Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa
File:                     7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa (raw, json)
Hash identifier:          dH6FhI/EFzgozwIyHzOfLsA/j/KIrQ02DR8m6PhCISI=
Subject key identifier:   57:8E:F8:4E:E1:22:AA:54:0D:78:C1:26:6D:04:28:AA:46:06:8D:85
Certificate issuer:       /CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999
Certificate serial:       010D0C9F4328584D09126824B5843C1DEDEB3520
Authority key identifier: 4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     398777
IP address blocks:        24.233.144.0/20 maxlen: 20
                          149.137.160.0/19 maxlen: 19
                          150.252.96.0/20 maxlen: 20
                          192.173.152.0/21 maxlen: 21
                          2605:ec40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:68:24:b5:84:3c:1d:ed:eb:35:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=80338b2f-4efc-4df0-8853-03eca1e52038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:b6:26:7f:e9:d0:77:eb:13:03:d5:bd:e0:
                    43:fa:ec:b4:8e:20:2d:9f:df:32:d6:d6:ce:b9:6e:
                    63:8f:ee:b0:32:c6:14:5d:74:25:cf:39:a7:56:8f:
                    fe:82:ca:09:58:ca:1c:4b:84:69:37:1f:d4:c5:00:
                    e2:a4:69:45:26:62:8b:d7:65:8f:3a:5c:fc:3e:27:
                    79:bc:24:76:8c:02:16:7a:44:f2:8d:d5:a8:58:f0:
                    d5:18:bb:94:e2:63:24:b9:a6:07:f8:03:bd:b3:2d:
                    ba:99:b9:ca:ac:ce:f9:33:eb:b9:99:4a:cf:76:20:
                    0c:03:dd:94:2a:36:23:07:d8:00:e0:a9:e2:08:01:
                    b6:2b:26:0e:c0:58:c4:9d:99:e7:9c:75:de:ea:b8:
                    99:c9:01:cb:a6:28:8c:11:e7:d5:3d:5c:a8:54:bd:
                    8e:14:f6:a6:a5:ab:23:a6:5e:c6:01:2c:96:69:b6:
                    43:7d:3a:2e:7f:85:5d:c2:bc:6f:6e:55:e8:df:a3:
                    06:98:fa:8b:83:11:6e:b4:2b:08:9e:70:a2:e8:31:
                    5e:51:c2:62:bf:42:a5:fa:65:d4:d3:f3:d8:cb:29:
                    5d:b7:c4:42:84:68:21:fa:cb:55:28:49:54:66:b8:
                    46:07:5c:f0:64:01:24:16:f5:8e:e4:e7:25:96:06:
                    e4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8E:F8:4E:E1:22:AA:54:0D:78:C1:26:6D:04:28:AA:46:06:8D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl

            X509v3 Authority Key Identifier:
                keyid:4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.233.144.0/20
                  149.137.160.0/19
                  150.252.96.0/20
                  192.173.152.0/21
                IPv6:
                  2605:ec40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:5f:71:05:7f:c2:14:3e:b8:8e:58:41:85:29:55:35:85:18:
         f7:44:d6:df:45:28:02:4c:92:ae:f3:09:12:5e:e3:26:e5:71:
         4a:c9:ab:cb:cb:fe:54:6b:33:90:15:f4:c5:ce:b0:86:fd:b3:
         93:41:a0:a3:91:e5:04:78:c5:b9:20:5b:b6:26:10:e1:78:ad:
         51:a6:7a:af:f2:18:ab:5e:03:0c:28:19:e4:86:3e:97:66:05:
         76:aa:75:d9:53:29:3c:fe:c0:cf:e6:2f:68:ef:b4:9b:0c:f3:
         96:0c:50:84:3b:c6:e3:03:f4:4c:d8:91:42:38:91:f0:01:a7:
         71:c6:49:96:e1:b6:b7:0b:9e:43:5a:1f:f0:30:40:b9:c3:15:
         61:9d:7a:fe:06:41:67:90:28:ea:ec:bd:dd:ed:ba:10:39:a4:
         cb:20:2e:92:a0:2b:53:c1:df:39:98:d1:1e:50:70:69:43:f6:
         c0:73:e9:cf:ec:c4:d8:01:2b:87:11:4e:fb:ac:3e:6e:fd:58:
         10:36:1b:e3:2c:dc:86:f4:ca:ee:ac:58:3d:0d:9d:1b:ef:a0:
         ab:b3:e9:a4:de:64:a9:eb:56:47:cb:da:d4:50:a2:21:2f:25:
         90:8d:3e:92:14:9e:7d:2a:68:71:55:e4:8b:03:0c:6d:cc:03:
         ae:c5:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 13:19:25 2026 by rpki-client