Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa
File:                     87da4f25-f5c5-376e-a232-31fdb9491bd9.roa (raw, json)
Hash identifier:          HoYJnln9zrWo6ZrAf+sIsxiPDYSf4HbUSZeggtfYbMY=
Subject key identifier:   C8:EF:58:07:6E:20:82:B5:C2:B2:5A:AD:AB:A5:3A:07:DF:B2:6E:A2
Certificate issuer:       /CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
Certificate serial:       010D0C9F4328584D8695520A4B0DFD873A3F0C80
Authority key identifier: A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     15317
IP address blocks:        162.221.224.0/22 maxlen: 24
                          162.252.20.0/22 maxlen: 24
                          173.214.240.0/20 maxlen: 24
                          192.133.136.0/21 maxlen: 24
                          199.182.160.0/21 maxlen: 24
                          216.172.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:52:0a:4b:0d:fd:87:3a:3f:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=705831f9-b9b1-449f-ac62-b7795f3ac227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:29:11:92:5e:2f:59:9f:8a:be:8e:58:5d:
                    7e:c2:f4:34:cc:e3:ee:08:e3:72:06:4a:bf:42:78:
                    fd:c9:89:5d:20:5a:ff:32:91:9d:06:bc:a2:ab:d2:
                    31:5d:ea:65:ac:08:cf:cb:68:c0:72:84:ec:72:b5:
                    d6:09:90:14:0d:70:d6:f6:e6:8f:fd:36:13:0c:bf:
                    e3:82:01:46:1e:db:8e:95:d4:00:59:ee:5e:ce:f2:
                    12:c7:27:2b:b2:33:13:87:b6:fd:9c:05:a2:37:9c:
                    0c:0c:5c:e2:bc:b4:57:19:66:8f:d9:45:25:4e:46:
                    20:21:6c:a4:67:e8:be:74:c6:a4:13:60:d5:0d:12:
                    f6:1a:22:95:fa:23:79:ce:ae:c4:79:68:62:a9:90:
                    74:01:74:c8:d1:d3:07:bd:38:9d:d8:41:14:c6:4a:
                    48:c3:84:c8:1f:87:42:dd:1e:44:f5:16:48:9a:6d:
                    9c:38:de:f4:13:73:d1:ca:5c:c1:cd:12:88:81:09:
                    c0:0e:5f:c1:3a:ef:4a:4e:15:f4:51:0b:71:a2:61:
                    b3:81:4e:d5:20:29:35:fd:4d:89:29:ea:ec:35:62:
                    b8:b9:b5:60:8f:7e:80:13:58:cc:30:a4:63:83:ae:
                    71:bc:8f:bd:29:91:df:54:a9:6f:26:c2:cb:9a:44:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EF:58:07:6E:20:82:B5:C2:B2:5A:AD:AB:A5:3A:07:DF:B2:6E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl

            X509v3 Authority Key Identifier:
                keyid:A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.224.0/22
                  162.252.20.0/22
                  173.214.240.0/20
                  192.133.136.0/21
                  199.182.160.0/21
                  216.172.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:6c:29:92:17:1c:38:56:60:94:96:12:5c:2a:ea:e5:ff:
         e2:55:e6:06:2e:fc:c2:47:55:bd:97:79:d7:a4:eb:f5:98:b6:
         ad:d3:f9:8c:8c:16:91:12:05:21:74:e9:a2:88:f0:c3:22:b5:
         99:07:a2:71:57:3c:a6:94:b8:4e:74:49:b7:27:70:10:67:12:
         aa:fd:62:83:43:b0:aa:0a:95:73:09:cd:86:e9:40:7b:e0:65:
         7d:f8:82:16:45:bb:bd:5c:4a:3c:5e:b7:3c:64:97:7c:36:2d:
         5a:bf:26:13:05:2b:1c:9a:89:a6:82:3c:2a:b5:72:14:55:ac:
         28:99:58:66:a0:4e:77:f9:8c:75:6f:d7:d1:58:28:93:ae:e8:
         4c:de:5c:ea:20:ff:96:26:87:0f:23:d0:2e:00:af:f8:34:9e:
         82:14:fa:f0:90:b3:3f:7a:a5:58:bf:d1:a3:9c:76:f2:54:54:
         89:04:8b:ea:8e:29:3f:aa:81:e6:4c:2b:4d:0d:ea:b0:5e:83:
         bb:9a:66:d9:be:a3:3f:4a:01:c4:ab:53:71:31:3f:1b:cc:4c:
         47:4c:a2:1c:22:40:52:be:4a:88:6e:ef:0a:be:2c:f3:ca:d8:
         06:aa:5e:eb:eb:2d:c0:d3:a2:b2:d3:55:da:29:a4:df:c3:cd:
         22:35:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:18:39 2026 by rpki-client