Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/04d880c2-f4ce-3ee2-bb68-def12c7bc2a4.roa
File:                     04d880c2-f4ce-3ee2-bb68-def12c7bc2a4.roa (raw, json)
Hash identifier:          nEvfcayYNGT016CM1WVrLpChu27OwXsSWfNCcY5+p+s=
Subject key identifier:   9A:3A:55:FD:3F:E6:F6:9A:AA:20:FF:C1:31:DB:A2:F2:FF:B5:FD:8C
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584E31CF7FCB11C391BE1CBC3000
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/04d880c2-f4ce-3ee2-bb68-def12c7bc2a4.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     21928
IP address blocks:        172.57.114.0/26 maxlen: 26
                          172.57.114.64/26 maxlen: 26
                          172.57.114.128/26 maxlen: 26
                          172.57.114.192/26 maxlen: 26
                          172.57.115.0/26 maxlen: 26
                          172.57.115.64/26 maxlen: 26
                          172.57.115.128/26 maxlen: 26
                          172.57.115.192/26 maxlen: 26
                          172.57.118.0/26 maxlen: 26
                          172.57.118.64/26 maxlen: 26
                          172.57.118.128/26 maxlen: 26
                          172.57.118.192/26 maxlen: 26
                          172.57.119.0/26 maxlen: 26
                          172.57.119.64/26 maxlen: 26
                          172.57.119.128/26 maxlen: 26
                          172.57.119.192/26 maxlen: 26
                          172.57.120.0/26 maxlen: 26
                          172.57.120.64/26 maxlen: 26
                          172.57.120.128/26 maxlen: 26
                          172.57.120.192/26 maxlen: 26
                          172.57.121.0/26 maxlen: 26
                          172.57.121.64/26 maxlen: 26
                          172.57.121.128/26 maxlen: 26
                          172.57.121.192/26 maxlen: 26
                          208.54.157.0/26 maxlen: 26
                          208.54.157.128/26 maxlen: 26
                          208.54.157.192/26 maxlen: 26
                          208.54.158.0/26 maxlen: 26
                          208.54.158.64/26 maxlen: 26
                          208.54.158.128/26 maxlen: 26
                          208.54.158.192/26 maxlen: 26
                          208.54.159.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:7f:cb:11:c3:91:be:1c:bc:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=b5222738-1aac-47bf-bfc1-0e4387fc11dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c1:0c:c0:a6:a6:41:8e:94:b9:1f:f3:be:0d:
                    7e:3d:c1:67:bb:87:e6:98:8b:98:c5:1f:41:cb:02:
                    c1:12:f4:d1:b6:cc:15:78:e1:b0:19:7b:71:62:da:
                    29:76:10:a1:96:a1:2b:77:cb:3e:a4:ab:4e:b7:d5:
                    2a:51:1a:37:2d:52:4e:01:16:20:73:40:b3:af:a6:
                    09:f6:e1:84:88:68:65:bb:71:39:dc:39:b5:03:f2:
                    c4:6c:22:30:c5:39:65:a9:ac:5e:ed:9e:06:a7:6f:
                    9f:fa:ec:46:79:08:92:11:c6:73:eb:b6:e8:ec:d2:
                    1e:0b:18:22:16:06:b6:3e:e2:70:d7:b1:20:b8:87:
                    b2:b6:3a:a4:88:44:9a:52:cd:78:81:a4:92:2d:34:
                    97:84:9e:70:6d:aa:c2:f7:85:54:1d:40:a6:3d:da:
                    19:e4:f0:00:92:20:3b:81:c3:66:19:ea:c5:28:83:
                    9d:6e:4e:71:31:f1:d3:16:69:6b:d6:00:95:28:74:
                    e7:bf:6b:01:8a:5e:4f:dd:e9:de:cf:b1:34:9d:0f:
                    19:ff:48:84:05:06:e5:76:1f:fe:3e:0e:a7:46:90:
                    a6:43:5b:3f:72:f4:ff:ae:50:38:a6:04:95:7d:76:
                    a1:47:aa:26:3e:6a:af:6f:0c:92:68:37:4a:9c:98:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3A:55:FD:3F:E6:F6:9A:AA:20:FF:C1:31:DB:A2:F2:FF:B5:FD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/04d880c2-f4ce-3ee2-bb68-def12c7bc2a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.57.114.0/23
                  172.57.118.0-172.57.121.255
                  208.54.157.0/26
                  208.54.157.128-208.54.159.63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:b9:20:5a:30:2f:c6:c3:83:05:30:3a:02:98:91:8b:36:dc:
         43:ab:5e:b7:b0:d0:af:b1:13:11:2c:8c:59:01:37:58:0b:52:
         50:db:f3:12:ac:7b:ea:59:57:fa:6e:a7:18:b1:c4:5e:03:26:
         91:b5:46:1a:f8:ad:3d:35:ef:b7:57:80:c4:05:90:51:8b:79:
         2d:f7:78:75:a9:49:21:36:cc:01:ac:21:28:4e:fb:56:55:9a:
         15:0d:ce:64:76:2d:95:49:00:2b:6f:41:f7:c5:ec:ee:20:b0:
         cd:22:8a:44:f6:38:0e:e9:cf:7d:b7:d4:6e:bd:0b:45:51:b0:
         54:34:24:e4:b0:e7:8b:6e:8e:9d:ec:85:d6:d7:48:88:35:fb:
         46:62:87:8b:63:fb:07:5d:05:7f:88:76:f9:00:51:88:b0:61:
         6b:6c:aa:1c:95:f2:a8:96:25:fe:97:53:fd:eb:16:06:d3:43:
         ef:67:71:e5:1f:52:01:1c:d0:2d:a2:4d:0a:b5:54:d3:d9:e0:
         9e:6d:71:7f:7a:e9:17:75:e6:eb:14:d2:9f:0f:c7:26:81:f1:
         42:fa:90:77:00:25:fd:d9:77:78:f6:9b:a3:26:34:78:59:91:
         cf:ed:cf:49:92:17:d6:74:38:c7:3c:51:b8:d0:50:ad:d0:01:
         32:35:8c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:25:02 2026 by rpki-client