Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa
File:                     4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa (raw, json)
Hash identifier:          T4hcAs+F8z2dV7UzkHzZAO54a1VGur1PMkwsOjVBKb0=
Subject key identifier:   A1:5C:A4:C2:2D:8D:78:00:1E:5D:75:BB:19:31:BF:3B:1B:12:8C:91
Certificate issuer:       /CN=b45f6374-6cde-4681-a96a-9233e2715465
Certificate serial:       010D0C9F4328584F549D6E24D374A77EFB1C5400
Authority key identifier: 12:39:E2:63:A9:4F:E4:5A:B7:C9:13:A2:AC:35:02:79:4A:5E:B5:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     33044
IP address blocks:        192.40.240.0/22 maxlen: 24
                          192.122.206.0/24 maxlen: 24
                          199.7.136.0/22 maxlen: 24
                          199.91.112.0/22 maxlen: 24
                          199.91.252.0/22 maxlen: 24
                          205.211.166.0/23 maxlen: 24
                          2606:8900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/b45f6374-6cde-4681-a96a-9233e2715465.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/b45f6374-6cde-4681-a96a-9233e2715465.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:6e:24:d3:74:a7:7e:fb:1c:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45f6374-6cde-4681-a96a-9233e2715465
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=6be2821d-7616-44dd-ad7e-ae6ae5480f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ca:28:ba:cf:eb:43:11:43:d3:59:1a:2e:86:
                    e8:f3:41:97:da:3d:48:d2:d9:04:e4:eb:b9:1f:fb:
                    98:7d:e0:c8:4b:0f:38:8b:04:ed:85:fa:55:3e:4f:
                    a3:78:64:26:a3:96:b2:e3:47:be:48:4d:09:c2:f4:
                    12:67:aa:8b:5b:5e:aa:b9:a6:fb:69:b3:80:85:75:
                    92:86:e1:3c:ae:66:68:9b:68:c5:93:8b:ad:84:f6:
                    5a:7d:51:30:e5:e8:c2:69:05:23:f5:53:b8:d0:6c:
                    c7:ec:aa:1a:8c:97:42:7f:89:93:0b:f2:08:f2:3b:
                    96:5b:1a:24:c5:7e:b3:bb:79:37:a3:1a:70:05:d7:
                    aa:02:15:32:fb:80:97:e4:7a:5a:fd:73:4c:7b:0a:
                    61:8f:59:7c:64:cd:89:13:68:da:94:40:d5:a8:f0:
                    4a:a3:12:09:d4:f2:02:dd:c0:6c:b9:69:3d:ab:a1:
                    f6:66:b1:6c:8b:85:b8:50:9f:86:d3:88:2f:0e:88:
                    25:d0:cb:c9:db:94:9d:3f:c7:8f:b7:f8:39:36:42:
                    a8:4b:f2:f1:83:f9:b9:9b:08:5b:9e:ba:06:07:1b:
                    06:ba:24:7f:35:b2:4c:f6:d0:da:62:17:7b:8b:1d:
                    2a:8a:05:a2:f5:6a:90:09:79:13:7a:f2:56:38:44:
                    c2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5C:A4:C2:2D:8D:78:00:1E:5D:75:BB:19:31:BF:3B:1B:12:8C:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/b45f6374-6cde-4681-a96a-9233e2715465.crl

            X509v3 Authority Key Identifier:
                keyid:12:39:E2:63:A9:4F:E4:5A:B7:C9:13:A2:AC:35:02:79:4A:5E:B5:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.40.240.0/22
                  192.122.206.0/24
                  199.7.136.0/22
                  199.91.112.0/22
                  199.91.252.0/22
                  205.211.166.0/23
                IPv6:
                  2606:8900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:06:cc:e0:9b:2d:aa:2c:b2:ae:db:a2:03:8d:0b:40:00:d6:
         10:7d:c3:7d:69:14:10:82:fc:b9:77:eb:65:e2:85:49:c3:7a:
         a5:3a:ce:50:66:69:22:05:3a:70:13:50:ed:ec:e2:c1:46:ad:
         b1:ab:f3:e5:8c:b9:3d:02:9e:de:74:40:fd:8e:5f:46:4d:c1:
         fb:62:30:8a:0a:23:d3:84:fa:8e:40:4d:bf:f7:93:d2:73:96:
         47:8b:fe:71:c7:03:2a:9d:3a:96:bd:34:c7:8c:88:2b:d9:c7:
         f9:e5:a3:fc:bc:a4:0e:e2:40:c1:cb:eb:a0:d6:74:37:ef:4d:
         d2:f0:35:5c:ae:38:82:a9:f1:26:de:fd:3d:1a:6a:c2:2c:60:
         a2:9f:73:86:5a:5c:d1:5f:3c:44:6d:ff:2d:d6:f7:2a:f4:1e:
         01:d5:6c:6b:eb:9f:68:2f:7d:a1:c8:46:28:2a:1d:3c:0b:07:
         b2:48:68:4d:95:d8:e3:e9:53:64:e9:58:29:4e:7b:16:75:1a:
         69:e1:ee:ab:33:1c:fe:2e:ab:b1:b4:9f:b6:aa:ed:69:da:b6:
         6e:6a:7a:f0:c9:2d:2c:d2:8d:96:1c:60:78:f6:0e:e1:c7:6f:
         e7:a0:59:99:f8:fc:18:4d:31:4e:15:f2:ae:ba:0f:4a:d0:24:
         f8:be:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:46:53 2026 by rpki-client