Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa
File:                     0771c23b-83cc-37a6-9f7f-a7eae9053198.roa (raw, json)
Hash identifier:          thrttHa3+N5Pp+TarUZz15ziSVGsG5XqFAX/Xq8gu/M=
Subject key identifier:   71:26:FE:A3:56:49:C8:C6:D9:B6:DB:49:8A:11:28:97:FC:58:EC:70
Certificate issuer:       /CN=8753160d-30e1-48b1-afdb-394389cbcc81
Certificate serial:       010D0C9F4328584D492A550B0FED958F195AB080
Authority key identifier: F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     21723
IP address blocks:        162.211.192.0/21 maxlen: 24
                          162.222.120.0/21 maxlen: 24
                          162.246.128.0/22 maxlen: 24
                          162.255.248.0/21 maxlen: 24
                          172.85.80.0/21 maxlen: 24
                          172.103.48.0/20 maxlen: 24
                          198.1.56.0/21 maxlen: 24
                          199.91.80.0/21 maxlen: 24
                          199.192.184.0/21 maxlen: 24
                          199.193.88.0/21 maxlen: 24
                          207.232.96.0/19 maxlen: 24
                          208.85.212.0/22 maxlen: 24
                          209.207.64.0/18 maxlen: 24
                          216.21.128.0/19 maxlen: 24
                          216.40.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:55:0b:0f:ed:95:8f:19:5a:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8753160d-30e1-48b1-afdb-394389cbcc81
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=0a12193b-d07c-4854-872d-369e3b97b7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:7b:5c:f4:f6:c3:9c:eb:ab:7b:c1:f2:14:
                    6b:03:5b:7f:3e:77:e3:f3:fc:82:1d:13:84:d2:7d:
                    eb:74:d8:d6:12:cb:6b:42:81:9d:62:30:27:28:a7:
                    c8:e3:f4:41:11:43:e8:0c:17:a9:e8:91:8e:2b:55:
                    6c:49:85:b7:24:63:2f:84:ee:de:6a:e4:28:7a:66:
                    90:83:28:e6:81:63:8a:4c:73:31:89:08:37:2a:33:
                    c2:0d:c8:cb:ef:f1:66:86:91:bb:72:3c:d6:b5:be:
                    c7:0c:9b:98:fe:0c:97:81:46:3c:a0:52:8b:52:26:
                    86:fe:44:19:08:39:41:f0:40:0c:4e:b5:23:5f:e5:
                    5e:90:7a:66:60:e5:ee:0c:eb:89:3a:5a:07:b5:96:
                    ab:6f:1c:b3:b2:c9:4c:07:90:93:55:6b:6f:c5:a5:
                    40:62:4b:48:01:ca:68:7a:c0:5b:15:50:25:7a:0e:
                    54:e3:f1:3c:da:ac:8e:4d:91:ae:a6:08:c6:ad:ed:
                    39:6b:f2:5a:6e:84:c4:14:e5:10:a4:aa:54:ff:14:
                    8c:99:58:97:1a:06:86:67:73:85:a6:5e:10:d4:72:
                    9f:f4:bc:48:31:7f:eb:56:d9:02:19:05:a5:25:2f:
                    cf:54:2c:09:7c:e1:3c:0e:55:6c:59:a0:ea:26:5e:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:26:FE:A3:56:49:C8:C6:D9:B6:DB:49:8A:11:28:97:FC:58:EC:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl

            X509v3 Authority Key Identifier:
                keyid:F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.192.0/21
                  162.222.120.0/21
                  162.246.128.0/22
                  162.255.248.0/21
                  172.85.80.0/21
                  172.103.48.0/20
                  198.1.56.0/21
                  199.91.80.0/21
                  199.192.184.0/21
                  199.193.88.0/21
                  207.232.96.0/19
                  208.85.212.0/22
                  209.207.64.0/18
                  216.21.128.0/19
                  216.40.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:de:bf:d1:8c:20:0e:fe:93:bd:7a:f2:99:5c:32:17:48:
         47:e9:04:ab:bc:74:d3:10:35:76:bb:3f:72:f6:5a:12:eb:c4:
         82:5a:c2:d2:f2:55:05:ad:27:ab:36:a1:bb:7c:21:57:0c:82:
         7f:e4:2d:33:66:7b:cf:d2:fb:06:0e:64:a3:f7:f6:f6:66:c1:
         66:fe:5d:25:e0:60:44:91:9f:54:69:71:3f:c1:a7:9e:cc:f3:
         cb:32:ed:cb:22:c3:23:cb:74:dc:25:f7:c6:c2:11:42:75:30:
         8f:bb:53:ac:93:d6:96:2c:cc:a2:1a:e7:6d:87:48:a8:f2:f0:
         b3:d2:54:5d:37:0d:9b:33:e6:6a:0d:ed:3e:b4:92:d4:a9:f6:
         75:23:f1:df:46:dd:09:be:f0:d4:dc:9b:5d:3d:83:22:47:17:
         4d:5b:62:9c:61:b0:53:49:af:ec:0b:35:e9:ae:64:6d:c1:f6:
         ec:35:54:dc:b3:82:00:af:59:82:42:80:dc:3d:47:10:37:55:
         27:a9:59:7c:73:75:14:93:32:24:5a:25:cb:a5:15:a4:30:75:
         51:ec:ac:b5:ba:c9:d6:00:fe:81:0b:b3:c2:54:05:6f:8a:42:
         dc:bf:dd:19:18:a9:1b:1b:9e:5c:b6:34:f2:bf:ed:e2:19:93:
         78:a4:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:47 2026 by rpki-client