Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
File:                     8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa (raw, json)
Hash identifier:          Y2HzYx2W2z+czNnF3uOWY7V7WLmtLkBCB5wFfFU2Dqs=
Subject key identifier:   B4:A1:C0:F5:CC:0C:26:E1:A4:18:72:E5:8F:98:01:7E:4B:65:25:45
Certificate issuer:       /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial:       010D0C9F4328584D5E1A60C0B4DFCC7DA3DDFC60
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        67.226.220.0/24 maxlen: 24
                          67.226.222.0/24 maxlen: 24
                          204.110.221.0/24 maxlen: 24
                          204.110.222.0/24 maxlen: 24
                          204.110.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:60:c0:b4:df:cc:7d:a3:dd:fc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=2d9c99f2-0377-426f-9c5d-4f6e127bfc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:43:26:bb:8f:be:b1:53:79:39:88:f0:c6:
                    ff:00:e2:86:9e:72:1c:9f:92:6e:a3:9f:e4:f2:35:
                    aa:58:ab:be:39:9b:64:b8:03:17:1f:e3:11:a7:eb:
                    ef:68:e1:43:d8:57:38:e4:b8:8a:53:9a:2f:4f:0e:
                    0a:61:08:e4:78:dd:5f:d6:73:f4:d9:8d:36:01:14:
                    c4:a4:91:d9:8d:a0:f8:11:bf:82:2a:18:5f:5d:27:
                    ee:58:cf:12:e0:29:b9:6a:59:1a:9b:03:45:e7:a4:
                    80:3e:82:78:01:b1:ff:e8:73:86:f7:74:7a:c4:4d:
                    87:68:64:a6:cf:8a:e9:33:50:30:50:c7:c1:2a:67:
                    36:97:af:d0:32:df:f9:51:96:85:50:a5:0b:9f:7e:
                    4e:fe:f7:a2:7a:29:fd:40:fb:b8:01:23:6d:ab:07:
                    d1:e5:a8:2c:0c:00:31:97:b4:12:68:fb:c8:46:a3:
                    63:6d:6b:9d:5e:1b:a5:d6:01:70:d8:32:5b:98:2b:
                    5e:0d:66:a3:fb:b0:c8:7e:f1:b8:90:07:96:23:e2:
                    60:76:f6:12:a3:58:07:9d:01:22:1e:c8:65:e0:b2:
                    80:c9:51:05:6a:69:8f:0f:79:c3:9a:50:40:72:cd:
                    98:00:1e:48:a1:59:f3:f7:24:b5:b3:2b:08:99:0c:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A1:C0:F5:CC:0C:26:E1:A4:18:72:E5:8F:98:01:7E:4B:65:25:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl

            X509v3 Authority Key Identifier:
                keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.220.0/24
                  67.226.222.0/24
                  204.110.221.0-204.110.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:87:57:ab:b9:53:a3:04:f4:fb:e2:be:5f:38:5f:39:6f:81:
         52:64:de:7e:a5:0b:b8:87:0c:04:a2:77:0d:cc:6b:6c:7c:71:
         76:f5:49:88:b3:ad:2a:7c:03:00:b1:c5:98:07:d9:9a:cc:34:
         2b:df:ea:d0:6d:5a:c8:89:91:b2:87:6b:d9:b7:de:23:45:cf:
         e7:bf:e7:49:d4:e6:22:23:ce:37:f0:64:fe:14:ca:86:64:7f:
         19:67:dc:4c:28:8d:5c:bc:cf:55:a7:41:9a:ab:0f:f7:a7:8b:
         66:2c:f8:be:60:20:d8:cd:5c:95:cb:7f:08:46:41:ec:9e:61:
         45:dd:ae:52:c0:61:ba:46:0f:b1:34:c4:4c:44:f0:59:2c:63:
         0f:de:fe:03:2e:d7:94:34:bc:6f:4d:21:5f:7e:78:f8:4f:1c:
         d8:49:b8:04:83:6e:00:82:f3:e7:55:31:67:fd:69:20:ed:4b:
         41:95:87:42:13:ab:99:ce:0c:5f:24:3f:45:66:86:16:0d:61:
         68:16:76:18:18:a4:d5:1d:fe:26:42:b5:7e:68:e3:0d:b0:4f:
         e8:9a:b3:84:89:f1:e0:46:0b:17:b7:22:4a:37:d2:b0:8b:68:
         87:e4:9d:d2:74:d9:02:35:ba:2a:aa:19:cc:17:72:a0:aa:05:
         1a:e4:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:33:04 2026 by rpki-client