Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/96cde41d-12c1-30ee-91b7-f29b118999ba.roa
File:                     96cde41d-12c1-30ee-91b7-f29b118999ba.roa (raw, json)
Hash identifier:          cbYAtvcJlIBHPsHNVhDb+IrW0mJ5Dpqw5fJHvyJRjHc=
Subject key identifier:   1F:00:26:4D:5D:EE:15:3A:B4:5F:94:60:E5:C3:FD:6A:B5:46:C8:4B
Certificate issuer:       /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
Certificate serial:       010D0C9F4328584DC56590728AE411538D605868
Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/96cde41d-12c1-30ee-91b7-f29b118999ba.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     36374
IP address blocks:        66.234.112.0/20 maxlen: 24
                          67.230.224.0/19 maxlen: 24
                          69.42.224.0/19 maxlen: 24
                          152.65.128.0/19 maxlen: 24
                          162.211.40.0/22 maxlen: 24
                          162.245.24.0/22 maxlen: 24
                          172.110.224.0/20 maxlen: 24
                          173.224.32.0/20 maxlen: 24
                          192.136.158.0/23 maxlen: 24
                          192.210.42.0/23 maxlen: 24
                          198.13.76.0/22 maxlen: 24
                          199.30.96.0/21 maxlen: 24
                          206.183.176.0/20 maxlen: 24
                          216.168.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:90:72:8a:e4:11:53:8d:60:58:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=4822d483-00a2-4f4b-ad8c-29fd518bfddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:25:db:99:f6:04:d2:42:fc:60:2a:7f:f6:
                    5c:3b:c2:b7:6f:fb:4e:0f:23:d6:43:38:d1:95:47:
                    cd:19:84:16:cd:41:bb:16:15:7d:6f:d0:82:9e:ec:
                    ff:a8:f0:12:a2:df:1a:41:26:63:bd:e4:87:06:17:
                    23:cc:c6:8d:8d:db:ff:28:95:72:6e:03:cb:7a:16:
                    9f:bf:95:ad:61:d2:98:7f:48:c2:dc:81:48:6f:c5:
                    e8:48:76:28:ab:ac:96:c3:80:cb:7a:96:ac:07:04:
                    88:9f:72:70:60:f3:dd:d8:76:5d:7d:4f:2e:c9:ae:
                    a5:34:6c:9a:93:b2:c6:f1:21:2b:6c:9c:2c:74:af:
                    88:b9:64:1d:43:f1:b0:36:cb:18:16:f4:2a:07:2a:
                    10:14:84:ac:45:bd:7a:48:f7:d4:a8:11:02:6b:70:
                    03:73:7a:77:e0:2d:d9:d6:b7:00:ce:ab:40:4e:70:
                    d8:02:1b:44:dc:fb:29:c6:2f:6b:75:72:0e:73:2c:
                    98:d1:39:0b:bd:7c:d9:d5:af:8c:69:7b:0b:4c:3d:
                    3c:bd:e0:5f:1e:fa:ef:69:31:43:d1:f4:8e:e3:63:
                    45:ff:1f:38:00:94:bc:e6:62:98:75:f4:05:02:e9:
                    e9:d0:07:67:e7:a0:09:f4:3a:5a:26:9e:9b:bc:dd:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:00:26:4D:5D:EE:15:3A:B4:5F:94:60:E5:C3:FD:6A:B5:46:C8:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/96cde41d-12c1-30ee-91b7-f29b118999ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl

            X509v3 Authority Key Identifier:
                keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.234.112.0/20
                  67.230.224.0/19
                  69.42.224.0/19
                  152.65.128.0/19
                  162.211.40.0/22
                  162.245.24.0/22
                  172.110.224.0/20
                  173.224.32.0/20
                  192.136.158.0/23
                  192.210.42.0/23
                  198.13.76.0/22
                  199.30.96.0/21
                  206.183.176.0/20
                  216.168.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:81:8c:e2:d5:4d:de:52:1b:c8:ba:e7:24:a8:0c:e3:fa:92:
         75:cd:88:48:b8:ca:2d:59:c0:c9:66:b6:8f:46:47:71:bb:f3:
         6c:9c:5b:c8:f3:3e:43:af:e7:4c:6d:cc:74:31:f5:69:f7:f4:
         85:70:10:fc:79:d8:8f:4d:b8:9d:18:44:42:4c:aa:8d:9b:28:
         12:dd:b7:41:f9:19:03:22:a0:78:f3:36:c6:78:e0:cd:25:6f:
         97:af:2b:02:fa:ab:52:8a:f1:92:b5:1f:bc:61:62:fb:f7:90:
         8e:28:da:a4:39:6b:e2:55:fa:eb:6a:bb:1e:76:9c:d9:15:8c:
         d0:62:29:c7:c8:db:0c:f0:15:26:9c:43:2b:36:5c:69:c6:4e:
         df:c9:e4:f4:b9:d7:4e:0e:9f:3e:49:f2:05:54:64:2f:bc:7e:
         8a:d3:4c:ae:12:66:c6:ef:b2:e5:7f:73:2e:4f:c7:f6:6f:eb:
         0b:14:2c:1e:78:fe:34:77:1a:f0:f3:cf:0e:d6:a3:fa:2d:3f:
         01:4f:c1:da:71:be:74:9f:87:d8:f5:6f:7b:3a:ce:6d:88:51:
         b8:c7:7a:8b:8f:67:fa:c2:9e:e9:12:78:06:e0:67:ad:d7:d6:
         95:b6:83:51:e9:49:b5:36:69:3b:ae:9d:03:16:ca:2a:05:97:
         b8:08:03:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:26:01 2026 by rpki-client