Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa
File:                     d7717f60-de75-372f-b4a7-3706f6fa274b.roa (raw, json)
Hash identifier:          ztpA0HqHsS5MU92+zv0FkLTEK09z/DNL3d/JO5Y3cgY=
Subject key identifier:   AA:1A:C2:46:53:73:BA:91:19:FB:9C:91:44:74:68:AE:32:3E:8B:43
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E016B4E3D03C080A5CFB5C880
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     34425
IP address blocks:        128.242.128.0/19 maxlen: 24
                          128.242.224.0/20 maxlen: 24
                          128.242.240.0/20 maxlen: 24
                          130.94.176.0/20 maxlen: 24
                          130.94.208.0/20 maxlen: 24
                          131.103.0.0/20 maxlen: 24
                          131.103.96.0/20 maxlen: 24
                          168.143.160.0/20 maxlen: 24
                          198.64.80.0/20 maxlen: 24
                          198.64.192.0/19 maxlen: 24
                          204.1.192.0/19 maxlen: 24
                          204.3.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:4e:3d:03:c0:80:a5:cf:b5:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=fab6f5d3-7882-4833-b85e-8032b3ada18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:c6:bf:30:41:23:10:d3:83:16:7c:87:2f:
                    54:24:0e:73:e9:be:cb:c1:2c:ef:ce:a8:6d:41:c3:
                    d2:23:92:2a:ce:20:a3:99:93:c4:12:68:60:1d:ed:
                    a2:a6:9f:18:67:15:9d:cf:16:a1:65:72:0f:13:1a:
                    34:8c:8b:26:4c:ca:9c:b2:80:16:17:ce:4c:29:98:
                    e4:d5:6e:d7:7e:07:12:01:a1:a9:6a:0c:57:cd:d6:
                    3f:c3:08:f9:c6:a6:23:5c:e5:76:2e:4f:55:7b:4b:
                    c2:6b:63:db:7c:08:38:24:8c:ca:b2:d3:47:de:2d:
                    4b:99:3b:90:b2:53:57:b5:f7:0a:93:c7:c2:f9:46:
                    65:f5:91:e5:89:a2:1e:d7:d5:55:17:99:96:57:06:
                    dc:09:99:e2:08:5e:ed:72:67:e5:b2:50:4e:0d:3c:
                    3e:ca:d5:e0:ce:5e:be:43:1d:56:46:2c:be:ba:0c:
                    91:98:08:8f:47:97:e9:85:c8:c4:97:24:32:cc:de:
                    39:ec:f8:24:97:3f:d8:21:79:3a:fe:52:ec:2b:75:
                    c7:10:c3:c8:f5:af:ad:c0:b9:2c:b9:26:49:ad:53:
                    bd:af:68:2e:b9:39:02:c5:85:81:7c:05:3a:30:ba:
                    f9:d6:a2:18:9a:e9:05:f0:c7:c8:56:ed:f2:1f:fe:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1A:C2:46:53:73:BA:91:19:FB:9C:91:44:74:68:AE:32:3E:8B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.242.128.0/19
                  128.242.224.0/19
                  130.94.176.0/20
                  130.94.208.0/20
                  131.103.0.0/20
                  131.103.96.0/20
                  168.143.160.0/20
                  198.64.80.0/20
                  198.64.192.0/19
                  204.1.192.0/19
                  204.3.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:9c:d3:02:78:63:37:3e:20:d2:3f:7b:b7:d2:af:2f:7c:45:
         aa:30:66:ba:ec:c4:6b:2c:d0:e4:69:98:1b:b1:72:c8:14:a1:
         3d:58:bf:ea:63:cc:31:be:fb:d3:53:b8:62:76:0d:c8:61:ad:
         87:b1:d3:1a:e1:47:e9:3d:bd:d0:50:62:32:0c:76:18:ee:58:
         9b:c2:5e:94:06:3b:b8:21:9e:71:7c:d4:38:9d:b1:ee:c3:42:
         06:49:c1:24:f6:fb:b6:30:dd:9a:48:f9:ed:9e:78:1f:79:33:
         02:63:19:69:5b:87:6f:13:b8:82:6b:d5:67:19:5f:89:b5:47:
         f9:f6:c1:e5:1e:ea:0d:a3:68:11:b2:e9:5b:68:ec:e8:b4:16:
         a9:51:c4:5d:4e:04:a7:6b:71:7c:d2:cc:41:ea:a1:0a:d0:f2:
         68:00:fd:d0:d9:d9:e1:9b:84:da:0d:4b:b5:73:d9:ed:a2:07:
         a1:32:ec:ca:bd:d0:c0:84:de:30:5d:ed:5b:71:bf:b1:37:76:
         c1:02:0a:9b:06:9f:69:d1:dc:39:a8:de:6a:84:32:3f:ea:a1:
         b9:ae:00:8f:df:06:93:14:3f:e0:cc:77:a2:0c:66:5f:bd:60:
         d7:f3:de:06:bd:0a:a9:f8:fe:80:4c:01:a7:d1:db:fc:65:74:
         3a:ba:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:37 2026 by rpki-client