Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa
File:                     9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa (raw, json)
Hash identifier:          zX2Pyek/ZQYdsq8U+PqMAUtCmLcyzcdb+sb00gWuBCw=
Subject key identifier:   52:F6:25:7B:B1:1F:49:F0:17:7C:68:D5:1C:84:7B:62:40:54:E1:AF
Certificate issuer:       /CN=9052f135-bd8c-426f-88a5-6b30bb6e99c8
Certificate serial:       010D0C9F4328584D4A8F86270A9CE6F554D48A2C
Authority key identifier: 9F:C6:2E:69:31:8C:74:09:1B:0C:D7:1C:02:B0:DB:FF:C2:8E:2D:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     46958
IP address blocks:        74.113.204.0/22 maxlen: 24
                          2620:126:d000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9052f135-bd8c-426f-88a5-6b30bb6e99c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9052f135-bd8c-426f-88a5-6b30bb6e99c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:86:27:0a:9c:e6:f5:54:d4:8a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9052f135-bd8c-426f-88a5-6b30bb6e99c8
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=02ca22fa-aeb9-4343-80e4-1d918ced64eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c9:6a:d6:53:94:41:38:85:3e:5b:68:ba:36:
                    08:c4:02:bc:70:3a:5e:48:92:c6:b7:7d:3f:d2:cb:
                    7e:05:c0:b5:4d:bb:fe:6b:ab:1a:57:d7:a9:77:0e:
                    ff:cb:f0:c8:5c:2b:fc:d2:8b:d0:d6:22:1f:2f:f8:
                    fc:11:35:a8:fd:a3:9c:e0:14:95:70:d9:96:19:69:
                    53:c5:da:a6:30:37:6e:dc:a7:f6:8e:5e:b0:a3:2c:
                    df:86:8a:f9:79:13:3b:4c:82:ea:72:42:54:7b:ef:
                    47:10:0c:70:a6:7a:69:cb:c2:20:c4:44:fa:6f:72:
                    92:c7:6c:f5:a3:16:01:ad:d2:c5:45:7e:81:10:40:
                    0d:13:35:ea:a6:e1:60:e0:19:dc:05:b6:ec:1c:e5:
                    ba:72:5c:e9:ca:e7:fc:44:aa:45:07:2b:5f:9f:e4:
                    fb:ab:0e:22:49:3f:5e:70:3e:ac:87:18:81:58:d0:
                    c6:18:bc:dc:f1:db:5d:20:ce:72:01:80:59:a1:8c:
                    e3:c4:cb:31:45:e2:98:63:af:2f:fa:c2:bf:d8:de:
                    fc:74:bb:71:f0:9b:1c:7b:bc:2a:31:44:57:6e:9a:
                    d5:f9:6e:8e:29:53:7f:fd:c3:bf:6d:4d:08:30:82:
                    ab:7c:42:84:cc:d4:15:a9:61:0e:c3:c1:a2:c2:71:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F6:25:7B:B1:1F:49:F0:17:7C:68:D5:1C:84:7B:62:40:54:E1:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9052f135-bd8c-426f-88a5-6b30bb6e99c8.crl

            X509v3 Authority Key Identifier:
                keyid:9F:C6:2E:69:31:8C:74:09:1B:0C:D7:1C:02:B0:DB:FF:C2:8E:2D:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.204.0/22
                IPv6:
                  2620:126:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8f:cf:db:33:22:f2:c0:36:99:d9:30:4a:53:f3:62:60:82:
         4d:6f:da:a9:85:5e:c6:88:7e:b0:ee:cd:85:86:ae:af:77:0d:
         f0:22:6a:e7:38:83:5c:86:4f:f3:f2:f0:fd:57:8f:5c:54:10:
         06:64:21:09:cd:a6:db:d5:fb:ad:57:ba:c8:8e:77:a4:7e:ae:
         be:05:6c:d3:a3:3d:37:a1:9a:bf:44:93:77:fa:7f:32:b1:13:
         30:95:b5:30:9a:20:8f:c4:49:c4:57:85:91:06:d2:0c:be:40:
         f0:7f:c4:0d:48:e4:0b:32:27:2b:d6:5c:18:db:bd:c1:58:9d:
         9f:82:c2:67:40:c1:ce:d0:0e:b8:c3:4b:a6:25:80:d1:96:49:
         ef:a1:6d:17:66:79:86:0b:3b:a1:30:2a:a3:e5:81:b4:41:64:
         4f:bd:69:96:ce:99:5a:a3:e5:9a:19:3b:08:cb:0c:d4:e6:2f:
         3b:78:db:98:87:fb:41:59:7f:bc:6f:b9:0a:f5:8b:9f:14:da:
         94:d3:d5:47:da:9a:65:ee:e5:e9:be:87:3c:1b:4b:3f:d6:e6:
         31:6b:13:49:07:ec:cf:0f:6b:00:1b:eb:88:f0:cf:45:11:6c:
         e0:28:6f:59:e6:b1:c6:7b:38:21:2d:7c:c9:1c:6d:39:5b:ba:
         2f:a4:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:19 2026 by rpki-client