Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/879a6e9a-d30e-3050-9480-e528056dbbb2.roa
File:                     879a6e9a-d30e-3050-9480-e528056dbbb2.roa (raw, json)
Hash identifier:          1adzKjOH3pnKF6XeNiQAD0gQSvlq2rlvEHSCYoKa7Fw=
Subject key identifier:   43:26:8E:9D:2B:E3:D0:C1:CA:B8:38:98:1E:B9:93:D0:B6:48:29:CD
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584F189797A63CEB4193CFA5E500
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/879a6e9a-d30e-3050-9480-e528056dbbb2.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     18434
IP address blocks:        147.249.4.0/24 maxlen: 24
                          147.249.5.0/24 maxlen: 24
                          147.249.6.0/24 maxlen: 24
                          147.249.7.0/24 maxlen: 24
                          156.55.78.0/24 maxlen: 24
                          156.55.112.0/24 maxlen: 24
                          156.55.132.0/24 maxlen: 24
                          156.55.133.0/24 maxlen: 24
                          156.55.134.0/24 maxlen: 24
                          156.55.135.0/24 maxlen: 24
                          156.55.137.0/24 maxlen: 24
                          156.55.142.0/24 maxlen: 24
                          156.55.143.0/24 maxlen: 24
                          156.55.173.0/24 maxlen: 24
                          156.55.174.0/24 maxlen: 24
                          156.55.175.0/24 maxlen: 24
                          156.55.200.0/24 maxlen: 24
                          156.55.201.0/24 maxlen: 24
                          206.71.16.0/24 maxlen: 24
                          206.71.17.0/24 maxlen: 24
                          206.71.18.0/24 maxlen: 24
                          206.71.19.0/24 maxlen: 24
                          206.71.20.0/24 maxlen: 24
                          206.71.21.0/24 maxlen: 24
                          206.71.22.0/24 maxlen: 24
                          206.71.28.0/24 maxlen: 24
                          206.71.29.0/24 maxlen: 24
                          206.71.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:97:a6:3c:eb:41:93:cf:a5:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=d3f937fb-cf40-45af-a3b3-99d656fca8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:78:8e:b4:e1:0f:d9:94:31:fb:26:02:8c:
                    22:d7:10:b5:7a:d5:1b:e4:01:98:7b:76:6f:b8:3d:
                    7a:31:7f:c1:70:d5:da:e7:13:e0:86:91:9f:4f:30:
                    ea:57:76:03:92:d6:3d:ea:33:2c:cf:4c:a3:4e:70:
                    5d:a0:97:08:96:dd:b9:06:b5:96:69:fd:3c:4e:a4:
                    23:f9:e0:17:63:f1:3d:b9:73:96:b0:6f:31:b5:61:
                    07:cd:a0:11:bb:00:99:57:b7:e6:ca:70:ec:c3:1b:
                    3a:0f:a3:34:4f:ee:9e:96:1f:c0:66:ef:4a:57:0c:
                    8b:90:13:17:b8:16:69:9d:b7:a6:af:d1:f0:f2:64:
                    65:c4:67:b7:32:41:00:38:fa:c9:38:9f:ba:05:70:
                    4c:80:dc:66:f8:f7:bc:f2:9e:1e:18:a3:6b:99:42:
                    7e:cb:11:4f:18:13:0d:16:7c:2e:2e:76:fe:20:ff:
                    5c:e2:d8:6b:8f:c5:9d:c5:f2:e1:cd:ae:58:1d:be:
                    26:e9:80:7f:30:f6:d7:5e:aa:1f:01:16:3e:86:00:
                    e6:d9:62:96:e3:c0:fb:47:3f:ab:82:64:02:52:f5:
                    85:a1:ef:ba:a3:be:5d:1e:43:72:f4:2c:d0:17:ff:
                    c7:41:fb:a9:97:64:5e:94:7d:58:90:e3:8a:9e:2a:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:26:8E:9D:2B:E3:D0:C1:CA:B8:38:98:1E:B9:93:D0:B6:48:29:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/879a6e9a-d30e-3050-9480-e528056dbbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.249.4.0/22
                  156.55.78.0/24
                  156.55.112.0/24
                  156.55.132.0/22
                  156.55.137.0/24
                  156.55.142.0/23
                  156.55.173.0-156.55.175.255
                  156.55.200.0/23
                  206.71.16.0-206.71.22.255
                  206.71.28.0/23
                  206.71.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a9:8a:5a:ee:c5:f9:cc:f9:e8:1e:77:45:98:62:e4:67:e3:
         8e:25:3e:f1:7f:1b:08:04:2a:ba:44:f5:94:a4:1e:6a:1e:d2:
         94:30:16:bb:f0:cc:20:19:4b:03:85:7c:f0:bf:0e:a4:f4:4b:
         9a:91:e0:50:27:29:6b:2e:ee:c6:7e:2b:bb:85:29:b4:b0:8a:
         e2:a1:3a:98:14:58:da:6a:4a:58:c1:de:0d:58:75:7c:f6:32:
         07:47:9a:f1:d9:ab:40:d0:1e:31:d1:d4:f4:a3:d2:f9:a3:55:
         82:49:1e:5c:ef:57:53:ab:97:dc:66:81:24:08:d3:97:95:f1:
         65:8f:64:d7:0f:7c:db:28:67:bc:b5:bc:50:14:8b:2f:e2:7a:
         77:89:6b:61:49:4f:b5:5e:01:9f:56:c5:18:08:43:5a:cd:c6:
         41:2e:ab:df:3e:b0:5c:b5:0d:7a:f1:9e:8c:ff:05:b1:05:a1:
         ec:6e:26:10:de:9b:89:b4:59:31:e1:c5:d9:7f:5c:43:15:78:
         bc:09:89:26:d5:89:0f:63:fe:40:43:02:33:3c:21:78:b8:69:
         29:e7:51:8d:a6:5d:94:c3:1f:8e:20:6a:59:d2:46:ac:db:de:
         7f:26:95:9a:49:b5:79:e4:23:11:46:96:f4:f5:7e:5b:f9:ba:
         ad:b0:d3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:08:39 2026 by rpki-client