Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45180ba6-c36f-3dcf-92e4-ff504978e611.roa
File:                     45180ba6-c36f-3dcf-92e4-ff504978e611.roa (raw, json)
Hash identifier:          CQH2hb9re4LLnrsDYOFhm//48pfZfNACDX4MBVfJjBY=
Subject key identifier:   45:B5:05:69:C7:AD:07:6F:EF:51:C3:54:5F:22:25:05:EF:4C:E7:BF
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E5E7A06A6B28676BEA64DCBC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45180ba6-c36f-3dcf-92e4-ff504978e611.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     207550
IP address blocks:        140.174.104.0/21 maxlen: 24
                          157.238.192.0/21 maxlen: 24
                          192.204.80.0/20 maxlen: 24
                          198.65.192.0/21 maxlen: 24
                          199.237.64.0/19 maxlen: 24
                          199.237.104.0/21 maxlen: 24
                          206.163.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:06:a6:b2:86:76:be:a6:4d:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=0014d9b8-38a0-4a15-8ee7-ee1d4c4b4e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:f9:bd:c9:39:17:09:3c:97:06:f0:74:7d:
                    c1:3c:04:56:c2:f5:88:ee:0c:47:79:90:e7:bd:22:
                    be:e9:b3:44:f2:a6:ed:28:84:b3:1c:88:6d:cb:1f:
                    dd:f7:63:3b:39:80:2a:c9:44:05:66:0e:08:d4:5c:
                    fa:71:58:9d:4a:2e:4a:69:42:a2:0f:e5:c1:73:43:
                    b0:59:bb:23:c4:65:04:87:6d:3b:80:99:c1:e2:6a:
                    ae:5c:59:0e:d4:2f:12:3f:7a:a8:69:89:b5:0d:84:
                    f6:d0:9f:c1:fd:5d:3c:fa:0e:6a:d1:a4:93:a1:c5:
                    0b:cd:bf:f4:3a:f6:0a:1a:dd:12:99:ee:b0:a1:5b:
                    76:18:32:b1:72:0f:b5:98:dc:7b:0b:ad:68:e3:70:
                    50:0b:cf:5c:a8:37:72:da:71:56:89:95:e5:e7:09:
                    0a:5f:87:d7:e8:a6:d3:a8:30:4e:06:d3:f3:65:fb:
                    a7:af:53:ec:91:b6:d3:e9:09:7a:a5:a4:56:a6:73:
                    bc:3e:73:68:f5:df:3a:c5:e6:bd:42:d7:4f:42:f4:
                    54:b0:75:18:78:1b:2b:61:c9:18:f0:29:0e:6e:76:
                    0e:47:73:cb:37:50:96:b3:a4:66:ec:ad:c6:fc:a3:
                    3c:18:94:17:8e:14:a0:e5:c4:1f:35:99:0b:4f:19:
                    51:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B5:05:69:C7:AD:07:6F:EF:51:C3:54:5F:22:25:05:EF:4C:E7:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45180ba6-c36f-3dcf-92e4-ff504978e611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.104.0/21
                  157.238.192.0/21
                  192.204.80.0/20
                  198.65.192.0/21
                  199.237.64.0/19
                  199.237.104.0/21
                  206.163.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:92:bf:da:69:bd:54:32:25:1e:ce:c3:99:c9:51:25:d6:de:
         64:b3:ed:78:2d:25:ef:73:83:3c:47:79:04:c5:6b:56:94:e4:
         39:8c:55:ce:dc:4d:f9:35:96:3d:07:2e:6d:85:b4:bd:fc:6d:
         fd:48:2e:d2:50:5d:14:88:ef:ea:c3:8c:ed:89:05:e8:fa:62:
         6b:a0:05:d3:9f:b0:78:26:e5:77:cb:ec:d2:d3:98:06:19:ba:
         f1:de:91:54:b6:c0:58:78:74:01:4d:59:30:95:85:50:e5:9b:
         3e:5d:a6:e0:fc:86:66:f5:f9:d3:cf:70:5e:9c:45:7c:d0:03:
         98:e0:81:95:32:d7:bd:ce:f3:86:8b:93:b2:6e:90:e9:36:9e:
         20:41:f4:6c:3f:96:87:de:32:04:9f:80:f7:b5:20:10:cc:de:
         5f:dc:61:d1:2e:b8:0c:80:8d:9e:61:c2:33:97:5d:40:35:42:
         f1:52:44:cc:b3:c4:f7:63:20:c7:a4:17:35:75:8f:aa:53:b1:
         6d:cd:d8:e7:67:6d:bc:40:8a:8e:35:42:a8:af:3f:d2:ba:90:
         e7:5b:ad:aa:32:81:35:fa:d6:ef:54:e8:9c:c8:6d:8d:4e:46:
         9e:81:3f:1d:a3:ad:7f:bf:e3:3f:55:f8:f8:fa:46:40:e5:95:
         58:79:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:06 2026 by rpki-client