Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa
File:                     0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa (raw, json)
Hash identifier:          EpKeNSLa7WlsCB5yBU9Wltj1h2gjk5DCZs9iExewbrs=
Subject key identifier:   49:D0:4E:DB:58:BE:47:76:AF:79:DC:5C:C2:1B:B1:09:9B:C2:E6:C1
Certificate issuer:       /CN=418536e3-a238-4d5c-85de-f77873e419af
Certificate serial:       010D0C9F4328584D5234EF0FDDF9800E256EEC98
Authority key identifier: 86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa
Signing time:             Sat 28 Mar 2026 18:44:31 +0000
ROA not before:           Sat 28 Mar 2026 18:44:31 +0000
ROA not after:            Tue 26 May 2026 18:16:43 +0000
asID:                     21777
IP address blocks:        199.45.236.0/22 maxlen: 24
                          199.127.200.0/22 maxlen: 24
                          204.144.128.0/22 maxlen: 24
                          204.144.132.0/23 maxlen: 24
                          204.144.134.0/24 maxlen: 24
                          204.144.140.0/23 maxlen: 24
                          204.144.181.0/24 maxlen: 24
                          204.144.184.0/24 maxlen: 24
                          206.168.0.0/24 maxlen: 24
                          206.168.13.0/24 maxlen: 24
                          206.168.39.0/24 maxlen: 24
                          206.168.96.0/24 maxlen: 24
                          206.168.187.0/24 maxlen: 24
                          206.168.188.0/24 maxlen: 24
                          206.168.216.0/22 maxlen: 24
                          206.168.220.0/24 maxlen: 24
                          206.168.222.0/23 maxlen: 24
                          206.168.224.0/21 maxlen: 24
                          207.174.21.0/24 maxlen: 24
                          207.174.72.0/23 maxlen: 24
                          207.174.76.0/24 maxlen: 24
                          207.174.113.0/24 maxlen: 24
                          207.174.117.0/24 maxlen: 24
                          207.174.130.0/24 maxlen: 24
                          207.174.137.0/24 maxlen: 24
                          207.174.138.0/23 maxlen: 24
                          207.174.140.0/22 maxlen: 24
                          207.174.157.0/24 maxlen: 24
                          207.174.175.0/24 maxlen: 24
                          207.174.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:ef:0f:dd:f9:80:0e:25:6e:ec:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418536e3-a238-4d5c-85de-f77873e419af
        Validity
            Not Before: Mar 28 18:44:31 2026 GMT
            Not After : May 26 18:16:43 2026 GMT
        Subject: CN=ce13d8d2-f80b-4cbf-955d-aacdd0c3208e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:33:22:a2:23:75:f2:97:ec:ae:b3:30:8e:6d:
                    22:79:23:e1:a0:65:b3:c8:3c:d1:d3:17:74:85:93:
                    ab:7a:0e:a5:43:ea:6c:a0:43:ea:eb:f4:a6:70:ea:
                    9c:bb:1c:98:c6:fc:e9:96:9b:41:c6:6e:8a:c9:dd:
                    75:34:c3:6c:d2:e5:4a:d7:10:b0:c2:51:46:ca:ee:
                    61:b7:c4:5c:f7:40:31:b0:c5:6a:63:da:c0:12:ea:
                    d8:93:b3:cd:29:69:f7:ee:16:4c:2d:e2:3e:4d:fa:
                    54:ee:3e:96:f2:6a:14:d1:f9:aa:2d:a9:1f:b7:7c:
                    3d:42:3c:5c:56:cb:c9:f3:91:9e:52:7d:21:4d:9a:
                    95:d8:b4:f2:38:f7:5b:2c:1c:98:d7:d2:9c:76:ae:
                    bc:52:8c:76:7f:70:96:20:c8:81:0f:19:3e:4d:ad:
                    c1:b0:6f:b7:da:78:cb:47:3d:1d:b1:07:5b:3d:52:
                    b6:41:f4:63:96:8b:ed:c5:4d:5b:ad:fd:c7:44:6b:
                    79:ca:ef:a4:36:a0:8e:63:99:ea:17:86:34:ae:95:
                    38:c4:6c:27:83:8e:60:32:5a:50:fa:7b:52:78:1b:
                    4e:58:93:d5:5c:68:83:fa:ca:9e:7b:46:82:c2:c0:
                    75:91:69:ad:6f:cd:50:49:f6:e6:94:e0:09:e6:fb:
                    37:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D0:4E:DB:58:BE:47:76:AF:79:DC:5C:C2:1B:B1:09:9B:C2:E6:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl

            X509v3 Authority Key Identifier:
                keyid:86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.236.0/22
                  199.127.200.0/22
                  204.144.128.0-204.144.134.255
                  204.144.140.0/23
                  204.144.181.0/24
                  204.144.184.0/24
                  206.168.0.0/24
                  206.168.13.0/24
                  206.168.39.0/24
                  206.168.96.0/24
                  206.168.187.0-206.168.188.255
                  206.168.216.0-206.168.220.255
                  206.168.222.0-206.168.231.255
                  207.174.21.0/24
                  207.174.72.0/23
                  207.174.76.0/24
                  207.174.113.0/24
                  207.174.117.0/24
                  207.174.130.0/24
                  207.174.137.0-207.174.143.255
                  207.174.157.0/24
                  207.174.175.0/24
                  207.174.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:d7:2f:51:2a:63:8b:4d:ba:4a:c3:bb:d6:b0:f6:3c:35:
         64:3b:dc:0b:13:65:72:c4:8b:03:4b:f9:51:50:aa:9f:a2:94:
         75:dd:22:6c:f5:f2:5e:3d:06:11:8f:99:91:c2:04:7e:c9:3c:
         af:d3:38:bb:e9:71:61:2d:48:18:96:52:a3:ef:6c:04:86:d7:
         f7:f1:4e:72:f9:80:10:58:e6:bd:5c:7f:16:25:bc:1e:2f:04:
         19:e1:03:45:5f:59:7b:c8:50:f0:97:aa:4c:bc:68:c3:6d:7f:
         fd:c9:09:04:4f:12:ce:64:49:7f:c0:a5:2b:8c:6d:21:41:49:
         30:f1:d7:76:b3:4c:10:c7:46:5d:ea:fc:f8:bf:6f:4a:ee:48:
         72:93:8d:c1:c3:13:a8:07:50:79:02:9c:cc:8d:59:16:90:f5:
         a0:7f:2f:71:5d:9a:3d:8c:35:46:de:f8:51:de:8d:68:e5:8f:
         fc:50:d8:d3:20:12:81:57:d8:c4:e2:89:ae:35:f5:2f:e2:a8:
         73:a6:ac:83:b0:96:bd:72:bd:d7:46:5c:21:b8:64:9f:a4:8d:
         2f:8a:ba:5c:52:bf:e3:2d:44:89:69:72:38:31:ed:3d:38:f6:
         bc:3f:96:fb:51:07:fc:a8:0b:f5:6f:b3:27:94:5c:7e:b2:c9:
         d4:bf:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:19 2026 by rpki-client