Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa
File:                     3855a988-062b-3485-808c-4e1a37cecf3f.roa (raw, json)
Hash identifier:          05EVQLlOBsjLa70RQQ10Is5fZbysY3nQXwISjT2sJxY=
Subject key identifier:   AB:53:14:19:1F:61:59:30:77:EF:C1:CD:32:E1:6E:C6:2F:40:EB:71
Certificate issuer:       /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial:       010D0C9F4328584E8F54F0EA3A81A3CA95E5F370
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     11377
IP address blocks:        149.72.1.0/24 maxlen: 24
                          149.72.4.0/22 maxlen: 22
                          149.72.8.0/22 maxlen: 22
                          149.72.12.0/22 maxlen: 22
                          149.72.19.0/24 maxlen: 24
                          149.72.20.0/22 maxlen: 22
                          149.72.24.0/21 maxlen: 21
                          149.72.32.0/19 maxlen: 19
                          149.72.64.0/19 maxlen: 19
                          167.89.0.0/18 maxlen: 18
                          167.89.64.0/19 maxlen: 19
                          167.89.96.0/20 maxlen: 20
                          167.89.112.0/24 maxlen: 24
                          167.89.114.0/23 maxlen: 23
                          167.89.116.0/24 maxlen: 24
                          167.89.117.0/24 maxlen: 24
                          167.89.118.0/24 maxlen: 24
                          167.89.119.0/24 maxlen: 24
                          167.89.120.0/23 maxlen: 23
                          167.89.122.0/23 maxlen: 23
                          167.89.124.0/23 maxlen: 23
                          167.89.126.0/23 maxlen: 23
                          168.245.0.0/18 maxlen: 18
                          168.245.64.0/20 maxlen: 20
                          168.245.80.0/22 maxlen: 22
                          168.245.84.0/22 maxlen: 22
                          168.245.88.0/22 maxlen: 22
                          168.245.92.0/22 maxlen: 22
                          168.245.96.0/19 maxlen: 19
                          192.254.112.0/20 maxlen: 20
                          198.21.0.0/21 maxlen: 21
                          198.37.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:f0:ea:3a:81:a3:ca:95:e5:f3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=d33feb0b-bdaa-4c81-9fea-729647d70bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:fa:bd:9d:95:78:9f:f1:b8:ca:2b:1f:ca:
                    d0:bc:1a:14:6b:bd:26:88:38:e1:12:82:cd:d1:0f:
                    3c:b1:64:c1:0d:58:09:62:73:ea:54:a1:e5:4d:5f:
                    40:3c:4b:8c:00:1c:e0:23:40:51:84:af:15:39:22:
                    21:9a:d0:b4:0d:33:e7:92:5d:7b:15:b8:7c:26:48:
                    c9:f8:15:9f:46:f3:ef:e9:88:4b:05:88:fb:e9:6a:
                    9c:8c:42:fb:a4:fd:5c:b8:69:84:be:48:a7:a4:58:
                    ac:95:df:23:a4:16:78:59:dc:2f:a7:f3:5c:b8:4a:
                    c1:5d:1c:1a:bc:0e:86:5b:eb:3d:a0:28:63:c6:38:
                    2d:5b:b9:8a:8e:cc:1d:70:28:88:7a:3c:fd:e8:55:
                    f5:90:36:12:7f:a8:16:47:6d:9b:41:41:5e:a7:2d:
                    62:6d:5e:9b:31:5c:54:21:21:7a:1f:9d:17:da:45:
                    18:47:69:f2:bb:da:5c:49:98:f4:70:1a:37:83:56:
                    15:f6:cd:4e:eb:e2:9c:c9:a8:6c:88:8b:93:38:00:
                    af:53:c7:53:0b:29:0d:c0:fe:c0:4b:eb:ae:df:3a:
                    6f:23:ae:f3:f2:62:8b:9a:e8:c4:36:a0:66:2c:86:
                    76:57:bf:a1:ef:03:a7:cd:5b:d0:82:18:0d:41:f4:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:53:14:19:1F:61:59:30:77:EF:C1:CD:32:E1:6E:C6:2F:40:EB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl

            X509v3 Authority Key Identifier:
                keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.72.1.0/24
                  149.72.4.0-149.72.15.255
                  149.72.19.0-149.72.95.255
                  167.89.0.0-167.89.112.255
                  167.89.114.0-167.89.127.255
                  168.245.0.0/17
                  192.254.112.0/20
                  198.21.0.0/21
                  198.37.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d4:21:bc:36:e3:e1:e4:e9:d6:77:5c:b3:26:3c:bd:15:89:
         d4:3f:03:56:49:3f:43:2e:1a:bf:1b:1b:2a:f9:18:f2:e2:4b:
         f3:91:de:3b:76:74:ff:2b:d1:f4:0e:16:39:e9:7b:80:49:09:
         f1:34:33:ae:79:14:6c:f4:3f:8c:b9:0e:13:e3:c4:a6:42:3d:
         34:65:d6:ed:fa:25:c9:f7:2c:c1:28:5f:3a:9e:fe:af:4a:e7:
         db:7f:cd:b9:13:66:b2:d3:5f:92:e4:74:a0:ce:f4:15:bb:89:
         6f:4b:58:d4:80:b1:92:9c:9d:a4:c9:7e:fe:3c:5a:f7:e3:b7:
         28:13:31:47:01:b9:b7:33:5f:aa:b0:88:04:65:6d:56:21:eb:
         41:f1:19:a5:b0:e5:3d:86:85:15:ee:ea:7f:39:90:37:4a:1d:
         d1:71:e6:6b:b3:28:04:d9:05:15:2f:6c:2d:54:d5:23:a8:1e:
         bb:2f:8e:c7:ed:26:84:d2:7c:3a:28:bb:cc:61:ba:d4:75:1f:
         35:57:d5:a1:1f:6d:e1:75:80:56:bc:49:22:3f:60:59:67:db:
         24:24:dd:72:cd:e1:b6:48:32:56:38:e8:e0:ab:4c:bd:a9:99:
         72:f6:ed:f8:22:c3:a9:5a:dc:c9:e0:78:37:a7:f4:de:03:21:
         d1:47:0e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:51:58 2026 by rpki-client