Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa
File:                     e75cf125-8715-3d14-8f55-bb352f87cf59.roa (raw, json)
Hash identifier:          Y0r1O9P1J83iKzhwNpeK77zG+NdB3rVVq1x1Ts1vsOk=
Subject key identifier:   F4:92:02:37:EA:4C:8A:0D:95:E3:01:10:0B:D1:F8:32:5D:5B:59:B3
Certificate issuer:       /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Certificate serial:       010D0C9F4328584D5E1A49D843B02C9A92858D80
Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     11961
IP address blocks:        64.89.208.0/20 maxlen: 20
                          72.250.128.0/19 maxlen: 19
                          108.59.112.0/20 maxlen: 20
                          216.228.32.0/19 maxlen: 19
                          2607:8380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:49:d8:43:b0:2c:9a:92:85:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=a2c6357f-cab0-4bf1-9692-b7a91be7c1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:20:ba:25:1f:f8:69:7e:24:60:95:15:7d:
                    bc:54:31:15:f5:50:9e:63:15:c4:f4:c6:7e:ec:22:
                    06:92:74:0e:a7:73:a4:11:e7:e2:0a:17:1f:af:48:
                    d5:07:cf:a3:0e:d7:d5:61:02:b2:2d:11:42:fd:06:
                    db:48:f9:18:12:ab:a2:62:95:44:a6:e6:1b:92:bf:
                    44:cf:e4:e6:37:65:71:e7:83:99:95:4a:f7:33:2b:
                    57:66:2c:3b:94:29:99:e0:47:c8:d8:db:7e:d3:bd:
                    be:73:dc:2a:9e:65:6e:96:06:25:a0:d4:9a:a8:6c:
                    68:b6:05:a4:c0:0c:21:cd:2e:c8:bb:69:c3:80:ad:
                    74:d3:05:1b:e3:7d:c0:4a:3a:95:dc:78:b8:80:12:
                    83:e4:2d:6b:6b:2e:e1:5d:45:d5:74:be:8d:20:2c:
                    16:d9:b0:a6:7e:c7:90:69:72:08:ae:8d:9b:6b:1b:
                    90:96:71:90:75:b0:fa:4d:54:d0:1a:d3:1c:5f:63:
                    65:f7:60:d7:b1:f4:5e:3b:a7:53:d8:b7:c4:be:67:
                    c5:6e:a8:0e:15:74:da:9a:88:66:f6:c2:59:91:63:
                    b4:b9:38:f2:fc:41:4b:ad:54:67:aa:13:f6:43:c3:
                    fc:c7:63:63:f4:ac:a8:a4:8a:92:d0:68:94:ec:e5:
                    56:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:92:02:37:EA:4C:8A:0D:95:E3:01:10:0B:D1:F8:32:5D:5B:59:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl

            X509v3 Authority Key Identifier:
                keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.208.0/20
                  72.250.128.0/19
                  108.59.112.0/20
                  216.228.32.0/19
                IPv6:
                  2607:8380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:45:af:90:e8:2e:74:91:47:86:39:d3:42:49:51:11:ab:53:
         71:01:8d:00:9c:f9:eb:6e:b8:e4:21:4c:b7:64:61:91:0f:5d:
         47:ca:ba:9d:0d:1d:2a:44:ae:86:1e:77:a0:3f:9d:ba:7e:09:
         e0:15:8a:fb:c9:b7:8c:db:20:37:79:15:f5:85:cf:b3:d0:48:
         f6:f5:ca:56:f0:27:97:d2:40:1a:86:f7:b9:57:c6:ab:84:00:
         2a:2e:55:1f:7f:f3:1d:91:0d:c6:f1:6e:74:be:ba:8a:e2:aa:
         ac:46:a4:0e:18:2d:28:d7:e4:18:9c:43:49:db:4a:cc:f0:01:
         32:5c:fe:fe:fe:59:79:b9:b4:23:9d:d1:68:a7:27:4e:9b:f6:
         c1:89:b1:d3:c7:86:4a:b5:9d:1c:75:2f:26:be:d4:56:e7:55:
         54:68:ba:ac:41:0d:00:76:5d:46:99:b9:19:54:91:56:92:af:
         12:4b:fc:72:39:8f:25:c3:9a:13:8f:38:c0:f1:42:9a:73:56:
         7e:d5:70:2f:4b:a3:10:ef:e3:29:34:c6:20:c9:73:80:dd:ed:
         46:3f:07:bb:5e:52:1a:b0:d3:42:dd:d4:4a:4b:fb:c6:dd:1d:
         a5:d6:9f:c0:bd:2f:c1:d3:fc:68:3c:93:1d:12:ce:1a:b7:63:
         42:34:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:27:15 2026 by rpki-client