Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/db63d9bd-ff86-39a4-91e2-1b33c2e91b80.roa
File:                     db63d9bd-ff86-39a4-91e2-1b33c2e91b80.roa (raw, json)
Hash identifier:          0s9sGDAzNXjywnGZfARbw2ov1vqbv7x076MOLC+80Bw=
Subject key identifier:   9D:C6:EA:F1:42:10:A7:A4:C1:08:02:4A:5B:69:B2:6D:38:E5:40:77
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D773A6E514DA9A42850459600
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/db63d9bd-ff86-39a4-91e2-1b33c2e91b80.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     19886
IP address blocks:        171.162.80.0/22 maxlen: 22
                          171.162.80.0/24 maxlen: 24
                          171.162.81.0/24 maxlen: 24
                          171.162.82.0/24 maxlen: 24
                          171.162.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:6e:51:4d:a9:a4:28:50:45:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=c420fbe9-71e3-4b82-9b94-260baa4fc8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6a:43:82:93:11:e6:35:79:37:73:93:b0:54:
                    6a:7c:55:ba:fa:cc:f1:82:8f:09:12:10:a4:db:4b:
                    6e:28:61:4b:12:41:4d:28:f2:89:7b:02:5e:84:e4:
                    ee:0f:07:2d:db:c5:78:76:e7:73:ee:4a:65:fd:88:
                    d0:76:79:12:b6:73:3e:3f:d0:a8:f8:eb:a5:ca:b2:
                    ea:f0:57:85:5e:2a:27:04:f8:a5:7b:74:5e:68:e1:
                    de:c1:33:e7:5d:ec:2a:a2:b0:fa:a0:76:92:28:74:
                    a2:be:30:81:b0:c1:20:39:c8:eb:78:6a:83:d8:9f:
                    22:75:1a:da:a4:8e:60:4c:d6:0c:80:46:30:d5:d2:
                    b6:4b:72:f1:b7:61:56:4b:6c:35:7f:05:da:fa:13:
                    41:a3:1b:b9:90:a7:10:42:72:78:2b:6b:f7:a3:b3:
                    eb:78:8f:66:05:bf:a6:18:dd:95:72:cb:44:d7:d0:
                    01:45:9f:7e:19:ed:83:fd:72:97:09:06:18:75:e1:
                    80:4f:09:52:f8:ff:06:95:40:89:8c:cc:e8:c2:c7:
                    7a:35:77:d0:54:f1:6a:b2:f1:68:87:d5:58:5e:af:
                    b4:20:48:62:67:81:c5:2c:a3:33:50:e1:d9:c5:2d:
                    ea:dc:04:fe:fd:6f:c8:30:67:9e:a1:a0:b4:4b:21:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C6:EA:F1:42:10:A7:A4:C1:08:02:4A:5B:69:B2:6D:38:E5:40:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/db63d9bd-ff86-39a4-91e2-1b33c2e91b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:db:55:89:f2:b1:05:f2:dc:b7:c9:96:61:b5:b9:c2:e6:38:
         93:59:67:6f:cc:e6:38:4d:59:84:3e:6f:c4:1b:22:ae:49:81:
         65:b3:53:aa:8c:e7:af:e5:67:45:23:7f:b4:9e:a3:dc:f2:59:
         80:1c:6a:dd:b5:60:3d:54:e8:27:b7:a0:73:26:9f:39:4f:27:
         04:15:ae:e0:6b:9a:87:0b:3d:88:c4:34:49:92:44:e8:d1:ef:
         0c:d4:31:14:c7:b3:63:0b:cc:1d:0e:a4:66:49:f7:e7:0e:44:
         87:e9:ca:52:f5:29:70:3a:d1:ef:f1:59:40:cb:52:5f:2f:84:
         b6:36:0a:7a:f9:62:25:e3:46:44:20:d8:79:dd:3c:b5:72:69:
         2e:7e:61:37:4e:5b:f1:4f:58:d3:fb:14:42:3d:74:d0:da:15:
         b7:b6:f2:51:96:c8:e7:94:c9:50:f5:b5:ba:da:d6:96:d7:88:
         11:0f:7d:14:88:e7:cd:8a:41:ab:32:33:74:da:59:e8:3d:79:
         7e:ae:3b:3c:0e:e8:a1:5d:5f:4e:e2:81:47:f4:04:c9:56:ee:
         c2:a2:6f:8a:52:65:8b:36:df:7a:61:27:6d:2e:db:b8:81:9b:
         bf:dd:38:0f:0d:4d:71:34:fa:0b:70:5b:c7:a1:55:51:82:15:
         54:99:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:28 2026 by rpki-client