Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa
File:                     012553be-cadc-391f-be02-761ff5c3fe9c.roa (raw, json)
Hash identifier:          7tatQlN91j/gnHlUZXNMbnaQUlmtJOqZhrvU7ZvqyEI=
Subject key identifier:   38:89:7D:F5:B4:09:94:A8:FB:88:B3:29:8F:26:68:A4:65:70:57:F3
Certificate issuer:       /CN=e4877b41-a7e3-491a-a87e-56a8cf46d169
Certificate serial:       010D0C9F4328584D9E500ADD7F1623D373D32C00
Authority key identifier: 79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     26269
IP address blocks:        160.223.176.0/22 maxlen: 24
                          162.216.232.0/22 maxlen: 24
                          173.45.176.0/20 maxlen: 24
                          198.135.144.0/21 maxlen: 24
                          199.58.144.0/22 maxlen: 24
                          199.241.220.0/22 maxlen: 24
                          2602:ff89::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:0a:dd:7f:16:23:d3:73:d3:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4877b41-a7e3-491a-a87e-56a8cf46d169
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=6628df49-38a3-421b-bbbf-067251e09bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:c8:c7:87:06:18:f9:93:5c:b6:74:ca:16:
                    16:68:5c:e2:68:df:bd:a7:56:ca:2c:86:fa:88:30:
                    98:03:39:92:24:87:29:94:23:8c:e4:02:a2:21:9b:
                    e2:10:b6:92:20:2e:f4:47:a5:27:2d:5f:e9:42:e1:
                    83:34:78:8b:41:04:77:6a:88:cf:b8:67:62:e5:d1:
                    d9:ec:8b:25:cf:0a:4e:d8:30:79:21:eb:18:c4:82:
                    47:d9:65:0a:81:40:f0:f6:57:88:eb:f0:c3:70:01:
                    a4:fe:b6:66:20:7c:24:33:29:82:7c:ce:f3:63:ea:
                    41:d2:b6:03:df:05:2e:ca:2b:dd:be:20:b9:26:81:
                    9d:df:d3:23:2c:b2:e8:17:54:47:ba:c5:a2:01:15:
                    a3:15:e5:08:69:0d:9a:68:e7:02:46:9d:e3:42:ac:
                    76:4f:c0:91:51:0c:a7:4e:b1:90:96:2f:8e:05:e1:
                    57:fc:ce:5d:83:58:75:3c:d1:c7:74:0b:6d:07:1a:
                    3c:b1:55:83:70:46:3f:26:46:1e:5f:3c:97:2a:ba:
                    c1:85:11:4a:ae:1e:47:00:6e:fa:2e:1b:ac:48:63:
                    a5:ac:ea:1c:7b:29:e7:11:f8:23:36:f7:28:31:68:
                    67:0d:ca:73:d3:67:7b:18:f7:96:9e:9c:51:cb:5d:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:89:7D:F5:B4:09:94:A8:FB:88:B3:29:8F:26:68:A4:65:70:57:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.crl

            X509v3 Authority Key Identifier:
                keyid:79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.176.0/22
                  162.216.232.0/22
                  173.45.176.0/20
                  198.135.144.0/21
                  199.58.144.0/22
                  199.241.220.0/22
                IPv6:
                  2602:ff89::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4d:20:53:af:f1:3c:21:59:1a:d3:ea:ce:9c:52:5c:39:b9:
         22:c7:b8:04:06:61:5b:15:dd:10:b1:ab:98:20:e6:0d:09:dd:
         09:ff:c2:c9:44:79:b8:85:a1:34:04:43:ec:37:da:11:14:6a:
         3a:39:5e:fa:56:24:eb:ac:59:6e:7f:cb:94:6a:6e:40:48:66:
         3f:3e:59:ac:b2:3c:f2:ff:d0:ce:4c:4f:24:8b:c2:aa:38:1c:
         ae:41:15:a8:46:42:89:66:36:61:99:3c:4b:07:5b:84:c4:4e:
         c0:57:f9:da:cb:3c:11:a2:25:a2:25:0d:b6:4c:80:e0:76:5c:
         1e:eb:0d:1f:10:6f:c8:ca:da:69:4b:66:d1:05:b5:51:2c:3d:
         0c:5f:1a:eb:b2:c2:8a:df:31:5c:68:e2:19:81:f3:ba:84:fc:
         aa:bb:33:55:da:fc:82:d6:49:1e:7f:8b:03:53:3e:dc:e9:af:
         0b:34:1a:80:67:e2:f4:6b:a5:c5:10:c0:8d:19:03:3f:86:3a:
         2c:55:e2:85:e4:a6:53:6c:88:c6:01:66:6d:af:3c:24:94:a8:
         e5:7b:f6:30:38:22:da:0d:a8:66:59:18:0b:00:a4:b7:77:60:
         5c:99:0c:44:1e:11:5b:6b:08:2f:08:5a:b1:5d:97:b7:65:63:
         54:f5:39:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:03:46 2026 by rpki-client