Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8db84ec-fe5c-35eb-be66-545a28cddea7.roa
File:                     e8db84ec-fe5c-35eb-be66-545a28cddea7.roa (raw, json)
Hash identifier:          eVXTKPOyKVAe5aMtPVnY2Y1sqdc31rUrGD4tvCtzCd0=
Subject key identifier:   01:D1:DC:BF:16:C9:E1:6A:75:E5:37:A1:94:EA:0D:9E:AC:C3:C4:15
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584F49871B623449A3F5CD63ABC0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8db84ec-fe5c-35eb-be66-545a28cddea7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10794
IP address blocks:        171.161.128.0/20 maxlen: 20
                          171.161.128.0/23 maxlen: 23
                          171.161.128.0/24 maxlen: 24
                          171.161.129.0/24 maxlen: 24
                          171.161.130.0/24 maxlen: 24
                          171.161.131.0/24 maxlen: 24
                          171.161.132.0/22 maxlen: 22
                          171.161.132.0/24 maxlen: 24
                          171.161.133.0/24 maxlen: 24
                          171.161.134.0/24 maxlen: 24
                          171.161.135.0/24 maxlen: 24
                          171.161.136.0/22 maxlen: 22
                          171.161.136.0/24 maxlen: 24
                          171.161.137.0/24 maxlen: 24
                          171.161.138.0/24 maxlen: 24
                          171.161.139.0/24 maxlen: 24
                          171.161.140.0/24 maxlen: 24
                          171.161.141.0/24 maxlen: 24
                          171.161.142.0/24 maxlen: 24
                          171.161.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:1b:62:34:49:a3:f5:cd:63:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c10fb73e-78a5-4a8f-bb00-918a098fd09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bd:cd:c1:01:a2:d7:6a:cf:e3:c7:4f:05:37:
                    8d:38:a5:f1:6e:a9:4d:34:50:5b:92:41:b7:68:bd:
                    cb:bb:e4:d1:b9:1b:bd:c0:f2:28:9a:31:13:3c:e5:
                    60:a5:8b:93:40:70:40:af:40:1e:33:5b:b4:bf:a5:
                    66:9d:d5:b8:98:b2:6b:ff:94:38:d5:fe:8e:94:7c:
                    8c:e8:75:96:16:79:86:54:75:a5:9f:c2:cb:72:d6:
                    d2:34:e9:fa:3f:04:d4:5f:8d:5b:42:67:e7:1d:b3:
                    22:24:53:99:df:b4:61:72:11:b3:d4:9d:c9:ac:3c:
                    6f:9a:dc:dc:d7:91:51:17:33:8a:96:60:4c:6c:58:
                    73:0b:a0:8f:2d:55:ca:77:4d:41:29:ff:30:e9:04:
                    16:21:2c:27:6d:ff:9f:e9:6e:21:5d:11:2e:f0:0d:
                    f0:d0:58:84:2a:f9:1d:2c:30:ce:dd:4e:6e:8e:4a:
                    2d:24:bf:9c:06:0e:ad:6b:23:5e:14:57:9a:ca:97:
                    a0:99:e4:a7:79:e4:ff:47:2a:87:1c:ea:89:58:f3:
                    34:6f:ed:85:22:65:17:83:2c:43:34:65:90:f8:ca:
                    a9:09:4d:df:9c:75:1a:d1:48:85:a5:30:30:b1:58:
                    9e:33:d5:d4:fa:b9:ba:55:ff:45:a0:e8:0c:70:a9:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D1:DC:BF:16:C9:E1:6A:75:E5:37:A1:94:EA:0D:9E:AC:C3:C4:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8db84ec-fe5c-35eb-be66-545a28cddea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:98:cb:fb:ab:c9:da:63:79:37:c9:81:9b:4e:e6:ce:71:
         64:6c:65:33:1c:28:c3:68:f3:e8:8e:0c:6c:10:9a:71:e4:39:
         5a:ad:af:17:52:95:b7:dc:f9:d7:3f:a7:e9:6f:98:5f:46:dc:
         c2:f8:14:d9:49:8e:6a:de:29:15:d3:4d:10:30:d7:f3:20:48:
         11:9b:e5:a4:7e:99:fd:88:31:93:bf:94:0c:d1:7f:4a:e3:ca:
         95:80:a8:34:a8:97:b1:5d:2e:9f:f1:51:ed:af:85:8f:ee:f6:
         7b:97:5d:af:81:8a:60:ac:6b:22:28:3d:b6:29:67:dc:5e:08:
         f9:44:b6:f8:d2:61:ec:d5:a3:c3:2f:e8:73:7e:5a:8f:e1:5a:
         06:f8:89:33:74:98:b7:20:0e:b6:89:41:75:32:11:dc:13:8f:
         80:e8:ab:63:7b:b5:10:57:77:6a:41:0a:a2:d9:58:d1:98:af:
         2d:86:01:34:9b:ad:69:ac:6a:1b:e2:4b:14:f8:49:ea:1d:73:
         12:33:10:3d:b2:84:c7:7d:90:76:24:fe:12:3d:a8:6b:5c:98:
         cc:60:2f:9b:13:59:46:fa:76:0b:1c:a1:5d:e9:17:d3:58:b9:
         2b:10:52:e9:cc:2c:f1:4f:4a:b8:ff:b1:23:ba:a8:e3:dd:c8:
         00:cc:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:33 2026 by rpki-client