2d:49:0c:db:b3:53:e3:38:9b:68:
                    1a:91:8a:55:78:43:71:2e:8e:cf:3d:86:69:2d:b0:
                    9a:c3:a2:62:16:48:b9:b9:a1:a6:1a:7b:a0:c1:80:
                    ec:5e:cc:92:34:f1:26:68:07:34:f3:78:1e:77:3e:
                    a9:37:e3:2f:90:02:24:af:e1:92:d3:00:dd:c3:a6:
                    d4:52:ee:d9:c9:30:bc:e6:12:4a:3a:0d:aa:3a:cd:
                    3f:40:b4:be:b2:66:63:8b:8c:97:71:bd:66:b7:45:
                    aa:f6:09:ac:3f:23:9f:c4:8f:3c:be:74:48:97:3c:
                    0a:06:1b:0f:15:3f:bf:aa:40:ed:db:18:dc:52:75:
                    d5:9e:9e:03:60:b7:e7:f7:5b:2c:e8:30:02:c0:e4:
                    a0:e4:e8:b7:b5:97:75:e3:52:a3:90:2b:c2:bd:21:
                    95:de:16:02:73:72:65:44:36:b8:b3:0a:f4:07:e6:
                    4f:4f:df:80:57:66:80:16:ba:4a:de:f4:09:ae:ef:
                    d8:9b:2c:5f:9a:cf:7b:9b:dd:e8:d8:90:18:bb:c1:
                    cc:e9:a9:5c:0d:b0:a1:80:85:42:30:23:df:fb:c0:
                    2d:7e:79:6d:f7:2f:c6:d0:1c:06:40:33:f5:56:8d:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1A:C6:85:65:7D:EB:30:63:F1:4A:98:9F:13:80:8A:9F:2A:B2:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba/8db23c19-169f-345d-9872-1380bc6f59aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba/4b3a1476-b23b-4161-a034-14838a929eba.crl

            X509v3 Authority Key Identifier:
                keyid:A1:B8:74:60:76:D1:C5:C5:CA:F8:08:C7:46:E9:37:07:20:0E:E9:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.208.0/20
                  153.55.128.0/19
                  162.244.224.0/22
                  199.193.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b4:dd:34:e1:ba:98:f7:f9:b0:59:27:a5:94:6e:02:7f:15:
         94:98:9e:09:22:de:2d:31:ad:63:37:5f:ff:48:d3:24:fb:24:
         60:73:61:55:c3:12:4e:91:1d:1f:33:f7:55:0c:be:0d:6f:14:
         96:ec:7a:ed:81:ce:d9:14:9a:79:93:86:16:87:b8:59:58:59:
         c4:db:8a:09:97:a4:32:16:49:b0:8c:77:ea:2b:18:92:50:96:
         72:b7:3a:7f:5d:d2:3e:82:3a:56:4e:15:06:cf:02:15:79:77:
         a7:21:c6:e3:48:ce:ee:c0:3b:03:43:ab:1f:26:3a:60:6b:18:
         46:01:b2:fe:a0:b3:04:dd:d7:e0:8f:7e:8e:7d:8c:2f:ea:51:
         57:0c:f8:75:db:09:56:c1:72:66:15:26:7b:8b:63:4a:f3:d4:
         6c:36:b2:e7:a3:db:dc:bd:52:80:a5:22:8b:26:b2:a3:53:e2:
         e1:5e:8b:9e:01:8b:8d:77:ac:1c:2c:c8:e8:2b:ff:3f:ed:ed:
         23:98:22:27:38:20:20:b1:3d:3d:b3:c7:82:63:fc:b0:76:96:
         ac:00:9b:e8:0a:cf:b4:75:22:7e:9a:b7:77:79:25:1a:ea:f0:
         57:4b:19:54:73:3b:25:a8:d2:f9:42:44:a2:3d:ad:0b:ae:8b:
         62:b6:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:34:55 2026 by rpki-client