Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/8753b34a-45f9-33d2-8b55-363c26c79f7b.roa
File:                     8753b34a-45f9-33d2-8b55-363c26c79f7b.roa (raw, json)
Hash identifier:          Kv6vsaHM9HNXxqdb6F91tV0i2bnfyG/umf+2s5otirA=
Subject key identifier:   9D:1F:CA:2C:ED:68:58:B6:0C:6B:F2:22:81:37:6F:CC:D9:BA:2A:3D
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D037D0DE65A0DC2307ACC2F80
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/8753b34a-45f9-33d2-8b55-363c26c79f7b.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     10794
IP address blocks:        171.159.48.0/20 maxlen: 20
                          171.159.48.0/24 maxlen: 24
                          171.159.49.0/24 maxlen: 24
                          171.159.50.0/24 maxlen: 24
                          171.159.51.0/24 maxlen: 24
                          171.159.52.0/24 maxlen: 24
                          171.159.53.0/24 maxlen: 24
                          171.159.54.0/24 maxlen: 24
                          171.159.55.0/24 maxlen: 24
                          171.159.56.0/24 maxlen: 24
                          171.159.57.0/24 maxlen: 24
                          171.159.58.0/24 maxlen: 24
                          171.159.59.0/24 maxlen: 24
                          171.159.60.0/24 maxlen: 24
                          171.159.61.0/24 maxlen: 24
                          171.159.62.0/24 maxlen: 24
                          171.159.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:0d:e6:5a:0d:c2:30:7a:cc:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=10973cb8-b8dd-4dd0-b1d0-c6f78952c04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:08:e6:50:14:37:76:bc:00:89:4a:3e:51:ec:
                    61:d5:1f:46:1b:98:16:1c:8e:5b:4b:7c:e1:29:d6:
                    a8:6b:2c:57:ec:8a:62:43:dc:c5:1a:63:14:0b:11:
                    c0:12:fa:84:94:73:c5:ce:a1:fd:82:f2:27:8b:e1:
                    54:e4:e5:35:60:95:a1:9e:fb:09:bf:53:2c:97:56:
                    82:24:69:da:ce:32:19:93:37:d8:30:12:ab:74:2a:
                    53:4c:05:e6:c6:66:ee:ab:e6:fe:6c:7d:e1:e2:e6:
                    4c:51:9d:4b:7f:d6:85:ce:b2:b5:64:64:af:62:0d:
                    a5:8c:a3:48:b6:2f:e5:8a:95:f3:e4:60:e8:29:66:
                    02:1d:6f:0d:f3:ee:7d:84:7e:6c:ae:da:48:0b:89:
                    9d:36:88:97:b8:63:aa:f1:37:9a:8f:63:0e:0b:18:
                    04:c4:bc:20:02:b6:4e:c9:02:44:8b:43:fa:64:64:
                    84:ca:f3:7b:dd:9d:3a:1e:3e:41:5c:5f:f3:f5:72:
                    0d:e9:98:69:25:4e:14:b8:9d:0f:4c:92:c0:67:1a:
                    e6:4c:fa:fa:c2:d1:2f:e3:7c:81:07:b7:eb:f1:d1:
                    e9:fc:4d:e7:ad:0b:c3:03:50:37:75:df:32:7c:05:
                    83:da:b4:02:92:48:cf:b6:f8:dd:06:ee:fd:49:35:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1F:CA:2C:ED:68:58:B6:0C:6B:F2:22:81:37:6F:CC:D9:BA:2A:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/8753b34a-45f9-33d2-8b55-363c26c79f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.159.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f4:fc:14:bc:12:07:d3:42:9c:0e:18:6a:b5:25:39:20:6d:
         01:56:3c:52:49:b6:c9:ee:36:34:0f:69:38:95:db:e1:ef:94:
         6e:73:70:07:d9:2c:22:24:7a:e5:43:55:9f:55:f5:4e:87:1f:
         c4:45:03:65:14:5b:65:3b:df:30:a4:da:67:74:8a:52:09:9a:
         04:df:a4:b4:c5:b0:e4:5f:1d:a9:37:0e:52:61:5e:b0:fc:ef:
         05:d1:c8:9f:3c:c7:41:2d:25:f2:37:93:6d:b0:d7:1b:53:10:
         be:84:29:eb:a8:8c:2a:b5:c1:e0:44:72:59:fe:78:82:15:8a:
         1c:a9:6d:ce:bf:f9:e0:11:5c:a0:a6:30:99:e1:8e:78:5d:84:
         ad:43:8b:fd:aa:ab:5c:a5:ff:96:88:cf:81:fb:77:64:e5:d0:
         c7:06:3f:99:71:8a:16:fe:78:89:68:54:61:14:32:a9:c2:2d:
         42:37:3a:93:bf:3e:05:85:43:f4:90:50:f8:d0:7c:2d:b2:82:
         88:9d:d7:56:fa:08:2e:46:45:c4:67:45:b9:46:dc:fb:3f:59:
         4e:07:0d:a5:b7:b6:1d:6b:34:09:50:db:d6:4b:cf:02:13:34:
         d5:bc:6c:61:c7:d1:f1:88:2b:85:0a:d4:78:8e:44:8c:16:35:
         6c:e3:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:53 2026 by rpki-client