Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/418ab853-299f-3023-b8e3-16edc6ae216b.roa
File:                     418ab853-299f-3023-b8e3-16edc6ae216b.roa (raw, json)
Hash identifier:          yxkN6zBCPdwzdDHet7IdcPaKfTN9VBrUJK8xJULecwY=
Subject key identifier:   3E:3F:72:95:EC:EB:7E:E6:E3:A4:80:35:2C:AA:06:6B:BA:E1:68:04
Certificate issuer:       /CN=5b1d675d-c8fe-494f-85c3-bff9be51c077
Certificate serial:       010D0C9F4328584E74538B552C451FE9CCE07440
Authority key identifier: BD:4D:FA:C9:D8:5E:B2:5E:BF:3B:EC:DD:5D:EF:97:86:0D:0B:87:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/418ab853-299f-3023-b8e3-16edc6ae216b.roa
Signing time:             Fri 10 Jul 2026 16:50:37 +0000
ROA not before:           Fri 10 Jul 2026 16:50:37 +0000
ROA not after:            Thu 08 Oct 2026 16:50:37 +0000
asID:                     11013
IP address blocks:        68.68.16.0/20 maxlen: 20
                          76.10.192.0/24 maxlen: 24
                          76.10.194.0/23 maxlen: 23
                          76.10.196.0/22 maxlen: 22
                          76.10.200.0/21 maxlen: 21
                          76.10.208.0/22 maxlen: 22
                          76.10.212.0/23 maxlen: 23
                          76.10.214.0/24 maxlen: 24
                          76.10.216.0/22 maxlen: 22
                          76.10.221.0/24 maxlen: 24
                          76.10.222.0/23 maxlen: 23
                          199.116.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/5b1d675d-c8fe-494f-85c3-bff9be51c077.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/5b1d675d-c8fe-494f-85c3-bff9be51c077.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:53:8b:55:2c:45:1f:e9:cc:e0:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1d675d-c8fe-494f-85c3-bff9be51c077
        Validity
            Not Before: Jul 10 16:50:37 2026 GMT
            Not After : Oct  8 16:50:37 2026 GMT
        Subject: CN=bead1384-d109-4612-8f4f-9029282daa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:33:31:2a:ab:4a:83:f9:a0:c0:68:91:33:80:
                    91:8d:bc:3a:22:00:d1:71:15:9a:00:63:6e:07:d5:
                    7b:87:f4:27:bc:94:c3:2d:ea:d4:af:26:9e:ee:96:
                    44:11:db:86:23:be:38:b4:8b:46:dc:4f:f7:8e:81:
                    46:ae:80:9a:45:8c:20:67:ce:1d:83:dc:33:2a:17:
                    05:34:70:c6:e4:6e:43:fa:f6:74:62:19:46:7e:fb:
                    de:d4:97:15:2a:e4:a1:4b:48:1b:4c:02:3c:dc:ae:
                    2f:ce:e3:28:40:8f:71:00:cf:c9:fb:e2:d5:9f:53:
                    f1:33:d1:62:ea:48:15:cf:fb:19:5b:58:36:b9:89:
                    3d:bd:28:81:cf:0a:cf:de:8a:8d:a5:b8:e5:ef:98:
                    1c:c7:7b:a7:01:d1:45:08:d9:a4:98:98:27:fe:7c:
                    cf:e9:27:49:81:23:a0:85:76:c7:a9:07:25:9e:3c:
                    12:a0:1f:c1:24:5b:fc:1d:95:fc:9f:0b:9f:64:3a:
                    96:41:16:59:02:3f:f8:06:75:04:67:ec:2f:92:49:
                    30:bf:31:fa:df:13:12:3f:87:1b:40:dd:27:d1:b4:
                    42:bb:5c:4e:d4:b2:d8:94:5e:b2:79:de:57:da:9e:
                    a1:df:09:59:fa:b1:53:34:31:af:d4:82:bb:42:c8:
                    e0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3F:72:95:EC:EB:7E:E6:E3:A4:80:35:2C:AA:06:6B:BA:E1:68:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/418ab853-299f-3023-b8e3-16edc6ae216b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/5b1d675d-c8fe-494f-85c3-bff9be51c077.crl

            X509v3 Authority Key Identifier:
                keyid:BD:4D:FA:C9:D8:5E:B2:5E:BF:3B:EC:DD:5D:EF:97:86:0D:0B:87:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.16.0/20
                  76.10.192.0/24
                  76.10.194.0-76.10.214.255
                  76.10.216.0/22
                  76.10.221.0-76.10.223.255
                  199.116.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:44:58:4f:d8:5d:55:48:9f:28:47:59:32:d4:ff:69:2a:28:
         27:10:66:75:06:b1:89:97:36:12:21:9f:c5:3c:2d:82:22:6e:
         23:05:d2:3a:96:ca:d4:ea:44:06:1a:fa:d4:58:23:76:94:7d:
         60:53:23:49:d4:e7:91:ef:7d:87:cd:ff:9f:58:67:8d:54:47:
         37:c5:fe:57:d9:41:9e:7e:98:f4:6d:9f:d3:30:89:66:8f:c4:
         08:6d:38:17:f5:04:57:7a:36:81:aa:74:06:e4:61:68:82:4b:
         38:85:56:d1:76:3e:77:38:d2:3c:dc:4d:37:a6:9d:25:fa:e2:
         ff:d3:21:87:40:71:c5:0b:8f:a3:da:50:0f:67:36:cb:be:43:
         08:84:32:dc:e9:71:cf:8b:84:43:30:e8:1f:a4:e1:50:40:eb:
         a4:6b:ee:05:9b:9e:90:db:d8:b8:5b:88:88:1a:31:72:57:6f:
         1c:fb:65:8e:b2:9b:1a:ba:0b:c8:18:46:15:fa:a6:ac:5c:fd:
         d4:ee:44:a4:05:f8:82:b1:1c:d2:04:70:01:2f:5a:89:0d:d3:
         78:c5:c1:5f:dc:8f:c2:cb:20:0d:54:0c:09:43:59:b3:9b:01:
         5f:ab:fe:80:bb:9a:3d:ff:7c:7f:a5:25:38:c3:b6:60:13:b5:
         9e:54:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:56:13 2026 by rpki-client