Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2eb847c-b778-3153-acf2-e9fd612f35f4.roa
File:                     c2eb847c-b778-3153-acf2-e9fd612f35f4.roa (raw, json)
Hash identifier:          n66yki9OH0o+qSkGdOWyGhQ5VX4M5xQKLusGEn7uq3c=
Subject key identifier:   0B:5E:D0:A4:4C:89:E1:99:E4:54:02:95:15:DA:40:68:8D:20:22:B7
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584DC42F2921ABF63E5818603880
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2eb847c-b778-3153-acf2-e9fd612f35f4.roa
Signing time:             Fri 08 May 2026 14:35:02 +0000
ROA not before:           Fri 08 May 2026 14:35:02 +0000
ROA not after:            Thu 06 Aug 2026 14:35:02 +0000
asID:                     6424
IP address blocks:        192.217.16.0/20 maxlen: 24
                          192.217.32.0/19 maxlen: 24
                          192.217.64.0/18 maxlen: 24
                          192.220.128.0/18 maxlen: 24
                          192.220.192.0/19 maxlen: 24
                          192.220.224.0/20 maxlen: 24
                          199.238.0.0/16 maxlen: 24
                          199.239.128.0/18 maxlen: 24
                          204.2.96.0/19 maxlen: 24
                          206.68.0.0/15 maxlen: 24
                          206.163.32.0/19 maxlen: 24
                          206.163.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:2f:29:21:ab:f6:3e:58:18:60:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May  8 14:35:02 2026 GMT
            Not After : Aug  6 14:35:02 2026 GMT
        Subject: CN=808330c4-4748-4d5c-986a-9147d1c0f3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:1d:65:7e:1e:48:9c:32:e2:cc:9c:bd:f5:
                    05:56:43:40:2a:37:2d:15:21:7f:95:d3:22:12:34:
                    33:35:63:99:3b:72:ee:81:03:e2:ac:af:33:42:da:
                    c6:91:b0:c7:22:cd:2d:6a:58:2d:bc:75:52:55:51:
                    7f:c9:c9:de:61:86:b2:5e:b0:e0:d4:64:30:b6:c6:
                    96:2f:44:5d:0c:2e:2b:f1:f5:d9:64:f7:a7:a8:43:
                    cf:1b:04:65:b6:19:eb:cc:b8:66:df:30:41:9f:ec:
                    0a:2b:63:0f:85:63:f2:d1:fa:c5:c7:56:b6:37:65:
                    6c:51:b3:5d:cf:07:64:01:dc:50:1f:92:d3:c9:bd:
                    04:1d:3f:53:f4:8e:61:e2:03:7e:6c:11:06:55:65:
                    e4:dc:54:19:ac:39:b1:b6:51:a4:e8:8d:e4:39:d9:
                    1d:a2:0e:2d:9c:0f:bd:9f:f8:5f:37:af:4a:52:bf:
                    29:cd:72:9f:91:98:94:14:91:64:b1:0e:3a:57:d5:
                    07:78:1f:7d:15:4f:af:54:c9:29:76:ca:aa:bf:ff:
                    24:6a:eb:8f:f5:ba:51:f1:5d:7a:a8:75:88:b3:e2:
                    5f:a1:b5:20:49:04:07:8a:c6:72:b9:0e:79:c5:20:
                    a5:a9:3e:ed:03:3d:9f:13:20:01:e6:a5:e5:25:7b:
                    cc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5E:D0:A4:4C:89:E1:99:E4:54:02:95:15:DA:40:68:8D:20:22:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2eb847c-b778-3153-acf2-e9fd612f35f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.217.16.0-192.217.127.255
                  192.220.128.0-192.220.239.255
                  199.238.0.0/16
                  199.239.128.0/18
                  204.2.96.0/19
                  206.68.0.0/15
                  206.163.32.0-206.163.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:35:b7:26:8f:d0:e9:52:b9:83:e5:5c:2f:52:0f:f1:3a:83:
         bc:60:c2:a4:0f:e9:5a:8c:a8:6d:fb:13:30:22:c1:06:02:6a:
         e5:cd:bf:33:ad:d8:50:ab:95:54:45:24:48:87:e8:5a:60:be:
         39:62:90:7d:ba:f2:74:f0:4d:e1:30:84:92:70:e9:fb:44:2a:
         36:4e:8e:2f:a4:3d:54:eb:b2:fe:d0:da:ab:04:fd:5f:29:6f:
         af:cc:b0:ea:0c:08:84:61:2f:c7:a6:3d:49:de:3b:3e:cd:3e:
         b7:0c:8d:3f:1a:45:d5:a9:5d:97:e8:85:f9:49:99:f7:36:c4:
         87:69:c3:9a:da:b9:d8:df:d7:84:28:28:30:0c:5b:ee:90:c1:
         a4:c2:f4:5c:b4:4d:6b:1d:c8:5b:a1:60:cc:12:8e:2f:92:0b:
         73:e7:77:c6:a2:f6:45:9b:ac:b1:2e:1c:2d:fa:6a:54:88:79:
         79:1e:36:1c:89:51:72:6b:6b:0b:20:f2:38:d7:81:54:0e:2a:
         67:e1:b7:c1:26:97:33:55:ea:91:ff:ec:4f:4f:8e:d6:a7:d6:
         71:9b:db:7b:4d:12:b7:96:5c:f7:0d:79:38:30:e2:a1:d8:3e:
         71:7e:9f:35:b2:dc:5b:99:67:20:23:55:3b:5a:5e:56:8d:ae:
         ff:76:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:53 2026 by rpki-client