Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/bd7bb650-bbec-30f2-8958-07d0a4d923d3.roa
File:                     bd7bb650-bbec-30f2-8958-07d0a4d923d3.roa (raw, json)
Hash identifier:          NUqQ99f0gJRRE3zsGuVbYfM6Tt0NYwEXzEMZ+stJ/I0=
Subject key identifier:   3D:86:CC:58:B0:3C:D1:F8:F7:C3:8B:CC:35:A0:CA:07:73:FA:00:F1
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584E253F1BE42AFCAE84BEA91480
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/bd7bb650-bbec-30f2-8958-07d0a4d923d3.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     30383
IP address blocks:        198.208.8.0/24 maxlen: 24
                          198.208.56.0/23 maxlen: 23
                          198.208.66.0/24 maxlen: 24
                          198.208.72.0/24 maxlen: 24
                          198.208.74.0/24 maxlen: 24
                          198.208.75.0/24 maxlen: 24
                          198.208.80.0/23 maxlen: 23
                          198.208.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:1b:e4:2a:fc:ae:84:be:a9:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=ffe84e96-701e-4cd4-9541-08a87d668418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ad:09:59:e6:44:3d:69:64:30:20:66:4f:6c:
                    10:87:af:70:81:1e:e3:54:92:d5:71:c7:4a:48:a2:
                    16:50:bd:d3:7c:3a:dc:96:fc:f9:5f:94:85:64:10:
                    9a:aa:3f:6f:9a:b2:6b:1a:37:26:a3:36:6c:8e:de:
                    8f:a3:c4:48:54:e8:7e:7b:9d:f2:2a:9a:f1:85:d0:
                    6d:b7:11:22:6e:ef:b8:3f:dd:6a:a2:2e:ba:56:52:
                    17:42:aa:b0:93:47:b3:b8:ab:30:f8:03:2c:c6:69:
                    53:47:40:54:ea:8b:ac:69:3a:2b:c2:92:ab:52:89:
                    49:e0:26:34:8f:1a:25:b3:96:40:f3:0b:b5:d9:92:
                    06:ed:b7:6a:5b:a0:b6:ee:b0:0d:ca:e8:03:be:8a:
                    30:47:74:84:90:e0:57:a2:8c:dc:de:44:30:ff:46:
                    15:f1:b1:7c:c3:71:54:6a:e7:2a:d7:78:bf:f4:dc:
                    96:23:6a:55:c7:ed:2e:6e:e5:f4:11:ab:ce:95:9c:
                    f1:86:0a:22:77:f1:a1:ca:81:1b:49:06:be:3f:6b:
                    77:d1:d3:99:e0:76:d3:2f:50:6c:12:0c:3e:8c:70:
                    f2:a0:95:36:a4:62:65:53:70:f8:a2:a5:02:2d:84:
                    b8:9f:63:6e:7a:bb:6f:cf:9b:1d:64:12:43:fa:4a:
                    4b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:86:CC:58:B0:3C:D1:F8:F7:C3:8B:CC:35:A0:CA:07:73:FA:00:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/bd7bb650-bbec-30f2-8958-07d0a4d923d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.8.0/24
                  198.208.56.0/23
                  198.208.66.0/24
                  198.208.72.0/24
                  198.208.74.0/23
                  198.208.80.0/23
                  198.208.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:72:36:38:a6:d7:b2:fc:44:0b:45:83:77:b4:fd:1b:82:37:
         2a:13:62:99:51:26:02:d1:2d:82:6d:b3:27:5c:a7:03:1b:28:
         f2:54:e1:f9:81:f9:07:be:70:31:c2:db:47:85:c7:6b:d8:04:
         7a:53:8c:1f:75:37:44:61:14:3f:c7:f5:79:ec:05:44:29:68:
         56:ab:70:d2:61:72:4b:4c:5a:8c:0a:6a:89:5b:6f:0f:84:0a:
         9b:12:78:74:2a:da:40:b0:6e:69:54:e3:c5:9b:36:bc:32:8a:
         53:2d:3c:ed:a1:94:91:a4:e5:de:80:70:60:aa:85:ee:42:88:
         5f:d1:da:39:34:f9:56:ac:55:49:e0:11:5d:58:75:b4:6d:dd:
         30:3d:54:50:6d:c7:aa:78:b8:6c:47:69:30:63:f6:58:9b:5b:
         db:bf:71:a8:f6:42:d1:f8:00:59:5f:90:c6:49:e0:4b:f6:20:
         18:1a:b9:b5:7e:2e:2c:52:cc:51:27:84:7d:36:d6:07:ca:a9:
         fc:52:d5:3e:ca:4a:74:80:71:5d:8f:a8:4d:79:d2:31:9e:a3:
         e5:08:99:82:13:12:88:cb:80:69:34:fd:8f:a5:c2:b0:71:b3:
         4c:45:fd:d2:58:2a:fb:6d:a7:3f:4d:65:27:80:ef:4e:b9:07:
         bf:e8:a9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:53 2026 by rpki-client