Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/5942460a-897b-305c-a0c4-e27bb4252238.roa
File:                     5942460a-897b-305c-a0c4-e27bb4252238.roa (raw, json)
Hash identifier:          nMLhV/MGTN6fbvb/cWm6PhSubPq/+YEDq0+oUdH+oso=
Subject key identifier:   19:58:05:79:EA:D5:63:9F:1A:86:CF:35:97:87:D2:C5:F4:6C:82:23
Certificate issuer:       /CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
Certificate serial:       010D0C9F4328584D571FA28D6531991425C52F60
Authority key identifier: 77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/5942460a-897b-305c-a0c4-e27bb4252238.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     15198
IP address blocks:        24.52.44.0/22 maxlen: 22
                          24.75.232.0/23 maxlen: 23
                          24.75.234.0/24 maxlen: 24
                          24.75.235.0/24 maxlen: 24
                          24.75.236.0/24 maxlen: 24
                          24.75.237.0/24 maxlen: 24
                          24.75.238.0/23 maxlen: 23
                          208.115.94.0/23 maxlen: 23
                          2604:b180:200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a2:8d:65:31:99:14:25:c5:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=ee116a4e-9d23-4eba-8515-72113fa0ec94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:bc:d0:90:9b:ec:62:11:80:54:9d:71:f9:
                    c3:4c:f8:b8:fc:ee:75:26:a7:b4:20:75:ab:4f:1b:
                    78:66:e7:55:8c:13:16:f4:56:6d:8b:19:6c:c3:7c:
                    a3:59:52:3e:51:df:c8:42:ba:bf:09:b9:25:29:46:
                    81:25:98:6a:ad:d6:30:90:24:ac:6e:07:d0:24:35:
                    0e:ae:2b:ef:88:0b:1d:67:02:7e:d6:f6:a2:08:e7:
                    3a:68:26:f1:03:8d:b4:59:7c:b9:ab:1e:1a:70:7a:
                    e0:93:b3:e0:19:54:01:f9:2e:1b:74:ef:26:3d:fb:
                    eb:ba:40:c6:42:9c:d9:b8:fb:b9:2f:68:ad:52:2b:
                    5f:e3:e5:5b:26:12:ca:98:37:03:ee:97:10:cc:59:
                    a4:47:31:59:a5:df:c2:70:41:af:f4:6f:77:f3:cf:
                    bc:50:12:d3:1e:cd:66:9c:21:ba:cc:80:ee:3a:95:
                    8e:38:f5:86:b6:c2:68:5c:88:55:89:a7:b9:36:c4:
                    b1:75:bc:67:29:cc:dc:16:d8:31:53:65:87:e8:7a:
                    ee:16:61:3c:d7:9e:76:0d:77:b6:d0:ea:44:96:ca:
                    45:7a:9c:b6:c3:11:30:16:e2:d4:5d:8b:fc:ae:41:
                    d3:0d:4f:ee:09:65:38:44:08:c1:ff:6c:ca:10:d0:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:58:05:79:EA:D5:63:9F:1A:86:CF:35:97:87:D2:C5:F4:6C:82:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/5942460a-897b-305c-a0c4-e27bb4252238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl

            X509v3 Authority Key Identifier:
                keyid:77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.52.44.0/22
                  24.75.232.0/21
                  208.115.94.0/23
                IPv6:
                  2604:b180:200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f2:36:3a:4f:2c:69:4c:90:37:5d:6f:68:a1:fd:cb:59:c2:
         59:85:f5:75:00:21:f9:22:1e:d8:b2:13:0d:fb:75:31:11:7f:
         6e:95:86:66:db:96:09:3a:8a:b5:21:5f:d8:d7:99:28:f3:a8:
         78:da:3d:8a:87:fc:f8:f8:04:6a:a6:76:de:94:f9:5c:b9:62:
         82:61:c3:23:e7:c0:d2:c1:5c:82:0d:a0:cd:f0:cd:76:90:e9:
         09:c3:17:79:c7:87:ba:df:36:09:9d:76:6c:e0:76:bd:23:d9:
         60:98:64:4d:c7:53:ea:d0:fe:1a:0c:1b:e1:2b:91:a1:1c:4d:
         e9:67:94:d8:b3:f6:88:97:9d:67:d7:6c:1b:11:fe:30:8f:85:
         09:e6:2e:10:20:77:a3:ec:4e:34:4e:19:64:18:90:90:e6:66:
         e9:f3:42:8e:44:1a:87:81:b5:ee:43:de:cd:cf:8c:1e:67:5d:
         d4:b5:ec:55:dc:69:bd:22:d1:c0:16:b4:7e:b6:60:2f:67:bc:
         51:06:c0:8d:1d:23:c1:02:5e:a6:4a:87:01:24:64:7d:17:85:
         c5:bb:39:0f:06:e1:a6:56:44:1c:8a:ef:d1:5c:fd:04:e3:c3:
         6f:60:4b:f8:2b:84:ea:86:ff:99:f8:14:91:87:9b:10:da:ec:
         97:7d:a8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:28:17 2026 by rpki-client