Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa
File:                     31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa (raw, json)
Hash identifier:          8CHplJmZmhOnc93RMU/HVtB5c0XiGM173bSPEeIX2tA=
Subject key identifier:   DB:0B:5A:48:D5:05:F0:3D:5E:40:4A:D5:01:1F:90:75:48:CF:14:9E
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F4328584D9E501D740AA894F689E02D40
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     15204
IP address blocks:        75.102.160.0/19 maxlen: 19
                          75.102.160.0/24 maxlen: 24
                          75.102.161.0/24 maxlen: 24
                          75.102.162.0/24 maxlen: 24
                          75.102.163.0/24 maxlen: 24
                          75.102.164.0/24 maxlen: 24
                          75.102.165.0/24 maxlen: 24
                          75.102.166.0/24 maxlen: 24
                          75.102.167.0/24 maxlen: 24
                          75.102.168.0/24 maxlen: 24
                          75.102.169.0/24 maxlen: 24
                          75.102.170.0/24 maxlen: 24
                          75.102.171.0/24 maxlen: 24
                          75.102.172.0/24 maxlen: 24
                          75.102.173.0/24 maxlen: 24
                          75.102.174.0/23 maxlen: 23
                          75.102.176.0/22 maxlen: 22
                          75.102.180.0/22 maxlen: 22
                          75.102.184.0/23 maxlen: 23
                          75.102.186.0/23 maxlen: 23
                          75.102.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:1d:74:0a:a8:94:f6:89:e0:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=30e99c5b-3ab7-4fcd-ad1a-106fce7ab478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:a4:32:3f:a5:ce:8e:af:53:ef:12:56:93:
                    7f:dc:b7:c1:ce:88:46:ce:c6:ec:1d:8c:42:10:e5:
                    b4:f8:1e:47:b0:82:b7:12:47:19:70:7f:ec:b3:3b:
                    8d:30:d5:0f:c1:99:15:f5:7c:39:d3:5b:5e:ac:ab:
                    c9:fb:65:cd:04:94:eb:d2:76:31:f8:b2:b8:3c:db:
                    0a:dd:1e:12:b2:68:c3:d8:b6:37:73:8c:d6:6a:f9:
                    90:13:fe:15:cb:d7:67:34:45:ca:53:26:f2:13:3e:
                    d7:ab:60:09:00:80:57:d0:14:30:67:57:f2:b1:61:
                    8d:8f:3d:4e:af:44:9b:4e:ed:81:4b:77:ce:18:84:
                    ca:d0:ac:cf:de:5a:22:da:13:a9:3c:b3:48:97:df:
                    a1:f9:bb:b1:00:ff:53:60:41:5f:ed:c2:ec:9e:bf:
                    38:6c:34:19:8e:71:90:e9:91:27:fa:ec:bb:1e:29:
                    3a:24:e5:bc:65:10:96:d4:f5:79:4d:11:46:aa:3c:
                    96:7c:72:ef:68:b7:b3:1b:68:a0:8d:01:3e:f4:24:
                    96:d9:10:42:97:87:42:1c:22:78:22:97:72:40:08:
                    e8:b0:7e:ee:b8:5f:8a:79:3e:ba:89:2f:43:9b:8e:
                    2b:90:36:70:fb:c6:60:da:5f:d0:63:cf:69:85:31:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0B:5A:48:D5:05:F0:3D:5E:40:4A:D5:01:1F:90:75:48:CF:14:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ba:e2:a7:25:d4:e4:e8:a2:2b:e0:3a:83:84:77:85:37:73:
         ed:34:e5:29:b9:3d:c5:b9:a5:0f:56:c6:05:5f:08:4a:6a:64:
         62:85:38:0d:5a:f4:e5:38:1c:75:26:36:e1:22:94:f2:cb:7a:
         e9:1c:c7:41:a3:fb:a9:81:99:84:47:4c:76:e0:32:90:b7:95:
         a6:72:56:5e:e2:dc:a7:a6:8e:b4:35:b6:53:b1:83:f7:ff:5c:
         3d:a0:d0:79:a6:1a:38:30:5c:0e:fa:db:7c:11:dd:5a:52:2a:
         e2:3b:2d:54:a5:aa:58:a2:d7:95:35:76:61:36:09:ba:ef:72:
         c4:6c:dc:46:45:f1:66:58:83:b1:68:44:a5:c0:a1:5b:02:09:
         cf:97:b2:ab:26:6d:c0:b8:ab:99:4a:da:19:cc:52:0d:03:b2:
         ef:e2:b8:90:92:1f:18:39:89:c7:16:90:52:d9:56:07:5b:c3:
         a9:dd:93:86:30:c8:61:f7:72:78:e2:bc:c5:62:3d:97:a8:d9:
         24:b6:0c:ff:88:65:31:ae:9a:96:6a:b4:64:6d:3d:92:af:a6:
         9b:33:a7:d0:76:81:17:af:21:46:94:ac:ff:9e:90:c7:b5:91:
         57:be:26:4e:a7:93:82:5e:79:01:22:02:dc:6a:46:2c:3a:eb:
         ae:cc:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:31:55 2026 by rpki-client