Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa
File:                     262e6852-a72f-3e0b-a5e5-3cf27f370213.roa (raw, json)
Hash identifier:          7RyveObDuiYVY953uUlBH1j2ymA939JZNi3hVMhNPRw=
Subject key identifier:   BF:04:81:FC:0D:92:19:54:A7:58:26:8D:97:07:13:90:F5:8E:47:DF
Certificate issuer:       /CN=84052649-3401-4ba6-ad82-6f310741b104
Certificate serial:       010D0C9F4328584D4A8F9552A96375A78AAF4220
Authority key identifier: C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     19969
IP address blocks:        66.85.72.0/21 maxlen: 32
                          69.195.128.0/19 maxlen: 32
                          96.43.128.0/20 maxlen: 32
                          104.192.168.0/22 maxlen: 32
                          104.218.16.0/21 maxlen: 32
                          108.59.192.0/20 maxlen: 32
                          172.86.176.0/21 maxlen: 32
                          204.27.56.0/21 maxlen: 32
                          208.94.240.0/21 maxlen: 32
                          2604:5800::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:95:52:a9:63:75:a7:8a:af:42:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84052649-3401-4ba6-ad82-6f310741b104
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=5c8e8bed-4a7b-400e-a2ba-c5793997b84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f1:fb:49:a7:22:e1:56:5e:54:98:6b:6d:9c:
                    ef:a8:62:60:16:c8:8a:7d:16:d1:3e:4d:70:1b:d1:
                    64:d4:ce:f8:5a:d4:af:5d:96:e6:57:a4:6e:34:96:
                    e7:1b:43:a0:b5:f2:a8:82:41:98:30:32:4a:56:75:
                    63:a0:7c:d5:21:0a:ed:77:a6:ff:d4:7b:8b:f7:87:
                    e3:86:78:34:74:b8:9e:ad:41:6f:17:5f:1c:8f:4d:
                    6a:04:0f:81:fa:4a:f1:3b:04:77:5e:e1:8c:6b:a6:
                    db:71:cb:fd:51:d1:ed:9c:e1:0e:5f:fe:2b:07:6a:
                    bb:6b:3e:bc:20:6f:3a:40:5f:e8:b3:5c:b4:b6:23:
                    ff:29:fe:9b:4c:80:33:16:b9:04:4b:0e:35:52:35:
                    29:da:fc:70:7a:3e:94:53:1a:f1:70:a4:0d:7f:c7:
                    8b:04:44:68:69:d1:bf:e9:1a:03:dd:36:a4:f1:11:
                    ae:0a:a6:ed:f9:0a:9d:07:69:5d:25:d0:aa:ab:ac:
                    39:81:ac:45:32:f6:dd:f0:6d:a7:78:9c:d7:fa:d1:
                    c9:72:c7:6c:e3:55:c1:4c:f7:8f:b7:45:0f:3e:10:
                    ae:4f:0f:f9:70:f2:56:c1:df:95:16:5f:76:b6:a4:
                    97:04:75:43:e3:f6:ba:3f:a0:25:63:6c:84:82:f0:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:04:81:FC:0D:92:19:54:A7:58:26:8D:97:07:13:90:F5:8E:47:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl

            X509v3 Authority Key Identifier:
                keyid:C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.72.0/21
                  69.195.128.0/19
                  96.43.128.0/20
                  104.192.168.0/22
                  104.218.16.0/21
                  108.59.192.0/20
                  172.86.176.0/21
                  204.27.56.0/21
                  208.94.240.0/21
                IPv6:
                  2604:5800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:85:54:63:e8:d3:8e:ad:93:71:4c:49:42:48:ed:71:0d:
         18:61:b5:4c:33:b3:9c:e6:2e:2b:68:81:aa:02:a8:98:51:6c:
         45:f9:f7:d6:fc:5d:b7:84:90:c9:fa:71:5a:f2:7e:ba:d7:63:
         32:f6:aa:29:ce:31:5e:b7:12:dc:54:d6:4f:b0:37:2e:2c:a0:
         9f:de:10:74:70:b5:f2:8c:46:c4:c8:58:ac:e1:53:72:86:1f:
         a0:a1:c8:9b:da:00:b4:6d:c5:74:c1:20:ae:fe:bb:da:4e:cc:
         78:6f:41:78:83:63:32:04:5a:31:ea:4f:3d:41:59:ff:56:c4:
         39:4f:d3:6c:77:ad:8e:da:dd:0a:f0:65:4f:39:20:f2:3e:e4:
         51:f4:8f:d0:f3:32:a8:99:6b:db:29:8a:de:c2:6a:8f:db:49:
         1e:b9:b9:50:bb:59:9c:b8:d6:26:b7:83:b3:1b:48:f6:d0:9f:
         2d:d3:1d:e2:7f:38:e0:cd:43:f4:02:9c:8d:71:af:92:78:03:
         3f:84:86:b6:3f:1f:8d:7d:4c:71:68:63:ca:f5:0e:22:4e:e8:
         70:67:3f:66:c3:99:62:47:f5:fa:59:ab:64:48:2b:85:43:19:
         56:9a:c9:a1:e5:3e:e3:09:27:17:6c:59:77:17:c0:82:35:69:
         1d:99:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:47:25 2026 by rpki-client