Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/ff845c46-b8ce-3427-9c47-95a32c11df5c.roa
File:                     ff845c46-b8ce-3427-9c47-95a32c11df5c.roa (raw, json)
Hash identifier:          2+7DykXICr5wlgI5wk6HRt3tEXMcMwHHF3JC7qb2JXQ=
Subject key identifier:   09:1A:EE:0C:88:47:9A:33:7D:C4:4D:BA:78:0E:3D:F4:53:67:46:C7
Certificate issuer:       /CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
Certificate serial:       010D0C9F4328584D392A2CF09E158934F7A12380
Authority key identifier: 0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/ff845c46-b8ce-3427-9c47-95a32c11df5c.roa
Signing time:             Mon 02 Feb 2026 16:45:51 +0000
ROA not before:           Mon 02 Feb 2026 16:45:51 +0000
ROA not after:            Sun 03 May 2026 15:45:51 +0000
asID:                     1299
IP address blocks:        64.77.213.0/24 maxlen: 24
                          64.77.216.0/23 maxlen: 24
                          64.77.218.0/24 maxlen: 24
                          72.14.97.0/24 maxlen: 24
                          72.14.119.0/24 maxlen: 24
                          72.14.126.0/24 maxlen: 24
                          97.75.255.0/24 maxlen: 24
                          208.101.227.0/24 maxlen: 24
                          208.101.234.0/23 maxlen: 24
                          208.101.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:2a:2c:f0:9e:15:89:34:f7:a1:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
        Validity
            Not Before: Feb  2 16:45:51 2026 GMT
            Not After : May  3 15:45:51 2026 GMT
        Subject: CN=28abe995-b304-400a-a948-68ad8a983a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:dd:df:4e:ba:07:39:25:fa:e9:72:d2:e4:
                    fb:e3:e1:6e:7c:2d:36:31:d8:8d:d5:12:7a:58:ef:
                    19:bb:b7:bd:ec:30:04:50:66:ae:90:9d:5e:9c:ec:
                    57:1d:ea:d3:6a:cd:02:17:e1:4c:da:f5:b0:cc:e4:
                    d3:7a:0b:4c:7a:16:c1:5d:de:c9:80:d5:51:69:1c:
                    a2:5d:17:fe:33:89:7e:a1:72:41:37:4b:a1:80:32:
                    b8:14:8c:5e:a1:cf:c8:d1:02:6d:64:15:e4:7d:93:
                    c7:0b:7d:8b:ce:10:4b:0c:c7:f2:4a:69:b4:5c:a3:
                    6a:eb:38:65:32:2f:6e:97:87:74:92:fd:da:50:52:
                    65:94:75:30:e9:77:7f:dc:cf:b7:9c:96:d2:3b:1e:
                    1d:78:06:ed:17:ff:d7:be:f6:14:7d:4c:b9:07:b4:
                    9c:0f:cc:f9:93:dd:05:2b:31:b9:e9:ed:5b:d0:90:
                    5a:1e:dd:da:8f:41:b5:fa:a0:36:a6:de:7e:99:e9:
                    47:cf:34:5b:a5:24:0a:f2:dc:4c:c7:64:64:a6:56:
                    3b:e0:08:43:eb:53:6b:d8:d1:df:6e:2d:fa:3f:b1:
                    21:b5:01:dd:53:53:14:2d:c9:01:d7:ed:f7:b1:10:
                    d6:ca:a8:dc:8d:22:eb:ae:38:6c:0d:f2:fe:a9:ba:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:EE:0C:88:47:9A:33:7D:C4:4D:BA:78:0E:3D:F4:53:67:46:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/ff845c46-b8ce-3427-9c47-95a32c11df5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl

            X509v3 Authority Key Identifier:
                keyid:0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.77.213.0/24
                  64.77.216.0-64.77.218.255
                  72.14.97.0/24
                  72.14.119.0/24
                  72.14.126.0/24
                  97.75.255.0/24
                  208.101.227.0/24
                  208.101.234.0-208.101.236.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:b1:c0:da:74:13:60:e0:89:ef:b8:66:1a:fb:d4:63:97:
         cc:ad:6e:5b:87:99:ab:9d:38:85:f6:97:d1:e9:f6:a4:7f:26:
         d9:4c:5a:a6:24:c1:43:ee:c0:4d:aa:0d:58:69:1a:55:46:62:
         16:cd:34:fc:24:28:67:dc:13:18:e8:03:bb:83:8a:1b:31:18:
         85:04:cc:9a:eb:05:ab:0e:27:3e:d3:6c:8f:52:a1:26:a2:8b:
         79:38:f8:45:ba:08:be:95:8a:6c:cc:ce:51:84:dc:ba:0e:6a:
         17:0e:7c:98:68:0d:86:60:7f:e4:5f:a6:f3:1c:9c:af:d1:eb:
         4a:f2:58:ea:64:67:26:b3:68:d7:09:59:bf:60:22:4c:78:4c:
         53:7d:ed:37:b3:42:28:18:33:60:17:b6:bb:71:eb:55:ad:36:
         e1:be:a5:9d:d4:53:44:93:34:5c:50:d1:be:ca:d8:59:b4:1b:
         67:3c:35:ad:cc:41:01:07:f8:eb:c2:e9:f4:a7:6e:f5:ba:92:
         c8:cf:2c:25:45:3b:49:1b:88:ed:73:fd:5b:34:7b:0c:cf:47:
         2d:d3:f8:a4:58:f3:f9:56:13:34:48:10:4d:72:ac:54:0a:c3:
         a0:9d:c6:73:c1:7f:8a:5d:22:97:e9:80:39:71:30:2e:9c:0c:
         86:af:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:23:31 2026 by rpki-client