Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7e81b76-6cee-3487-a04f-3f226b181c93.roa
File:                     f7e81b76-6cee-3487-a04f-3f226b181c93.roa (raw, json)
Hash identifier:          WHWe3QDKkNWOlrsCKCmyXesUexDpZVBQek8ZzQAQvHI=
Subject key identifier:   D3:25:42:0C:0D:F1:1F:65:3A:92:68:D3:31:BF:9C:DE:6A:B6:4C:57
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D7CCFE5E08991F8A9951E5340
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7e81b76-6cee-3487-a04f-3f226b181c93.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     1299
IP address blocks:        161.58.0.0/16 maxlen: 24
                          198.65.128.0/18 maxlen: 24
                          198.65.224.0/19 maxlen: 24
                          199.240.0.0/16 maxlen: 24
                          206.58.0.0/16 maxlen: 24
                          206.86.0.0/16 maxlen: 24
                          207.21.128.0/18 maxlen: 24
                          207.22.64.0/18 maxlen: 24
                          207.31.192.0/18 maxlen: 24
                          207.32.64.0/18 maxlen: 24
                          207.33.0.0/16 maxlen: 24
                          207.97.0.0/17 maxlen: 24
                          207.150.0.0/17 maxlen: 24
                          207.153.128.0/18 maxlen: 24
                          207.153.192.0/18 maxlen: 24
                          207.158.192.0/18 maxlen: 24
                          207.159.0.0/18 maxlen: 24
                          207.196.0.0/17 maxlen: 24
                          207.197.128.0/17 maxlen: 24
                          207.199.0.0/17 maxlen: 24
                          207.206.0.0/17 maxlen: 24
                          209.69.0.0/16 maxlen: 24
                          209.75.0.0/16 maxlen: 24
                          209.130.0.0/17 maxlen: 24
                          209.157.0.0/16 maxlen: 24
                          209.238.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:e5:e0:89:91:f8:a9:95:1e:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=9a16691f-ce93-4576-9f47-1ca386747b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cb:62:81:b4:0e:87:75:f4:47:41:ac:62:9c:
                    94:24:b6:90:08:70:59:c3:23:91:ba:51:e5:76:f5:
                    c6:3d:11:2d:4e:8b:08:7c:60:23:ad:a9:21:f9:c8:
                    77:d3:ac:af:e8:02:c9:2b:c4:5c:3f:7c:40:ac:24:
                    fd:80:f6:57:02:fa:88:a5:51:00:21:f7:f1:51:c0:
                    aa:76:df:89:46:71:fa:e3:82:4a:d3:eb:7e:d4:37:
                    b2:b0:10:ee:b8:d8:c4:19:ea:e7:1c:f6:93:8e:0d:
                    d9:aa:d2:b2:99:be:16:3b:ed:12:ed:74:7e:89:2e:
                    b0:55:05:6f:f6:2b:f6:19:cc:2b:56:d6:7b:a1:f5:
                    12:21:de:3d:8b:9e:1a:56:51:d8:c9:c7:37:5f:6f:
                    47:d2:c9:fd:6b:71:42:b7:45:0f:a1:bb:14:c0:db:
                    e0:93:60:23:f4:48:0f:ff:8a:33:32:9a:e8:b2:ef:
                    b7:1c:19:e4:5d:3b:e9:80:5e:77:1a:60:fd:8b:9c:
                    e1:7b:40:d9:be:c4:66:b4:04:03:bf:8c:16:ec:cc:
                    b2:43:5e:ca:6a:9c:fc:29:b7:1f:13:4d:10:0f:dd:
                    e9:3d:85:11:d7:2f:e2:3f:a5:12:c1:7d:c5:83:a4:
                    17:4d:a4:cc:6e:fa:72:8e:00:f6:6f:b3:fb:8e:5d:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:25:42:0C:0D:F1:1F:65:3A:92:68:D3:31:BF:9C:DE:6A:B6:4C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7e81b76-6cee-3487-a04f-3f226b181c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.58.0.0/16
                  198.65.128.0/18
                  198.65.224.0/19
                  199.240.0.0/16
                  206.58.0.0/16
                  206.86.0.0/16
                  207.21.128.0/18
                  207.22.64.0/18
                  207.31.192.0/18
                  207.32.64.0/18
                  207.33.0.0/16
                  207.97.0.0/17
                  207.150.0.0/17
                  207.153.128.0/17
                  207.158.192.0-207.159.63.255
                  207.196.0.0/17
                  207.197.128.0/17
                  207.199.0.0/17
                  207.206.0.0/17
                  209.69.0.0/16
                  209.75.0.0/16
                  209.130.0.0/17
                  209.157.0.0/16
                  209.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9c:6c:39:c5:b2:a1:9f:87:a7:f4:8e:b0:01:de:ff:97:12:
         bf:9d:44:1e:16:88:4b:da:46:1b:cd:9c:61:ff:36:23:bb:9e:
         23:cd:fb:cd:be:d9:dd:ea:63:2a:96:cb:9b:6d:5e:5a:0e:f1:
         c7:21:34:b2:06:02:bf:67:e6:59:99:36:93:f4:82:30:26:43:
         b8:fd:1a:76:18:d3:e3:23:0d:7c:ed:88:d8:e3:52:85:b8:ec:
         2d:ce:d1:2c:30:46:25:6e:4c:60:4c:53:df:ed:6d:7d:07:9b:
         11:b7:f7:2b:33:5c:dd:66:ff:2b:92:07:94:ec:f7:74:41:e4:
         23:74:82:eb:82:ed:42:07:05:c5:d8:d6:62:d1:22:2f:8b:5f:
         7c:04:f2:6c:99:8e:9d:1d:21:45:ab:d8:d2:5f:e5:25:ed:5e:
         30:f4:a4:f6:72:c7:c9:de:25:5b:5c:66:04:7b:ee:de:87:4d:
         78:9e:38:a1:c8:5c:bd:c4:3e:20:7e:13:a1:56:22:a4:5b:b0:
         ee:8b:3c:00:38:98:f4:5d:94:4f:47:93:68:32:65:f9:b6:0c:
         a0:d4:dd:80:49:2f:f0:32:e8:3b:0c:50:d9:a4:4f:24:a4:95:
         cf:28:1d:b2:ad:ec:c5:66:25:6a:b4:8d:db:bb:42:de:ac:fd:
         ed:24:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:08 2026 by rpki-client