Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/f1bfc1bf-bba6-3be8-99e2-d780325aca98.roa
File:                     f1bfc1bf-bba6-3be8-99e2-d780325aca98.roa (raw, json)
Hash identifier:          2hrAZIwGL3tN9Ysz6jgcb3Lfya2gOZyTOee1bRv5iUs=
Subject key identifier:   21:1C:21:88:61:E0:16:57:94:D0:89:85:22:6C:64:58:3C:62:C3:E3
Certificate issuer:       /CN=576c64a5-3cd2-44d5-80c3-626ccc84e087
Certificate serial:       010D0C9F4328584D91BFF93C434095E6EEF6CB40
Authority key identifier: 93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/f1bfc1bf-bba6-3be8-99e2-d780325aca98.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     14497
IP address blocks:        74.115.252.0/24 maxlen: 24
                          74.115.253.0/24 maxlen: 24
                          74.115.254.0/24 maxlen: 24
                          74.115.255.0/24 maxlen: 24
                          208.72.156.0/24 maxlen: 24
                          208.72.157.0/24 maxlen: 24
                          208.72.158.0/24 maxlen: 24
                          208.72.159.0/24 maxlen: 24
                          208.92.64.0/24 maxlen: 24
                          208.92.65.0/24 maxlen: 24
                          208.92.66.0/24 maxlen: 24
                          208.92.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:bf:f9:3c:43:40:95:e6:ee:f6:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576c64a5-3cd2-44d5-80c3-626ccc84e087
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=22be4210-103b-4a5d-bca5-5987c1325e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:db:58:a8:3b:e4:fb:08:92:be:a1:7d:21:04:
                    35:8d:98:2e:97:77:59:1d:05:0e:e7:9c:40:32:72:
                    5b:60:22:f7:c0:42:02:74:fd:02:08:de:51:03:0b:
                    82:c9:8e:79:9c:85:90:a4:07:df:09:2a:2f:be:58:
                    5c:d0:83:07:6c:07:62:8f:07:ae:18:19:d2:54:07:
                    28:95:ca:78:46:bc:da:e2:eb:57:3d:15:d2:2b:04:
                    02:3b:a8:ff:39:50:60:a0:b5:0e:18:2b:e6:c2:23:
                    26:17:3d:ba:9d:d1:1b:02:a2:1f:7b:a9:d9:3b:41:
                    5f:ac:82:c0:80:9b:27:96:02:da:a6:1b:aa:85:7a:
                    05:22:af:b7:94:f8:3b:b2:76:35:63:2f:47:33:9c:
                    97:a4:fb:6a:70:02:43:89:d8:36:4f:6a:00:54:a6:
                    42:f4:b1:68:20:7a:28:6f:97:ba:af:02:f8:50:05:
                    5e:53:e9:c2:80:f4:aa:21:ad:ae:90:f4:c4:f8:2a:
                    b7:b6:40:2f:99:d9:17:99:9b:83:18:e8:32:f3:28:
                    64:94:7c:2b:10:13:ac:f8:20:b7:19:fe:1e:02:d1:
                    c3:86:34:e1:6c:20:75:f1:e5:4b:34:5a:c1:7a:bb:
                    55:c3:33:c7:49:5b:3c:ff:6f:1f:03:3f:cb:db:83:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1C:21:88:61:E0:16:57:94:D0:89:85:22:6C:64:58:3C:62:C3:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/f1bfc1bf-bba6-3be8-99e2-d780325aca98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl

            X509v3 Authority Key Identifier:
                keyid:93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.252.0/22
                  208.72.156.0/22
                  208.92.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a4:46:02:a5:ea:c6:8d:cc:8f:69:bf:87:34:34:f3:6d:e3:
         8f:c2:a3:df:2a:82:a3:8d:e4:50:8e:71:f5:b7:e3:f0:d8:a8:
         aa:ad:d5:6b:81:58:28:b5:ed:c8:37:68:d5:4d:6d:03:28:ec:
         2b:d3:67:f9:15:1f:73:fd:93:a1:28:59:28:60:ee:2c:e6:28:
         75:9b:32:3f:f6:81:20:c4:ef:79:2f:b5:4b:27:34:6a:3f:43:
         6b:0d:e1:af:c5:85:a5:4b:a5:03:53:33:82:cf:05:6d:35:22:
         5c:54:02:1a:14:71:99:f2:0a:8f:44:28:be:0a:43:d3:32:74:
         48:ca:34:b0:a8:de:79:5c:c1:78:a3:07:c3:a1:d0:3a:ac:b7:
         99:88:5b:b5:72:ce:e2:d7:d8:5b:8c:aa:6a:7a:b8:66:18:de:
         ea:ed:91:bc:20:fb:8c:30:8e:99:99:9e:08:c0:b5:f4:4a:80:
         73:d1:e1:bd:5b:6d:02:20:ba:1d:2e:7b:43:2a:85:5c:b5:da:
         b7:8e:f6:2d:03:bd:09:fb:5a:0c:78:da:bb:df:9a:be:49:13:
         e2:ed:10:c5:d7:6d:4b:78:e8:f4:a5:21:2c:01:2b:dd:fd:36:
         f6:28:b2:c2:c3:1d:db:8b:fe:65:4a:99:e9:af:3e:f1:9c:db:
         fe:f4:9d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:01:30 2026 by rpki-client