Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/57959813-1284-3a5b-9c0c-fa8cadd20bbd.roa
File:                     57959813-1284-3a5b-9c0c-fa8cadd20bbd.roa (raw, json)
Hash identifier:          9G1x5c4tvHsQwX6WyPZ1DGKFhGG/g4BGA/64xVRbgz0=
Subject key identifier:   D2:E6:24:3D:30:C4:94:E6:5D:44:1D:54:2D:C9:1B:52:CF:3E:8B:DA
Certificate issuer:       /CN=fac97b3d-4c08-472b-89c2-d580150a0c8e
Certificate serial:       010D0C9F4328584DA3E55B7DA87FC6F38D500100
Authority key identifier: 50:7E:D8:36:FF:57:A7:33:12:72:70:7D:DB:4F:ED:BF:6E:46:1E:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/57959813-1284-3a5b-9c0c-fa8cadd20bbd.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     36797
IP address blocks:        199.87.196.0/22 maxlen: 24
                          208.76.200.0/22 maxlen: 24
                          2607:f0c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:5b:7d:a8:7f:c6:f3:8d:50:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac97b3d-4c08-472b-89c2-d580150a0c8e
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=001be5b6-83bf-45d3-85ab-cb549922abe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:7f:bc:04:0a:af:68:81:c5:b1:7d:47:a8:
                    e5:8f:e7:e6:12:32:c1:d9:5c:27:12:a1:9f:32:a8:
                    ee:9a:ca:ff:68:1a:6d:a9:48:ef:f5:3b:eb:b2:5d:
                    fe:7e:53:e5:59:1d:3c:5d:02:9d:0a:27:1b:c7:91:
                    6f:6b:6f:b7:4b:43:4e:68:84:e0:94:15:33:22:9e:
                    3f:a4:df:ca:55:af:57:5b:a8:94:77:ae:7d:6b:5f:
                    3c:51:4c:22:06:6f:73:27:0d:e2:24:42:3b:fc:03:
                    aa:dd:73:6a:61:95:53:04:b6:de:e4:ff:42:be:19:
                    f0:e6:dc:df:1a:32:19:20:c1:f8:be:c7:f4:5e:32:
                    8c:46:21:f5:f0:46:bb:ef:ab:fc:b1:42:da:07:9c:
                    17:a4:3c:ab:1a:77:7a:5a:0f:57:bd:8d:96:2f:98:
                    97:d7:fb:87:71:2f:eb:ca:57:47:0b:24:d4:97:63:
                    78:74:6c:89:79:da:07:23:79:ce:38:af:a9:98:1e:
                    43:77:87:fc:fa:9f:0b:12:05:2c:72:53:95:f7:d7:
                    03:93:23:ff:e5:75:db:f9:90:2a:ac:56:23:db:96:
                    97:d6:ee:d3:49:11:a0:5b:ce:a5:5a:e8:88:80:b5:
                    27:83:69:0b:ad:68:41:3b:59:c6:61:58:90:07:59:
                    20:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E6:24:3D:30:C4:94:E6:5D:44:1D:54:2D:C9:1B:52:CF:3E:8B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/57959813-1284-3a5b-9c0c-fa8cadd20bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.crl

            X509v3 Authority Key Identifier:
                keyid:50:7E:D8:36:FF:57:A7:33:12:72:70:7D:DB:4F:ED:BF:6E:46:1E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.196.0/22
                  208.76.200.0/22
                IPv6:
                  2607:f0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4d:2c:4b:54:b6:a9:18:2f:ad:1f:dc:ef:cd:70:2a:7e:27:
         6c:db:0f:95:75:c5:be:d6:81:ad:ad:b3:9f:35:15:db:b9:60:
         89:4d:13:9f:ec:62:ed:fc:ef:b3:01:90:b4:4a:ad:4c:bc:36:
         2c:e2:e9:39:93:08:5d:da:35:f5:ff:44:b8:fe:02:6d:d3:01:
         a9:02:a9:3c:cc:5e:51:14:fc:40:a5:68:32:62:7f:2d:bc:62:
         50:fb:b3:c9:7b:cd:e0:9d:f6:a1:32:1c:e2:dd:30:5b:77:5e:
         59:6b:d7:ff:b6:98:d1:e3:0d:9f:e9:2c:c5:ba:01:f7:52:7e:
         ca:be:a9:0b:2a:c9:d4:67:57:c2:56:d6:f2:73:08:ff:a2:41:
         8f:53:23:5a:73:d2:f6:28:aa:58:6f:b5:2e:ef:5f:4a:4c:60:
         4a:56:35:b6:8f:4d:16:ef:fc:c3:92:c8:37:51:c7:b6:f5:6d:
         1e:c2:39:14:9f:45:49:30:2d:dd:6b:ce:9f:f1:c1:f7:36:a9:
         7c:e6:6d:28:0c:bb:c7:2b:54:eb:4f:b4:bf:82:35:90:bb:c7:
         be:4e:50:de:0c:ab:63:ce:af:ed:03:84:33:d2:10:d4:a7:4e:
         54:85:c3:67:74:be:b6:21:03:bf:59:77:15:5d:0d:92:2b:50:
         3c:5d:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:17 2026 by rpki-client