Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/50598dc8-c270-395c-891a-6dffce02191c.roa
File:                     50598dc8-c270-395c-891a-6dffce02191c.roa (raw, json)
Hash identifier:          AS342w3y0u2MQj7CsVn5WhI1/0nug8aDByW5bLMReM4=
Subject key identifier:   F1:B2:0B:53:FD:1A:C3:00:C0:BE:A9:F4:81:94:04:65:7C:5C:98:BC
Certificate issuer:       /CN=d0a540d7-50ef-458a-abc4-e11f9c1f88aa
Certificate serial:       010D0C9F4328584D5024EA45483941330F340B80
Authority key identifier: E5:3F:4E:D1:F1:17:6B:1D:87:91:B4:A7:20:11:3F:94:88:54:41:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/50598dc8-c270-395c-891a-6dffce02191c.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     54466
IP address blocks:        66.234.4.0/24 maxlen: 24
                          66.234.5.0/24 maxlen: 24
                          66.234.6.0/24 maxlen: 24
                          66.234.7.0/24 maxlen: 24
                          216.49.164.0/24 maxlen: 24
                          216.49.165.0/24 maxlen: 24
                          216.49.166.0/24 maxlen: 24
                          216.49.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:ea:45:48:39:41:33:0f:34:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a540d7-50ef-458a-abc4-e11f9c1f88aa
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=b3bb44d3-338d-4c59-b57c-f4c25164c4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c7:5e:7f:bf:9f:9c:60:24:2a:c5:25:ba:33:
                    be:6a:b0:d0:3f:2f:49:f8:77:2d:d2:78:09:3e:ea:
                    2a:bf:6f:18:24:ac:ea:85:7d:c1:c2:c8:d1:44:25:
                    1b:df:13:db:e0:2d:55:d1:91:ae:5f:0e:55:84:b1:
                    6b:33:19:c5:09:d6:f2:05:bf:27:e3:a7:ee:b8:54:
                    76:e5:2a:90:b1:a8:8e:8a:72:a7:1e:13:80:86:62:
                    d6:98:cb:9f:df:9f:be:35:bf:11:22:52:19:40:45:
                    fd:14:af:ae:23:3c:c7:44:0e:f6:7b:45:5d:56:72:
                    2b:c9:cb:62:92:7b:da:22:8f:d1:7f:3d:8f:b2:ed:
                    6d:76:9e:49:23:86:42:99:e9:05:99:1d:a5:73:89:
                    4b:13:48:42:f4:06:8d:68:4b:c4:00:8a:75:2a:92:
                    3d:35:09:cc:ef:93:90:7c:26:88:8f:8d:a8:40:9f:
                    96:b0:4f:a7:d6:e6:e0:35:4c:82:b6:f9:e7:42:ca:
                    20:16:02:09:cc:02:28:92:8e:43:a6:1c:3b:6a:93:
                    a7:20:68:50:99:e1:97:82:7c:17:22:0f:71:1f:af:
                    f5:bc:e3:3b:fd:b6:f2:15:74:bc:77:43:f0:7a:df:
                    cd:5c:60:d3:97:bc:d5:04:49:1d:6d:b3:9f:11:89:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B2:0B:53:FD:1A:C3:00:C0:BE:A9:F4:81:94:04:65:7C:5C:98:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/50598dc8-c270-395c-891a-6dffce02191c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.crl

            X509v3 Authority Key Identifier:
                keyid:E5:3F:4E:D1:F1:17:6B:1D:87:91:B4:A7:20:11:3F:94:88:54:41:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.234.4.0/22
                  216.49.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:37:f5:e0:63:76:dd:bc:44:f8:48:96:e4:48:cb:83:fb:0b:
         77:57:ca:59:3b:46:48:e8:57:ab:85:f1:06:4b:50:de:91:14:
         de:26:4e:24:d5:84:d2:3d:f9:90:09:de:e5:8f:1b:45:ae:43:
         34:62:a9:57:77:3e:d6:f9:87:17:00:85:e8:47:1b:78:1c:4a:
         22:b2:62:c0:29:cb:9a:57:7c:a3:cf:43:0c:de:84:5d:a6:0d:
         1a:04:bc:80:c2:c7:0b:86:05:3a:22:04:ca:55:ca:8c:3e:c6:
         32:4d:26:1d:ae:ef:94:16:8b:63:92:95:23:8b:5f:b5:e0:23:
         31:f4:5f:21:70:c4:3f:85:40:9d:a5:0c:af:e3:b9:31:d2:74:
         64:fa:2c:4a:4b:f9:0b:52:c5:2b:82:0e:78:f8:40:c4:fd:f9:
         3a:cf:80:a4:38:f3:42:23:8d:f4:d6:90:76:82:7c:f9:1f:d4:
         c1:f1:a0:56:08:a2:26:a0:e6:4f:b6:69:8e:0e:10:a9:b8:e6:
         7e:23:c4:2d:5b:b5:33:84:58:0b:90:2f:68:c7:62:86:61:66:
         79:9e:a1:15:91:f5:40:d3:71:96:26:07:4c:6d:33:da:2e:6c:
         0b:7f:f7:cf:56:f1:5b:24:fe:21:77:a1:32:89:c6:23:28:9b:
         ae:10:ae:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 09:19:10 2026 by rpki-client