Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
File:                     6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa (raw, json)
Hash identifier:          gOuTqLJy2SZRj66XmLR89LpSpxRQz5Q+8Jgp4U5XNBI=
Subject key identifier:   2A:F6:EA:98:EB:7B:1A:9A:AE:D9:9D:16:52:83:44:7D:9A:47:E1:DB
Certificate issuer:       /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial:       010D0C9F4328584F3FAD2E67BE7D88D0A9B4FF40
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     10958
IP address blocks:        147.161.4.0/22 maxlen: 32
                          162.216.108.0/22 maxlen: 32
                          162.216.208.0/21 maxlen: 32
                          198.62.181.0/24 maxlen: 32
                          208.68.56.0/22 maxlen: 32
                          208.80.144.0/21 maxlen: 32
                          208.91.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:2e:67:be:7d:88:d0:a9:b4:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=4f6038e5-d1fe-4a24-aab5-8749d60d1baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:85:3c:17:9c:68:6a:7a:2d:08:13:a6:4e:
                    88:40:f6:f6:dc:60:a2:08:b6:33:03:6f:29:9f:02:
                    eb:da:62:71:84:a3:62:b3:6e:b3:70:7f:a6:2a:c8:
                    83:33:8d:f1:2a:1c:10:b2:58:e0:c9:66:84:7d:96:
                    e3:f6:85:4a:9f:5b:bb:3b:c1:16:bb:02:01:7b:53:
                    b1:7a:84:18:35:ae:64:0b:c0:a5:90:b3:5c:00:d1:
                    dd:52:5d:a8:00:91:7f:02:f0:3a:26:5c:24:30:ed:
                    f4:05:b0:3d:d5:9e:ba:05:fd:fb:0f:00:ee:e6:11:
                    ac:04:72:d4:db:d2:a8:5c:9d:b2:c1:fc:00:8f:0b:
                    bf:60:2d:cb:25:52:1f:a4:1b:42:2f:75:ac:a5:4c:
                    62:ca:c7:3e:04:e7:ab:05:7d:44:90:79:12:89:24:
                    08:65:bd:9a:1f:90:6e:e5:33:db:28:7a:d7:be:d0:
                    04:4f:96:0b:13:79:57:31:4c:61:70:6e:3d:be:23:
                    4b:a7:23:dc:cf:b2:09:1f:bf:79:5a:b7:4d:9a:c3:
                    45:b1:36:c3:43:f9:4a:f1:a6:70:7e:87:08:66:cc:
                    d7:f3:8d:63:7c:7d:fe:a0:f5:32:39:c3:e5:63:7a:
                    27:89:5f:c1:35:01:9b:b7:77:86:14:3d:9f:00:1c:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F6:EA:98:EB:7B:1A:9A:AE:D9:9D:16:52:83:44:7D:9A:47:E1:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl

            X509v3 Authority Key Identifier:
                keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.161.4.0/22
                  162.216.108.0/22
                  162.216.208.0/21
                  198.62.181.0/24
                  208.68.56.0/22
                  208.80.144.0/21
                  208.91.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5a:3d:49:d4:f5:97:11:9c:95:a1:4d:70:46:2c:28:62:ac:
         e2:a6:0b:45:6b:2d:0a:0b:b4:44:d5:3b:fb:4f:48:9d:da:06:
         b3:5c:4a:08:af:f0:ab:3d:3a:ba:1f:ea:46:0b:08:a4:bc:b8:
         bc:11:b6:af:4a:1d:96:19:43:45:3a:9d:c2:1a:32:64:15:ea:
         ae:c6:e7:5d:b5:31:83:70:fa:87:bf:5b:b1:ac:67:9f:e3:4f:
         5c:d8:e7:ea:74:a2:05:33:12:32:69:92:9a:6e:5b:bc:40:2a:
         a4:a3:5e:ff:05:4b:51:25:e6:9a:43:34:0b:b7:9d:17:7c:e9:
         90:64:d0:5b:01:a8:4f:52:e3:4a:3c:ab:54:4f:60:dc:d1:f6:
         95:d6:a4:45:65:63:e7:92:77:0e:2c:4c:a3:de:a1:21:7e:ba:
         ab:33:1c:f4:1c:f3:ba:ad:53:34:b1:d9:38:7c:eb:be:c6:3c:
         22:10:be:49:df:59:69:b1:44:9d:ba:f1:89:fc:a8:cc:2f:15:
         8d:64:93:f9:f6:0a:48:41:ed:86:78:4c:ce:3a:78:c9:1e:54:
         3f:78:76:77:a6:15:af:20:60:13:63:64:f9:b8:fb:a5:38:15:
         4c:51:69:80:9e:52:22:ce:d0:48:ef:25:17:d1:2c:9b:e8:60:
         74:b6:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:28:30 2026 by rpki-client