Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
File:                     274940e5-0730-372f-bdea-bc5ac690921e.roa (raw, json)
Hash identifier:          5YivInlmQnhoiAAllKJ7wikQkfYW422lfbHTb+/R06M=
Subject key identifier:   17:6D:82:AA:84:1C:E3:E5:D8:76:C5:9B:92:0C:ED:52:3D:13:F0:B5
Certificate issuer:       /CN=324a8cbd-4953-435c-bace-07af1279e9bc
Certificate serial:       010D0C9F4328584E885A4C0598C25750DDDEC200
Authority key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     398025
IP address blocks:        67.219.0.0/20 maxlen: 20
                          69.1.224.0/19 maxlen: 19
                          161.82.64.0/18 maxlen: 18
                          170.103.64.0/18 maxlen: 18
                          204.63.0.0/20 maxlen: 20
                          207.29.224.0/19 maxlen: 19
                          208.100.192.0/18 maxlen: 18
                          216.128.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:4c:05:98:c2:57:50:dd:de:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324a8cbd-4953-435c-bace-07af1279e9bc
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=0eba989c-838b-4570-8ac2-13bcc4296fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:8b:ad:c6:98:13:71:34:33:22:ba:1d:7d:
                    37:e3:05:77:9c:97:04:5f:b1:14:88:c8:d0:04:b8:
                    3d:8f:fa:8f:aa:e5:0f:94:4e:9f:00:cc:86:32:c5:
                    96:72:d0:53:bd:bc:94:a3:ec:1f:ee:e7:5a:2e:91:
                    21:45:1c:25:87:15:6e:aa:32:87:60:3e:fd:7c:2e:
                    02:93:70:62:03:de:1e:b9:36:e4:ae:91:5b:e0:81:
                    01:67:ae:78:0a:e9:cf:78:c0:5b:3d:47:d6:30:0b:
                    76:3a:73:d7:df:e6:bc:9d:ab:d7:44:ce:d5:4d:c5:
                    e1:ed:28:d4:5c:40:f3:e5:01:fb:76:20:bc:dd:a0:
                    00:f2:f7:b9:1f:92:d1:bc:f4:a8:a4:19:1a:b4:f0:
                    68:14:ca:65:96:b2:d4:39:f2:d1:9c:8b:a9:9f:a5:
                    82:09:e8:6f:1d:76:7d:4b:fd:c9:4b:7e:d2:0e:ff:
                    99:fb:91:ce:26:f4:70:81:3d:0e:28:ad:0b:76:fe:
                    ce:37:33:cb:54:25:a5:78:69:e0:f1:f2:47:9c:b6:
                    cc:8d:ce:da:c8:4f:fa:5e:a3:2b:bb:45:b9:55:d9:
                    09:3d:92:45:54:ec:49:7e:53:63:45:8d:0a:a6:0b:
                    5a:ee:92:79:7d:e2:dc:c8:82:9b:18:1a:bc:95:d9:
                    41:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6D:82:AA:84:1C:E3:E5:D8:76:C5:9B:92:0C:ED:52:3D:13:F0:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl

            X509v3 Authority Key Identifier:
                keyid:B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.0.0/20
                  69.1.224.0/19
                  161.82.64.0/18
                  170.103.64.0/18
                  204.63.0.0/20
                  207.29.224.0/19
                  208.100.192.0/18
                  216.128.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:cd:a6:ef:3e:ac:0b:98:8f:21:37:b4:e9:a4:0f:b9:19:ea:
         16:26:23:90:f8:0e:a7:2f:f6:9e:02:56:17:91:47:07:8c:58:
         34:ad:6e:76:7e:8b:e5:f7:5a:a3:4c:81:68:23:e6:ab:61:04:
         45:f4:91:b6:a8:f1:cf:01:73:05:75:06:eb:be:4e:2c:41:7c:
         fa:61:68:b4:20:82:3e:5f:2f:62:0d:f6:3d:3e:a7:3c:34:4f:
         c1:c3:9a:06:a9:a6:eb:f9:fb:c7:cc:de:15:85:31:0a:3d:2e:
         95:3c:f3:35:b2:1f:86:6b:db:30:4f:f6:14:33:9c:4b:2b:00:
         5f:13:cc:d6:af:c4:a6:9c:f1:c7:bd:e3:4e:bc:64:24:b9:bc:
         2e:eb:d5:28:0b:6a:9b:98:ce:a2:d1:c1:6a:ca:7e:fb:89:85:
         40:14:7d:cb:23:2c:cb:83:49:fc:12:57:04:7e:44:38:8f:35:
         29:5d:8a:ce:53:64:ad:b7:56:be:86:f9:b2:16:24:a1:d8:a8:
         ae:0c:8b:92:09:e3:4f:b6:9b:17:2d:13:72:41:90:78:a6:4b:
         6e:52:4b:16:e8:b9:92:83:df:bc:fb:65:ce:c1:fe:0c:89:7e:
         36:6a:a2:08:c6:bf:61:57:d2:6a:fa:76:16:cf:06:13:10:88:
         e3:bb:0c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:36 2026 by rpki-client