Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49/e8c736ad-f676-35b5-af32-369cfa88f043.roa
File:                     e8c736ad-f676-35b5-af32-369cfa88f043.roa (raw, json)
Hash identifier:          SPBzK9wRthS1k5oqO8UQZYsKb8aulyLGmRyH6Er4CAA=
Subject key identifier:   02:7F:1F:83:00:07:C9:B8:38:75:3F:E5:DE:CA:4E:8B:03:C6:DE:76
Certificate issuer:       /CN=030f5b07-e11d-4e3a-bbc7-072e2fee4a49
Certificate serial:       010D0C9F4328584FAD47A0076BDBCC3EF5C7DF60
Authority key identifier: 9F:54:D2:C9:26:E4:A3:35:75:94:15:AE:5B:BA:18:11:93:62:5E:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49/e8c736ad-f676-35b5-af32-369cfa88f043.roa
Signing time:             Fri 30 Oct 2026 19:14:37 +0000
ROA not before:           Fri 30 Oct 2026 19:14:37 +0000
ROA not after:            Thu 28 Jan 2027 20:14:37 +0000
asID:                     33007
IP address blocks:        64.136.112.0/20 maxlen: 24
                          174.140.176.0/20 maxlen: 24
                          199.58.116.0/22 maxlen: 24
                          2605:11c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49/030f5b07-e11d-4e3a-bbc7-072e2fee4a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49/030f5b07-e11d-4e3a-bbc7-072e2fee4a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ad:47:a0:07:6b:db:cc:3e:f5:c7:df:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030f5b07-e11d-4e3a-bbc7-072e2fee4a49
        Validity
            Not Before: Oct 30 19:14:37 2026 GMT
            Not After : Jan 28 20:14:37 2027 GMT
        Subject: CN=bf3cd282-6e51-4200-a3f7-578fb252e80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:d4:0f:a8:fa:0a:14:d3:3c:c1:a0:ae:6e:
                    82:2a:f3:30:ca:f7:cc:45:7a:49:cb:22:a2:d2:a7:
                    c1:30:1e:78:fc:4e:ff:5d:a5:bb:a1:51:63:8a:93:
                    ce:38:f9:5b:53:11:0d:f9:02:08:01:9f:a8:cb:c1:
                    32:e3:4f:1f:c5:5f:41:d9:de:59:7c:9e:c9:c8:71:
                    2b:64:30:dc:c8:7e:d9:99:e6:67:24:bd:8f:f6:1c:
                    41:fd:e2:dc:70:33:c8:0c:68:a9:85:78:b7:3c:e0:
                    91:65:7f:cd:63:6b:eb:06:ea:e1:d0:a3:62:eb:18:
                    91:5f:93:19:8d:dc:ad:31:89:36:ed:0c:16:7e:f2:
                    62:ec:ea:86:8e:0b:cf:a6:61:af:f1:89:15:41:e2:
                    1f:2b:fd:9a:d7:ea:67:7a:36:e1:43:c9:37:c1:6c:
                    bd:e8:79:fe:e1:e1:bd:45:1f:9f:a2:8b:24:4d:22:
                    d4:4f:31:b9:c8:99:ca:a7:c9:3f:78:0a:c6:e1:44:
                    ff:b5:28:5c:07:19:da:6d:20:53:87:c5:79:42:53:
                    ab:99:93:f7:7f:36:a2:2d:d0:47:0a:c5:3a:07:db:
                    63:12:5b:ac:91:a0:79:44:7c:44:cd:3d:8b:25:6c:
                    1b:9d:26:71:7c:40:d9:38:2a:42:8b:96:c3:dd:99:
                    cd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7F:1F:83:00:07:C9:B8:38:75:3F:E5:DE:CA:4E:8B:03:C6:DE:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49/e8c736ad-f676-35b5-af32-369cfa88f043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49/030f5b07-e11d-4e3a-bbc7-072e2fee4a49.crl

            X509v3 Authority Key Identifier:
                keyid:9F:54:D2:C9:26:E4:A3:35:75:94:15:AE:5B:BA:18:11:93:62:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.112.0/20
                  174.140.176.0/20
                  199.58.116.0/22
                IPv6:
                  2605:11c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a8:af:65:07:ee:46:7b:8f:aa:a8:9e:3a:7a:ce:31:38:56:
         4c:10:6c:22:df:aa:94:59:21:ca:63:a6:87:a8:46:10:82:e4:
         b4:49:35:81:9e:0d:f9:d1:8a:c3:a3:9b:b5:fd:80:6b:c4:fa:
         68:6f:12:0d:f5:ab:69:93:65:f3:52:d7:a3:8a:df:90:00:d3:
         67:91:6c:e5:31:eb:aa:0e:d9:fd:58:ed:5a:10:72:cf:ec:7d:
         3f:07:c0:44:1b:c0:33:b2:bb:02:5d:bc:46:01:dd:f0:01:6c:
         24:aa:52:c7:ad:c1:d7:a3:d6:6c:85:18:ca:c2:57:84:c6:df:
         9b:fd:29:74:4c:a7:06:2c:ae:ef:6b:39:7e:da:b5:2c:46:38:
         17:85:71:d9:f9:76:61:1f:fd:a1:96:ec:0c:04:e1:4a:6b:10:
         9e:2c:8c:97:c7:36:fe:25:c1:6b:ae:89:ec:25:38:29:a3:f6:
         83:fa:49:74:ce:b1:c4:11:ba:78:b6:47:de:b6:0d:b3:3e:b3:
         9c:da:40:08:ca:fb:4f:af:3f:48:3c:95:e4:03:61:e5:c5:e2:
         34:bf:a9:69:bf:0b:43:e4:80:0a:6a:95:80:ab:f7:47:00:f2:
         69:a2:59:15:67:d3:2a:04:b5:53:51:ec:1b:b2:2c:bc:81:ee:
         1a:82:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:58 2026 by rpki-client