Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa
File:                     bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa (raw, json)
Hash identifier:          xi69rX5N3/zQryrkndBruVHVyKld8h8l6wWrSwhIx50=
Subject key identifier:   57:40:C5:0F:E4:9A:A7:D9:7C:6D:6A:96:18:C5:D9:A0:71:B2:AC:A5
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584DD09053EA27285D4F7722C200
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     6621
IP address blocks:        67.143.0.0/19 maxlen: 19
                          67.143.32.0/20 maxlen: 20
                          67.143.64.0/21 maxlen: 21
                          67.143.72.0/21 maxlen: 21
                          67.143.80.0/20 maxlen: 20
                          67.143.96.0/23 maxlen: 23
                          67.143.98.0/24 maxlen: 24
                          67.143.100.0/22 maxlen: 22
                          67.143.104.0/21 maxlen: 21
                          67.143.112.0/20 maxlen: 20
                          67.143.128.0/22 maxlen: 22
                          67.143.132.0/22 maxlen: 22
                          67.143.136.0/22 maxlen: 22
                          67.143.140.0/22 maxlen: 22
                          67.143.144.0/22 maxlen: 22
                          67.143.148.0/22 maxlen: 22
                          67.143.152.0/22 maxlen: 22
                          67.143.156.0/22 maxlen: 22
                          67.143.160.0/22 maxlen: 22
                          67.143.164.0/22 maxlen: 22
                          67.143.168.0/22 maxlen: 22
                          67.143.172.0/22 maxlen: 22
                          67.143.174.0/23 maxlen: 23
                          67.143.180.0/22 maxlen: 22
                          67.143.184.0/22 maxlen: 22
                          67.143.188.0/22 maxlen: 22
                          67.143.191.0/24 maxlen: 24
                          67.143.192.0/22 maxlen: 22
                          67.143.196.0/22 maxlen: 22
                          67.143.200.0/22 maxlen: 22
                          67.143.204.0/22 maxlen: 22
                          67.143.208.0/22 maxlen: 22
                          67.143.212.0/22 maxlen: 22
                          67.143.216.0/22 maxlen: 22
                          67.143.220.0/22 maxlen: 22
                          67.143.224.0/21 maxlen: 21
                          67.143.232.0/21 maxlen: 21
                          67.143.240.0/21 maxlen: 21
                          67.143.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:53:ea:27:28:5d:4f:77:22:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=197f916b-9977-4d0e-8a1d-f097aaf07e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:90:48:7c:7e:7e:7e:47:6e:0b:94:75:9a:
                    2d:1f:c3:5d:cf:c8:92:8c:1d:ac:0d:a0:b0:40:9e:
                    33:e8:ba:28:5d:a1:16:95:1e:d2:09:bb:d8:c8:99:
                    cc:c1:7d:42:d3:f0:a3:65:2d:21:ef:37:f7:76:e4:
                    2d:77:a0:94:16:20:a5:39:e5:2b:b5:b9:a3:a4:08:
                    15:7a:be:54:b7:85:7c:d7:8a:b0:3b:c5:66:09:c8:
                    b7:b8:bc:df:6d:9c:84:59:c1:2f:a1:e7:00:ea:0f:
                    d1:f7:0b:c6:cd:88:e4:cc:7c:7f:9b:be:99:9b:3d:
                    db:60:37:ef:68:77:2f:8b:b9:1d:33:bc:6f:3d:fe:
                    b4:b2:c1:81:c9:6f:e7:99:70:f4:e9:98:00:87:1f:
                    bf:86:bd:14:6d:e4:0e:78:a2:a1:e4:92:3d:5e:93:
                    4d:a1:3c:81:7d:dd:02:c3:4c:1c:cc:93:d4:a6:e2:
                    4c:ee:b5:ca:23:f4:c5:96:8e:f1:d1:39:d8:9d:da:
                    87:4c:87:2d:14:e6:cf:00:76:cd:18:b5:96:37:c2:
                    0f:f6:dd:09:68:62:3f:59:ba:9c:40:d1:75:a4:a8:
                    ae:29:f8:3a:1b:a5:c8:3e:9f:37:bc:22:2d:23:48:
                    a9:2e:79:ce:5d:4c:81:f7:f8:01:45:2b:64:82:7c:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:40:C5:0F:E4:9A:A7:D9:7C:6D:6A:96:18:C5:D9:A0:71:B2:AC:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.143.0.0-67.143.47.255
                  67.143.64.0-67.143.98.255
                  67.143.100.0-67.143.175.255
                  67.143.180.0-67.143.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:44:03:95:fc:e7:51:6f:10:ce:78:87:29:07:62:5c:06:c7:
         57:69:12:8f:93:9f:cc:8b:cb:b6:00:7b:5c:f7:f5:2f:07:cb:
         35:c5:6f:7e:b3:1c:6d:3f:9e:12:5c:6f:42:fb:2f:e5:06:a7:
         03:9d:09:15:3a:12:b1:d2:34:f5:6d:1e:72:a5:63:94:d7:c3:
         62:94:6c:4a:fe:e0:1f:28:a4:9c:7a:d8:ab:bb:0c:e4:a2:d4:
         88:9e:ba:83:cf:0c:d9:b2:9b:6e:a6:03:da:8f:ea:fa:d5:9e:
         bd:1c:dc:6a:8d:ec:64:43:2a:12:21:42:cb:d3:7b:e8:1f:98:
         f4:75:5f:1d:21:de:08:d2:be:2d:ad:44:ec:5f:42:b5:8d:b1:
         bb:8f:f1:b5:e0:4e:e4:dd:f2:b5:a3:ba:e6:49:1e:bf:57:f0:
         89:35:31:fa:f2:c0:50:1d:18:93:64:4a:08:99:e7:02:3f:f0:
         bb:8d:a7:23:a0:cc:0a:08:bb:82:ec:90:2f:92:df:31:70:00:
         7d:28:ae:9a:81:7d:e2:8a:14:64:a7:e9:cb:f3:db:22:51:cc:
         27:9c:ab:9c:ee:a2:7c:a9:79:17:05:99:0a:71:f0:bd:72:fc:
         a4:c3:fc:8d:72:0d:73:01:6b:2c:ac:7f:a4:fa:36:9f:fd:e8:
         50:d1:09:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:04:58 2026 by rpki-client