Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa
File:                     62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa (raw, json)
Hash identifier:          3uBXq1eW7JyZk/WcUb3OjGL8pdr/f1fAV8kdKNx2S+8=
Subject key identifier:   1F:94:39:33:3C:50:E9:4B:6E:04:CD:59:8F:47:B6:BF:ED:AB:CD:E0
Certificate issuer:       /CN=7895ee85-2a16-4e54-9c5b-a9a05908877e
Certificate serial:       010D0C9F4328584E5D14A03FA190570AA97F57A0
Authority key identifier: B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     16832
IP address blocks:        138.128.232.0/21 maxlen: 21
                          192.161.66.0/23 maxlen: 23
                          208.117.64.0/20 maxlen: 20
                          208.123.128.0/19 maxlen: 19
                          216.41.136.0/22 maxlen: 22
                          2605:2b80::/32 maxlen: 32
                          2606:9f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a0:3f:a1:90:57:0a:a9:7f:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7895ee85-2a16-4e54-9c5b-a9a05908877e
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=ff4be874-6b4a-4d18-9291-2e1675c3e2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:19:45:9d:f4:a2:42:18:6c:ac:5e:21:f3:
                    f6:11:a4:2a:5d:83:2d:a3:41:d9:ea:43:14:3e:39:
                    b2:bd:81:18:9b:87:58:0f:26:ce:17:67:94:f1:ab:
                    63:63:21:b9:d5:d2:ea:ff:a2:a5:4b:01:5f:94:fc:
                    bc:08:f1:e8:c9:40:3c:ca:88:bb:73:5e:fb:61:12:
                    e8:17:3f:14:d9:10:5b:54:7c:1e:7f:a6:85:56:0a:
                    39:10:ad:d3:99:20:80:8d:b5:05:e4:23:22:6e:c2:
                    cf:e7:52:26:61:c7:50:33:3c:96:e7:f2:e4:ab:5f:
                    d9:12:19:03:b5:57:d0:65:45:f9:ce:8a:6e:31:22:
                    f8:e1:0e:3d:ec:1e:21:ef:99:d8:bc:9a:d7:b2:5c:
                    b5:ab:97:62:18:67:03:25:10:ec:81:b2:1a:05:72:
                    29:b2:fb:ec:38:d5:a8:65:d8:2b:5b:4a:62:84:95:
                    fc:8f:02:76:e7:e5:ca:68:89:b4:45:f6:cc:96:39:
                    9b:fe:6b:98:dc:7d:e7:af:90:d7:e9:3b:66:f8:13:
                    52:67:7e:ba:02:7a:a1:e7:cf:90:b9:d8:ae:c4:b0:
                    aa:36:b1:13:ba:9a:f2:44:a7:ec:e2:7c:d8:e7:9a:
                    e4:70:bc:7b:c8:d6:7a:b6:e4:45:0e:21:0d:db:79:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:39:33:3C:50:E9:4B:6E:04:CD:59:8F:47:B6:BF:ED:AB:CD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl

            X509v3 Authority Key Identifier:
                keyid:B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.128.232.0/21
                  192.161.66.0/23
                  208.117.64.0/20
                  208.123.128.0/19
                  216.41.136.0/22
                IPv6:
                  2605:2b80::/32
                  2606:9f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:22:2b:f0:61:51:cc:20:7e:63:2f:eb:b2:c0:20:8a:f8:46:
         ba:4e:6f:9d:82:63:a6:f8:a4:a9:52:39:d1:5a:c7:f9:9b:bb:
         64:7b:bf:58:fa:57:c8:72:e1:22:9d:a5:ca:98:e0:c8:57:34:
         14:46:2d:dc:4d:a1:04:47:fd:57:f5:36:39:40:dd:24:62:3a:
         ae:3f:c3:83:ce:bb:4a:5b:ea:40:d8:22:74:d0:73:45:64:5b:
         c4:2b:66:56:3f:e7:fc:2d:2a:1a:88:a9:0a:af:26:58:a8:65:
         1f:cb:1e:40:f4:e0:e7:5c:4b:f3:96:ae:cb:84:a2:a2:fc:8a:
         ae:c8:83:e6:b0:7d:22:41:70:fe:75:2c:b0:05:69:43:f7:d8:
         69:a3:86:f5:ff:f4:62:2e:82:51:52:c4:1a:c0:3d:98:7c:e1:
         eb:c5:10:71:35:f7:37:21:f9:39:02:ae:32:93:4c:19:df:7e:
         0d:ca:56:21:0a:8a:8f:e3:90:14:12:d2:8d:fc:3e:89:6c:1a:
         43:38:fc:4f:7a:b0:78:2c:92:8f:4d:f9:74:bf:9e:82:9e:0e:
         ba:b8:b0:7b:0a:42:9f:01:70:08:53:9b:bb:cf:1b:32:9b:7a:
         8d:2c:c5:70:e3:31:46:60:09:a8:2d:87:7e:2a:7b:2c:68:ad:
         3c:5a:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:39 2026 by rpki-client