Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa
File:                     d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa (raw, json)
Hash identifier:          VbAy+W8m3UabuX9mpzRYiJXBMck68m+2/Yw8IDiUTjc=
Subject key identifier:   E8:49:DC:21:B4:D3:33:C4:B8:4C:2F:63:3B:10:09:FE:6C:DF:32:00
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584D45441352D692ABAF143C48E0
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     8987
IP address blocks:        152.55.144.0/21 maxlen: 24
                          198.29.20.0/22 maxlen: 24
                          2602:f9e7:2e::/47 maxlen: 48
                          2602:f9e7:38::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:45:44:13:52:d6:92:ab:af:14:3c:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=582c8dec-b3c5-4f83-9669-76fe427fc147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:aa:ce:b3:99:88:57:2b:07:0d:b9:f7:a6:20:
                    da:a7:61:5d:17:b0:5a:67:c9:59:08:ad:7d:24:24:
                    0a:49:e9:35:a6:85:3d:e5:7b:bd:cb:5f:4a:a0:fd:
                    2e:2c:dc:18:dc:1a:9c:2a:d1:08:d3:cf:11:0b:b5:
                    61:67:71:56:d5:da:11:49:54:94:8f:53:5c:7c:98:
                    6a:f0:2a:cf:99:94:ab:d7:50:09:7b:93:02:62:85:
                    ec:de:83:fe:74:e5:cf:52:93:ff:6f:67:02:66:73:
                    a6:d4:88:b9:d6:7c:2c:c0:e6:34:1c:74:76:db:23:
                    f2:fc:bc:7a:f3:97:7d:ba:6d:ba:3e:6d:c1:30:59:
                    7b:40:a1:37:ec:17:97:fe:9f:d8:da:6e:af:16:df:
                    81:56:3c:7a:36:ee:6b:e3:9e:bb:bd:71:9e:05:0d:
                    0b:6b:a1:6b:dd:fe:4a:6f:e8:1a:6c:77:79:1b:3d:
                    e6:37:3c:c0:45:70:4f:99:28:ca:f2:34:e2:75:b6:
                    c5:db:f6:6d:17:1b:73:4d:31:5a:bd:4d:ee:e0:93:
                    45:70:52:e9:76:03:28:95:32:8c:36:d4:62:02:f9:
                    6d:2f:a7:3e:b1:49:be:e3:09:cd:03:d2:ec:2e:f4:
                    29:74:d9:fd:83:0a:8c:e0:d4:9c:4e:01:09:23:76:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:49:DC:21:B4:D3:33:C4:B8:4C:2F:63:3B:10:09:FE:6C:DF:32:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.55.144.0/21
                  198.29.20.0/22
                IPv6:
                  2602:f9e7:2e::/47
                  2602:f9e7:38::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4b:40:db:3b:be:17:b5:29:d2:17:c2:cb:db:c5:83:95:6f:
         b9:ac:c7:b7:80:05:7d:8f:1b:66:2a:cd:6b:21:4c:56:b6:d8:
         f8:16:f3:1e:81:5e:40:63:5d:d3:b4:76:f9:38:50:59:96:a1:
         b7:8b:de:46:35:1c:2c:81:80:e8:50:07:fb:5a:53:d0:ab:5e:
         05:20:f1:93:e3:6f:c3:1c:34:b0:a8:da:98:df:dd:9d:94:f5:
         9a:de:f0:8f:17:37:ef:95:8e:f8:bb:8b:e9:2f:e8:fe:62:2a:
         23:39:c0:aa:35:d0:87:f6:e7:90:ef:b7:eb:7a:c0:ad:e3:2f:
         05:1f:2e:70:6d:34:09:89:2d:26:78:a9:d9:1a:59:30:c3:ed:
         56:9c:59:fa:31:8a:34:c2:f3:d6:48:36:f2:98:82:99:73:c5:
         a6:54:3f:95:1b:e4:6f:d3:31:04:82:33:f1:57:5b:dd:ac:a2:
         b8:a7:60:e2:32:50:15:03:1b:e2:18:1f:24:79:ce:f6:8d:24:
         54:43:3d:8b:43:a9:00:89:d2:3c:94:58:11:b8:b4:7c:a1:70:
         70:fd:8d:e2:26:d4:98:90:eb:41:d1:f3:4d:31:98:51:25:69:
         b0:17:57:a6:f4:15:09:97:cc:89:12:6e:f5:33:49:58:a4:cc:
         b8:9c:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:14 2026 by rpki-client