Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/ed74d40e-3905-3828-8638-66b3d9a53d48.roa
File:                     ed74d40e-3905-3828-8638-66b3d9a53d48.roa (raw, json)
Hash identifier:          0hTQWPXpAGRUV17dt54yM4Go4YI7lUqlkJo8vMJdEy4=
Subject key identifier:   F5:2E:51:D9:1A:2C:EC:AC:1D:4B:3F:39:38:3C:7D:68:85:32:85:86
Certificate issuer:       /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
Certificate serial:       010D0C9F4328584D09125B0CE86C8E8040793480
Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/ed74d40e-3905-3828-8638-66b3d9a53d48.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     393581
IP address blocks:        206.57.128.0/20 maxlen: 20
                          206.57.144.0/21 maxlen: 21
                          206.57.168.0/22 maxlen: 22
                          206.57.172.0/22 maxlen: 22
                          206.57.176.0/22 maxlen: 22
                          206.57.180.0/22 maxlen: 22
                          206.57.184.0/22 maxlen: 22
                          206.57.188.0/22 maxlen: 22
                          206.57.192.0/19 maxlen: 19
                          206.57.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:5b:0c:e8:6c:8e:80:40:79:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=5b0edef4-31e5-4aa0-9d55-453a6eba7b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:e0:64:b7:70:4d:b1:4a:07:c5:18:c4:4c:
                    6f:1d:02:24:49:cc:51:0e:88:6a:0a:33:e3:c4:96:
                    a0:2b:73:97:2a:5e:9e:f4:25:f2:f5:c2:e0:69:35:
                    5c:e0:d8:3c:c4:79:7b:4d:1f:9f:9d:68:7f:5d:35:
                    e6:aa:b6:ef:8f:63:60:95:11:13:9a:8b:ab:90:8e:
                    18:c8:c9:67:97:69:fe:e1:bd:c8:3a:3c:74:fa:64:
                    5e:ab:0e:98:d7:e9:29:2d:df:52:a8:70:60:d2:43:
                    da:4d:ba:05:bb:df:e0:b0:f4:bf:7e:65:d5:b9:30:
                    58:4c:86:55:76:e5:01:72:5a:5f:08:79:78:25:75:
                    2e:11:c0:4b:f5:58:c4:6d:0f:46:6b:b0:c7:7d:f1:
                    ca:7f:d4:63:b0:eb:9e:d4:e0:35:08:d4:a3:88:f7:
                    a9:7a:8a:c4:85:70:cd:85:c6:c0:bf:bc:14:3b:cd:
                    c5:35:3a:61:f4:b4:5c:99:8d:79:f0:76:0f:a1:1d:
                    6b:14:ef:5e:97:c1:5f:46:b9:0e:d8:c7:4e:d2:a9:
                    8f:af:96:cc:28:93:01:80:3c:55:10:f6:0c:3b:8d:
                    39:a2:9a:ed:f1:b7:ef:43:bf:2b:d3:63:70:7c:4e:
                    1a:e0:ff:0d:72:ba:73:02:f8:d8:60:23:15:e5:2e:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2E:51:D9:1A:2C:EC:AC:1D:4B:3F:39:38:3C:7D:68:85:32:85:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/ed74d40e-3905-3828-8638-66b3d9a53d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl

            X509v3 Authority Key Identifier:
                keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.57.128.0-206.57.151.255
                  206.57.168.0-206.57.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2e:40:ef:da:96:cf:8a:43:1f:b1:d6:54:0e:97:1b:df:92:
         2c:fa:80:85:b4:47:75:09:11:f0:a2:6d:22:24:b2:3c:33:1a:
         e6:96:65:d5:3a:53:e2:c9:7b:7a:2b:7c:e0:4e:58:9d:8d:ab:
         fa:22:be:31:73:eb:cf:bd:e8:7f:b9:fc:7f:07:02:91:a5:4e:
         98:c7:23:7a:4d:1c:c5:fb:92:d0:3c:e0:9c:2d:e5:aa:0f:53:
         79:0d:0e:42:8c:e2:55:2f:09:e1:83:4c:38:a1:81:79:5d:be:
         15:f0:0d:2a:1b:5f:6d:e6:80:e7:c3:54:e2:a4:9b:f2:26:85:
         2d:df:92:ba:af:f0:f8:af:4e:1e:cd:9e:7b:1e:f3:f8:85:38:
         63:9e:1a:87:91:30:88:fd:e9:36:1e:10:35:bb:32:ab:07:ca:
         6e:ce:b6:8a:ac:7d:22:99:ff:41:9e:4e:80:39:e0:70:f2:bc:
         d1:de:84:d3:68:db:e6:c8:54:f9:ef:14:ac:b5:b4:f1:78:f4:
         ea:1a:16:2f:94:b9:4a:fa:3b:d5:7f:a3:1b:d4:c8:52:44:c5:
         3b:b2:6d:d0:08:56:0f:a5:28:85:89:64:b3:0d:89:12:64:78:
         eb:5c:26:a7:40:36:c7:ac:46:38:5e:a2:7e:be:6b:66:1e:34:
         95:07:ef:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:59:52 2026 by rpki-client