Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa
File:                     21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa (raw, json)
Hash identifier:          +pAWA3gILSj7RodK+IbtrbiTpBqYanrcTr/lmoDeAQk=
Subject key identifier:   C5:BD:42:27:A3:73:DC:B6:52:02:13:5B:E9:07:66:E0:CC:21:2F:FC
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584CAE5738EA6414991681503400
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     400754
IP address blocks:        50.63.4.0/23 maxlen: 24
                          97.74.72.0/22 maxlen: 24
                          97.74.76.0/24 maxlen: 24
                          97.74.112.0/22 maxlen: 24
                          198.71.244.0/22 maxlen: 24
                          198.71.248.0/22 maxlen: 24
                          208.109.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:38:ea:64:14:99:16:81:50:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=48b233f8-7d01-435c-9e87-4c1be4ef81fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:09:8d:43:ed:a7:47:ae:43:ea:10:7c:55:
                    7d:66:93:0a:41:cb:b0:2d:70:6e:82:09:3f:9d:07:
                    30:15:c5:1b:4b:2f:61:21:c1:58:be:4a:68:62:dc:
                    f5:9b:3b:4a:57:a7:40:0a:40:f9:08:a2:59:3b:59:
                    52:c9:c7:4a:e2:0e:6e:62:9a:7f:e9:fa:0e:e4:0e:
                    ee:66:ca:51:c3:86:0d:53:dc:f3:61:9c:ec:ae:91:
                    95:a3:28:d5:4b:8d:e1:f0:04:34:08:fe:5c:c5:f4:
                    ba:98:b7:1b:c9:b6:ca:09:06:93:0b:7d:2b:26:b8:
                    ce:21:a1:a9:84:25:38:25:5f:ae:2d:65:a2:78:da:
                    90:aa:26:31:dd:df:9c:6e:96:ec:e9:12:3e:bf:b8:
                    0e:51:f7:50:64:ea:0b:8c:8a:fe:f3:51:7f:ba:c8:
                    53:8e:25:43:d4:cf:dc:46:4a:a2:7a:b0:7b:e3:cb:
                    1a:52:fa:5a:8d:04:0a:db:0a:40:0c:59:68:a4:9c:
                    7c:e7:a0:14:7d:98:a3:68:82:f0:49:bc:39:b5:7d:
                    44:53:fe:48:76:04:95:59:09:b9:90:37:22:b9:f4:
                    bb:39:79:36:f4:61:47:14:2a:92:68:61:fd:29:fb:
                    8c:10:4d:d7:39:c0:3d:7b:e5:56:87:46:60:04:91:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BD:42:27:A3:73:DC:B6:52:02:13:5B:E9:07:66:E0:CC:21:2F:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.63.4.0/23
                  97.74.72.0-97.74.76.255
                  97.74.112.0/22
                  198.71.244.0-198.71.251.255
                  208.109.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ef:e3:5d:ee:4b:3d:7c:7e:c3:1f:af:c7:a8:72:54:d0:f9:
         67:f8:1b:d0:31:a8:00:40:55:05:59:73:fe:0c:d9:bb:02:89:
         61:06:e3:0f:62:36:4e:cb:7b:08:a4:e7:46:45:5f:eb:31:53:
         9b:23:a7:4c:ce:20:77:48:8d:2d:d2:98:f2:05:40:e9:5c:30:
         9a:78:de:c3:b3:44:97:05:64:3c:c8:8d:00:c2:e0:00:07:a8:
         51:c1:47:84:3b:c8:09:a2:2b:30:d3:b5:13:ab:30:0c:00:c1:
         e4:a1:8f:be:c8:e6:ba:f4:8d:57:7a:7d:42:c4:1d:90:57:eb:
         2a:47:e7:f0:2f:06:e2:69:c5:28:c6:42:31:48:ff:26:39:4e:
         a1:72:32:88:19:82:5c:64:9a:26:1b:d8:3c:b5:67:32:1e:26:
         09:0b:9a:b8:03:da:9b:51:a8:76:21:39:53:e6:fa:09:2d:fe:
         8a:25:41:38:f1:97:25:60:2a:86:38:4e:91:94:b0:8c:e8:91:
         41:fd:84:22:1e:7b:38:28:08:06:33:37:e8:9b:92:41:93:95:
         1a:0f:4e:5c:0a:9d:9e:97:3e:69:a3:1f:9c:1c:02:7d:c3:84:
         91:a5:a1:43:e8:7a:18:ed:39:1c:b5:d1:25:6d:c6:33:c0:52:
         5e:08:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 25 08:46:10 2026 by rpki-client