Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/eb971c07-011b-37f6-9cf8-8cb4b0d20b8e.roa
File:                     eb971c07-011b-37f6-9cf8-8cb4b0d20b8e.roa (raw, json)
Hash identifier:          OaDphFx0ABM0vgDRntgJfpYBYBmbAwYZcG3nupav8nQ=
Subject key identifier:   39:99:4E:FA:DE:69:83:44:54:71:E0:5A:44:F2:7D:E1:48:0D:13:B4
Certificate issuer:       /CN=a29a8287-cde6-44dc-b043-729b2dc9ed7f
Certificate serial:       010D0C9F4328584D7E352B17D03B5FE0D26A5F00
Authority key identifier: 6A:4B:5C:ED:8E:BA:4F:ED:AF:ED:63:6C:68:9C:E8:BE:37:BE:08:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/eb971c07-011b-37f6-9cf8-8cb4b0d20b8e.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     138995
IP address blocks:        108.187.0.0/24 maxlen: 24
                          108.187.1.0/24 maxlen: 24
                          108.187.2.0/24 maxlen: 24
                          108.187.4.0/24 maxlen: 24
                          108.187.5.0/24 maxlen: 24
                          108.187.6.0/24 maxlen: 24
                          108.187.7.0/24 maxlen: 24
                          108.187.8.0/24 maxlen: 24
                          108.187.9.0/24 maxlen: 24
                          108.187.10.0/24 maxlen: 24
                          108.187.11.0/24 maxlen: 24
                          108.187.12.0/24 maxlen: 24
                          108.187.13.0/24 maxlen: 24
                          108.187.14.0/24 maxlen: 24
                          108.187.15.0/24 maxlen: 24
                          108.187.32.0/24 maxlen: 24
                          108.187.33.0/24 maxlen: 24
                          108.187.34.0/24 maxlen: 24
                          108.187.35.0/24 maxlen: 24
                          108.187.36.0/24 maxlen: 24
                          108.187.37.0/24 maxlen: 24
                          108.187.40.0/24 maxlen: 24
                          108.187.41.0/24 maxlen: 24
                          108.187.42.0/24 maxlen: 24
                          108.187.43.0/24 maxlen: 24
                          108.187.44.0/24 maxlen: 24
                          108.187.45.0/24 maxlen: 24
                          192.163.160.0/24 maxlen: 24
                          192.163.161.0/24 maxlen: 24
                          192.163.162.0/24 maxlen: 24
                          192.163.166.0/24 maxlen: 24
                          192.163.167.0/24 maxlen: 24
                          192.163.168.0/24 maxlen: 24
                          192.163.169.0/24 maxlen: 24
                          192.163.170.0/24 maxlen: 24
                          192.163.171.0/24 maxlen: 24
                          192.163.172.0/24 maxlen: 24
                          192.163.173.0/24 maxlen: 24
                          192.163.174.0/24 maxlen: 24
                          192.163.175.0/24 maxlen: 24
                          192.229.112.0/24 maxlen: 24
                          192.229.113.0/24 maxlen: 24
                          192.229.114.0/24 maxlen: 24
                          192.229.115.0/24 maxlen: 24
                          192.229.116.0/24 maxlen: 24
                          192.229.117.0/24 maxlen: 24
                          192.229.118.0/24 maxlen: 24
                          192.229.119.0/24 maxlen: 24
                          192.229.120.0/24 maxlen: 24
                          192.229.121.0/24 maxlen: 24
                          192.229.122.0/24 maxlen: 24
                          192.229.123.0/24 maxlen: 24
                          192.229.124.0/24 maxlen: 24
                          192.238.160.0/24 maxlen: 24
                          192.238.161.0/24 maxlen: 24
                          192.238.162.0/24 maxlen: 24
                          192.238.163.0/24 maxlen: 24
                          192.238.164.0/24 maxlen: 24
                          192.238.165.0/24 maxlen: 24
                          192.238.166.0/24 maxlen: 24
                          192.238.167.0/24 maxlen: 24
                          192.238.168.0/24 maxlen: 24
                          192.238.169.0/24 maxlen: 24
                          192.238.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/a29a8287-cde6-44dc-b043-729b2dc9ed7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/a29a8287-cde6-44dc-b043-729b2dc9ed7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:2b:17:d0:3b:5f:e0:d2:6a:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29a8287-cde6-44dc-b043-729b2dc9ed7f
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=8c903e90-257b-4d01-b2dc-3e23ba8a46fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:42:28:22:0f:08:af:01:ad:92:02:94:6f:81:
                    93:db:bc:09:8f:a9:db:92:5f:e9:c7:ad:d7:2c:f3:
                    af:5b:20:1a:76:5c:1e:51:89:04:99:58:d3:0b:d2:
                    db:0d:5f:5a:3c:99:47:9b:14:4c:b0:b4:64:d0:de:
                    bc:9a:f9:d6:4d:1d:8f:58:40:43:50:8f:9d:eb:38:
                    72:18:29:1f:fb:56:8a:57:a7:af:cf:48:a0:7a:59:
                    ca:d6:9a:6b:46:e7:50:20:b1:f1:cd:41:14:5a:77:
                    59:65:d9:fe:06:40:0b:d9:48:e2:77:13:d9:be:88:
                    4b:b6:0a:e6:fe:97:9e:29:e9:82:82:47:9a:08:f1:
                    ce:99:8d:aa:19:e7:39:4a:a7:01:3f:c8:a9:8d:44:
                    24:00:8b:4b:a1:07:9a:9b:93:81:bb:c4:7e:34:a1:
                    d4:11:b5:8d:aa:ae:45:dd:65:b6:09:4d:61:05:45:
                    8d:5c:7e:93:53:da:91:d1:c6:d2:21:ee:3d:ab:6a:
                    8e:db:93:07:13:59:35:1e:90:b0:f5:92:b9:7e:9a:
                    1d:70:e0:fe:ff:89:01:fa:a4:7c:39:34:90:5b:19:
                    7d:bb:98:f2:0e:94:85:83:97:64:74:2f:5b:5a:81:
                    c3:63:42:b5:f0:c0:ca:fc:3b:e7:f4:a4:04:3d:20:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:99:4E:FA:DE:69:83:44:54:71:E0:5A:44:F2:7D:E1:48:0D:13:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/eb971c07-011b-37f6-9cf8-8cb4b0d20b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/a29a8287-cde6-44dc-b043-729b2dc9ed7f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:4B:5C:ED:8E:BA:4F:ED:AF:ED:63:6C:68:9C:E8:BE:37:BE:08:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.187.0.0-108.187.2.255
                  108.187.4.0-108.187.15.255
                  108.187.32.0-108.187.37.255
                  108.187.40.0-108.187.45.255
                  192.163.160.0-192.163.162.255
                  192.163.166.0-192.163.175.255
                  192.229.112.0-192.229.124.255
                  192.238.160.0-192.238.170.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c7:a4:59:0e:4b:30:91:0a:98:66:a2:f7:69:1a:9c:86:e5:
         94:da:41:cf:78:3e:a9:57:f9:6a:3e:1d:de:27:e5:ce:eb:d2:
         69:e5:b6:d0:3b:18:1a:38:d7:4d:8f:c2:e0:dd:14:8c:cc:86:
         f0:34:8a:66:e0:dc:6f:37:c4:ba:84:28:37:41:68:b3:14:4e:
         13:ac:d8:dd:3f:bb:86:48:39:53:ef:02:b0:c7:df:f3:2e:45:
         22:80:95:3a:d4:25:53:89:a7:86:e9:a8:ed:ca:04:be:76:00:
         72:d4:d8:99:55:6b:7b:31:c3:4a:48:ef:06:85:66:af:57:e8:
         bb:0d:0c:de:41:ec:00:65:c2:38:fc:a6:aa:77:08:dd:27:c9:
         e7:e7:d2:da:a6:f1:f5:3f:ba:ff:6d:35:51:93:58:c6:e8:4a:
         92:2f:d7:e9:10:86:31:64:f1:19:25:7e:fb:4d:16:11:7c:8f:
         c8:09:b8:29:71:aa:0c:a0:c3:f3:2f:d7:b9:9c:b7:52:fe:0a:
         12:59:6a:46:3c:22:40:30:4c:67:ae:b1:8c:2a:f7:be:63:9e:
         91:df:15:94:bf:c4:a0:37:fd:15:19:c0:8e:04:bc:c1:cf:64:
         73:ae:d7:e7:f9:37:c9:ae:03:5d:89:3a:12:64:ab:76:67:a1:
         28:d6:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:02 2026 by rpki-client