Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa
File:                     28f9e361-2a40-3533-ae86-3037006c7eda.roa (raw, json)
Hash identifier:          G17P6Nz9MooyXa2xYErojp0r1Oto4u06BidqnsUhQXY=
Subject key identifier:   D1:85:43:C0:C8:45:4D:CA:E5:08:76:40:BB:A9:F9:5F:C5:43:AC:18
Certificate issuer:       /CN=6ca4d9b1-5397-4654-94da-7840371f5226
Certificate serial:       010D0C9F4328584E7634D9D1A48ACD49B3693C80
Authority key identifier: 9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     25914
IP address blocks:        65.49.152.0/21 maxlen: 21
                          65.49.152.0/22 maxlen: 22
                          65.49.156.0/22 maxlen: 22
                          108.160.80.0/24 maxlen: 24
                          108.160.84.0/22 maxlen: 22
                          108.160.88.0/24 maxlen: 24
                          132.147.240.0/20 maxlen: 20
                          2607:2900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:d9:d1:a4:8a:cd:49:b3:69:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca4d9b1-5397-4654-94da-7840371f5226
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=b7b0cfdd-79d6-4e20-8969-ab9db7ae7959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:5d:6c:16:1b:27:03:15:ec:b3:8a:73:3c:
                    04:7a:de:dd:2f:a1:0a:a0:39:99:e9:3b:41:0b:8c:
                    32:ab:4e:13:2b:a1:d1:a9:01:67:16:e2:85:27:79:
                    dd:97:99:5b:3d:b5:0e:43:82:da:97:19:77:d6:b7:
                    6a:a9:2d:d4:d1:b7:8f:5b:59:b6:1b:5d:47:f5:cc:
                    1b:72:5d:5c:c0:a7:ea:36:15:e3:e5:57:03:cf:21:
                    36:a2:38:cc:95:d1:36:65:08:dd:e0:55:8b:17:0c:
                    ff:ce:25:7e:92:11:90:d9:99:53:25:9e:77:03:86:
                    48:48:c3:61:47:5f:6e:17:17:cf:e7:ad:04:a6:7a:
                    e3:53:24:2f:e8:2f:dc:fe:f9:67:48:6e:86:7f:62:
                    c4:b7:19:5b:9a:26:9d:0e:7b:5e:3f:ca:50:90:47:
                    07:70:4a:c6:29:7d:2c:ef:31:58:b1:a0:3d:96:51:
                    16:44:0a:4e:55:27:0e:3d:d8:1f:72:fc:82:51:62:
                    2a:1b:25:9e:93:dc:bb:46:4d:f2:4d:89:f3:6c:ff:
                    ab:56:42:9d:98:41:60:76:2f:e3:e2:fb:ca:ff:ea:
                    39:e4:b9:f6:1d:d6:92:cf:2f:20:d8:74:32:db:b5:
                    5b:c5:7e:05:c4:c0:61:54:90:ff:1d:b7:0a:1c:03:
                    3b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:85:43:C0:C8:45:4D:CA:E5:08:76:40:BB:A9:F9:5F:C5:43:AC:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.152.0/21
                  108.160.80.0/24
                  108.160.84.0-108.160.88.255
                  132.147.240.0/20
                IPv6:
                  2607:2900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:00:be:dc:ef:63:da:54:92:18:73:54:f5:24:90:a1:0a:01:
         32:66:17:24:7f:b2:2a:3d:46:cd:68:b2:5d:58:4b:a4:dc:7a:
         36:4c:15:e1:c2:af:3d:03:a6:d9:46:03:8f:a8:a8:6c:91:54:
         61:60:d2:56:28:ad:a9:6b:77:7f:aa:e8:30:20:ce:ae:c4:b9:
         3c:e6:97:13:8e:9b:66:f1:b7:16:68:94:35:88:3c:4e:e2:39:
         fd:8b:9d:ba:48:11:1b:21:9d:1e:25:3f:84:ef:f2:2a:02:63:
         87:cb:79:0c:66:2f:80:a0:08:45:6b:97:e0:e0:1e:5b:c5:9d:
         34:54:fd:b7:f6:4c:68:11:18:ad:07:0d:0b:64:4f:05:6d:9a:
         14:6e:16:9c:56:e7:91:aa:c5:90:eb:be:ec:f5:b0:55:68:e4:
         95:96:88:94:3d:2b:cb:55:58:41:73:c6:9c:d4:07:8d:6b:b4:
         db:84:5e:f6:fe:4a:3a:71:28:d4:c3:bf:f9:56:80:24:28:07:
         b6:11:9d:50:37:a9:8c:f2:ef:d6:30:2e:03:0a:fc:53:5a:41:
         fa:31:c0:ea:32:76:e4:c2:43:97:41:49:07:b3:5b:66:62:ed:
         c2:5f:4d:40:a7:4a:33:43:a6:c1:7a:8b:28:88:5a:bd:ca:a6:
         48:f2:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:23 2026 by rpki-client