Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/372d7012-6ee5-35ce-8cfe-b782cf89315b.roa
File:                     372d7012-6ee5-35ce-8cfe-b782cf89315b.roa (raw, json)
Hash identifier:          DmsrsE7NINcm+bkCVD2duT46h5phQGYYzO4Co9hnBQY=
Subject key identifier:   80:E8:66:29:A8:8D:19:E5:59:7C:80:D1:B9:9D:83:9D:46:AD:8A:CC
Certificate issuer:       /CN=30be0583-c369-4138-b01f-80edadf288fc
Certificate serial:       010D0C9F4328584D4D5A72ECBEB31A84A0EF4200
Authority key identifier: 46:E4:2F:1F:4C:B8:98:5F:8C:11:5A:54:C1:B9:08:F1:88:C0:5F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/372d7012-6ee5-35ce-8cfe-b782cf89315b.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     19751
IP address blocks:        64.18.140.0/22 maxlen: 24
                          75.103.128.0/18 maxlen: 24
                          75.103.192.0/19 maxlen: 24
                          137.49.224.0/19 maxlen: 19
                          172.96.132.0/22 maxlen: 24
                          209.132.160.0/20 maxlen: 24
                          2606:b500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/30be0583-c369-4138-b01f-80edadf288fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/30be0583-c369-4138-b01f-80edadf288fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:72:ec:be:b3:1a:84:a0:ef:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30be0583-c369-4138-b01f-80edadf288fc
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=59491830-e6ef-4b63-9118-183cf1a8535b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:5e:6c:91:73:45:2c:76:e1:de:3d:3e:ea:
                    6b:16:f0:dc:fd:95:67:ab:b3:d7:2f:37:cb:9b:51:
                    83:b9:0f:12:a2:34:63:01:95:d4:8e:90:bb:a8:e0:
                    c0:78:15:b9:a3:d7:35:0a:34:cd:ef:f1:9a:d3:a6:
                    8a:de:cd:c8:2c:e6:d7:64:20:22:89:e2:95:3c:49:
                    05:17:6c:3d:74:2c:ff:fe:df:6b:8f:fe:37:24:34:
                    39:f0:c8:d3:83:03:38:d2:d0:82:a2:52:22:6a:af:
                    73:91:25:68:26:84:de:26:a3:ac:25:0e:7f:f3:1c:
                    77:7a:9e:9c:28:04:93:7b:fd:82:9b:dd:5d:42:d6:
                    90:c8:ed:d0:03:d5:21:6e:09:55:b5:90:9a:94:3f:
                    2e:72:0b:f1:39:4d:e3:92:2c:31:22:93:eb:74:eb:
                    51:06:0b:cc:87:b4:b3:aa:78:08:aa:b5:cc:5d:ed:
                    a4:88:2a:eb:62:94:b8:d8:a2:b4:4f:30:b0:14:82:
                    7b:ed:fc:c8:e2:2d:26:c8:a0:9a:6a:1a:fd:99:63:
                    9c:26:ca:36:f7:9c:41:ba:dc:88:fb:d9:f2:8b:0e:
                    85:90:bb:1b:72:59:b7:d6:62:53:d9:49:b8:24:69:
                    75:36:41:ab:b9:04:05:dc:f9:18:31:7a:69:cc:ea:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E8:66:29:A8:8D:19:E5:59:7C:80:D1:B9:9D:83:9D:46:AD:8A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/372d7012-6ee5-35ce-8cfe-b782cf89315b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/30be0583-c369-4138-b01f-80edadf288fc.crl

            X509v3 Authority Key Identifier:
                keyid:46:E4:2F:1F:4C:B8:98:5F:8C:11:5A:54:C1:B9:08:F1:88:C0:5F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.140.0/22
                  75.103.128.0-75.103.223.255
                  137.49.224.0/19
                  172.96.132.0/22
                  209.132.160.0/20
                IPv6:
                  2606:b500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:bf:34:77:13:f5:65:65:10:66:40:cd:1e:25:55:15:c4:b3:
         26:84:a9:2a:dc:c6:dd:1c:0c:32:b4:00:51:65:45:b7:19:28:
         54:23:3c:7e:46:ba:5a:ef:e9:7a:18:97:46:8f:9f:1d:19:46:
         72:bb:31:58:d9:5d:09:6d:7d:b2:02:d2:13:fc:c2:e2:1b:ac:
         53:47:23:00:67:2d:d8:e1:34:01:af:39:fd:c3:08:6c:da:ab:
         bd:1d:6b:cf:1a:f9:b5:2b:34:29:ef:6b:70:8b:27:5f:f4:f1:
         6d:d1:6a:f3:68:b0:2c:cf:52:d6:e5:e9:77:bf:d6:33:01:9f:
         bc:bb:da:e8:ea:f4:81:4c:15:84:24:f1:14:81:72:ed:87:66:
         d1:ce:fb:f0:9f:01:cc:1e:bf:36:c7:3b:98:da:76:2e:00:03:
         67:c3:54:42:0b:d9:78:fb:7d:db:86:e1:50:fb:fe:35:11:64:
         80:5a:6d:e8:17:60:ca:6f:38:54:03:dd:25:6f:91:10:27:d1:
         85:97:62:dd:64:89:c4:24:14:33:05:b1:16:98:5a:30:4f:b0:
         a8:a1:b4:52:2a:29:90:cd:32:37:5e:c4:70:ca:8f:46:e6:9e:
         85:7e:5a:4d:91:94:ef:c3:e8:2a:25:05:ea:f9:d2:47:6c:f4:
         ce:26:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 23:45:55 2026 by rpki-client