Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9da26b9f-7ece-3cdb-8af1-3f31ae5543c4.roa
File:                     9da26b9f-7ece-3cdb-8af1-3f31ae5543c4.roa (raw, json)
Hash identifier:          Q8vCVW5AmrslTPJpZ2LlqgBpJW0cysrcQQfS2ugSuNU=
Subject key identifier:   86:2F:06:5E:15:37:00:FE:51:2F:D8:49:B6:35:16:9C:15:EB:C8:D1
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584DB7702693DEC26D41F3A0C600
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9da26b9f-7ece-3cdb-8af1-3f31ae5543c4.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     198949
IP address blocks:        64.100.0.0/15 maxlen: 24
                          64.102.0.0/15 maxlen: 24
                          64.104.0.0/16 maxlen: 24
                          128.107.0.0/16 maxlen: 24
                          144.254.0.0/16 maxlen: 24
                          161.44.0.0/16 maxlen: 24
                          171.68.0.0/14 maxlen: 24
                          173.38.0.0/15 maxlen: 24
                          192.133.192.0/19 maxlen: 24
                          192.133.224.0/20 maxlen: 24
                          192.133.240.0/22 maxlen: 24
                          198.133.219.0/24 maxlen: 24
                          204.69.198.0/23 maxlen: 24
                          204.69.200.0/24 maxlen: 24
                          216.128.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:26:93:de:c2:6d:41:f3:a0:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=9edc85ee-dcde-402f-8b6b-c5eedb826966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:6f:cf:d9:23:4a:2e:17:3c:da:2e:f3:8d:
                    09:e8:c6:22:05:59:7e:d3:f6:43:ed:a2:ea:f1:03:
                    10:77:e0:45:08:6c:13:2e:8a:0e:18:cb:ee:1c:e9:
                    b5:6b:56:89:43:80:f5:9e:54:c4:8e:6b:1d:25:ae:
                    6b:63:80:a2:bc:9d:4c:22:50:61:65:b1:f0:ff:15:
                    fe:87:39:40:a1:aa:ed:61:c5:6a:9e:00:3a:8c:d1:
                    cb:dc:0a:26:5d:b9:21:01:90:87:17:40:00:e2:23:
                    0c:41:07:37:24:e6:84:db:ad:b9:aa:9a:11:b5:20:
                    aa:f5:9c:42:51:67:d3:24:3f:e3:ea:7b:9d:7f:58:
                    77:bf:6e:b7:31:31:74:7e:a1:12:f0:c3:df:13:a3:
                    67:71:ec:f7:a9:f5:c7:35:a2:be:99:86:d3:93:d3:
                    59:88:4e:2a:8d:d1:bd:95:96:93:d1:d8:dd:3d:f6:
                    0b:12:3a:7d:af:8b:22:c1:43:8a:db:1b:61:38:60:
                    d3:4c:79:23:78:a1:fd:4c:2d:2b:d1:9a:4d:48:99:
                    07:75:aa:07:ae:bf:bc:3f:14:74:96:1b:58:e2:55:
                    ac:1b:b9:cb:64:86:78:cd:bf:d9:70:47:8c:c0:98:
                    f5:b0:78:e7:52:1b:56:8f:61:e8:5f:11:96:d5:33:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2F:06:5E:15:37:00:FE:51:2F:D8:49:B6:35:16:9C:15:EB:C8:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9da26b9f-7ece-3cdb-8af1-3f31ae5543c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.100.0.0-64.104.255.255
                  128.107.0.0/16
                  144.254.0.0/16
                  161.44.0.0/16
                  171.68.0.0/14
                  173.38.0.0/15
                  192.133.192.0-192.133.243.255
                  198.133.219.0/24
                  204.69.198.0-204.69.200.255
                  216.128.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e3:59:29:74:9e:04:70:25:45:ff:48:15:86:f0:dc:ed:ae:
         59:d4:6c:2a:4d:05:06:10:8f:a4:c2:19:98:dd:b1:80:2f:9a:
         2c:54:45:7e:15:c2:1b:82:a9:93:45:c4:05:54:cd:d5:11:45:
         c4:38:5f:ed:29:c2:cf:6d:1e:87:2d:c0:f1:8b:7b:9b:09:e2:
         be:b5:a8:03:21:40:b7:7e:a5:41:e6:ef:56:86:80:bd:74:4e:
         a8:2f:22:9b:6c:8d:99:cf:8a:5d:01:78:cc:bf:80:11:fc:37:
         63:a1:be:c6:87:9b:d3:b8:c8:99:19:28:eb:8f:19:b5:fa:c1:
         04:34:22:e2:1a:7d:3b:09:35:55:23:91:17:01:41:aa:dc:eb:
         5a:a8:df:d9:25:ef:a4:33:53:ad:26:b0:b2:06:f8:21:75:97:
         78:ef:4c:37:1c:41:67:d8:cc:47:ad:b7:f4:70:d8:af:cc:78:
         bf:8d:70:74:bb:fa:5e:1b:bd:bb:85:5e:9d:41:5e:78:96:57:
         c8:63:b4:18:a3:e5:27:92:dd:7b:82:b2:b9:d1:89:8d:b8:39:
         9f:a2:6e:81:47:cb:c8:72:0b:5b:79:93:04:6a:83:a1:12:22:
         fc:99:c4:7a:ad:47:72:f1:f9:a2:14:85:01:14:e5:87:b3:09:
         56:c0:02:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 07:12:13 2026 by rpki-client