Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa
File:                     f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa (raw, json)
Hash identifier:          J6sxNFdN7s0oxSzMA1Tz857VNvraHeeTUjcFsszvYp8=
Subject key identifier:   45:C3:71:E6:CD:BA:7C:6C:48:64:61:5D:A9:AC:5E:DD:5A:02:97:A9
Certificate issuer:       /CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
Certificate serial:       010D0C9F4328584DA28013323015AFECF13A00C0
Authority key identifier: 92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa
Signing time:             Sun 26 Apr 2026 13:00:30 +0000
ROA not before:           Sun 26 Apr 2026 13:00:30 +0000
ROA not after:            Sat 25 Jul 2026 13:00:30 +0000
asID:                     18594
IP address blocks:        64.57.144.0/24 maxlen: 24
                          64.57.145.0/24 maxlen: 24
                          64.57.150.0/24 maxlen: 24
                          64.57.151.0/24 maxlen: 24
                          74.120.156.0/24 maxlen: 24
                          74.120.158.0/24 maxlen: 24
                          199.254.202.0/24 maxlen: 24
                          204.90.2.0/24 maxlen: 24
                          208.70.176.0/24 maxlen: 24
                          208.70.177.0/24 maxlen: 24
                          208.70.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a2:80:13:32:30:15:af:ec:f1:3a:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
        Validity
            Not Before: Apr 26 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=8249f371-fc5b-4ed6-a6d0-b2b415df4b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:81:95:1e:8b:2d:fc:a9:35:75:cb:f4:d1:
                    8e:1a:c2:17:ad:b4:6a:d1:05:6d:18:98:af:bf:bf:
                    1d:6f:7d:88:d3:b4:19:0a:f8:69:05:12:45:91:e4:
                    5a:a2:87:52:a9:eb:f1:66:34:a6:0a:cc:a3:a2:ee:
                    78:f8:58:24:8b:a1:8a:60:29:3a:65:8a:17:13:ef:
                    84:60:31:c0:12:20:c1:60:90:09:a9:cf:11:a7:44:
                    0e:33:e6:5f:f6:8a:31:3f:4a:12:c2:ef:05:52:18:
                    06:6c:b1:3a:53:0b:9b:05:49:a1:ea:2e:76:49:0a:
                    79:c0:47:4c:b8:b1:dd:6e:9e:bf:ff:1b:59:a2:a5:
                    c0:de:b1:e0:25:ab:bf:3e:98:d7:03:a1:fb:2b:5b:
                    83:4b:6c:f8:b5:9d:75:9b:e3:a1:37:53:50:73:de:
                    1d:77:76:76:8c:36:dc:4c:53:f5:49:9e:37:d3:88:
                    91:43:0e:fe:76:ff:fd:cf:27:dc:c5:4e:ab:43:89:
                    97:17:b9:80:ec:ae:6d:65:c9:5a:38:6c:77:29:c2:
                    63:f1:8a:f7:c5:d2:4c:1e:70:5c:eb:ac:bb:79:d0:
                    59:fb:a3:7e:7b:7d:d7:33:3d:bb:a6:3c:3d:4a:98:
                    fe:12:7b:4c:90:e5:de:ea:b9:d7:94:c9:d2:4f:04:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C3:71:E6:CD:BA:7C:6C:48:64:61:5D:A9:AC:5E:DD:5A:02:97:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl

            X509v3 Authority Key Identifier:
                keyid:92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.144.0/23
                  64.57.150.0/23
                  74.120.156.0/24
                  74.120.158.0/24
                  199.254.202.0/24
                  204.90.2.0/24
                  208.70.176.0/23
                  208.70.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6e:57:fc:15:a9:de:42:73:c9:6e:8e:eb:0a:9d:f1:18:b2:
         46:69:fa:7b:3b:00:b2:ff:36:8e:1b:01:52:4c:3c:e0:80:a7:
         e2:88:b8:39:16:be:a2:75:d5:94:50:25:82:7c:9f:f0:93:f4:
         0e:27:de:42:85:8e:cd:53:93:a1:5d:56:2a:6f:02:38:6c:42:
         02:ff:fc:21:6d:16:82:02:f3:63:04:2e:9c:e3:a4:fc:32:18:
         c1:75:e7:75:8a:83:66:08:79:d5:23:22:e7:8a:4f:bf:06:73:
         e8:23:63:ab:f4:42:ae:ae:69:99:ce:6b:10:7f:36:e6:05:70:
         d2:ab:40:d7:b3:25:ce:2f:87:12:75:32:a0:10:a3:0c:fa:98:
         ca:e6:bf:f0:c7:cd:7b:77:fe:2f:c3:77:6f:f7:fa:c8:9d:ee:
         14:bb:3a:c9:23:6c:9b:6a:d3:98:62:32:64:bd:d8:09:71:1e:
         e9:a2:96:ee:a0:cf:4d:ca:2a:aa:27:98:1f:80:75:9f:66:9b:
         ca:33:42:64:fe:f4:1f:f1:18:7e:4e:b5:e4:9a:c3:02:84:c6:
         56:e8:52:2f:8b:02:9b:7c:d7:cd:6c:b1:77:9c:c5:b6:f0:ec:
         9d:94:8d:56:90:bd:84:70:84:4e:4b:12:96:43:12:ad:03:04:
         2c:32:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:26 2026 by rpki-client