Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/eb06a04a-5f7d-3942-a500-581c3db11239.roa
File:                     eb06a04a-5f7d-3942-a500-581c3db11239.roa (raw, json)
Hash identifier:          abKhMlwV4Up5+ys5efg9KuVh0D9ggYHYm9Lb5emaNVk=
Subject key identifier:   92:ED:FA:86:91:B8:F2:7D:D8:57:9D:9D:52:5D:67:32:4B:C9:B4:25
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584EA682DE8E8F0ACD1F96D92F2D
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/eb06a04a-5f7d-3942-a500-581c3db11239.roa
Signing time:             Tue 28 Jul 2026 16:16:23 +0000
ROA not before:           Tue 28 Jul 2026 16:16:23 +0000
ROA not after:            Thu 22 Oct 2026 14:30:00 +0000
asID:                     402265
IP address blocks:        45.43.192.0/24 maxlen: 24
                          160.202.64.0/24 maxlen: 24
                          160.202.74.0/24 maxlen: 24
                          160.202.80.0/24 maxlen: 24
                          160.202.82.0/24 maxlen: 24
                          160.202.84.0/24 maxlen: 24
                          160.202.87.0/24 maxlen: 24
                          160.202.88.0/24 maxlen: 24
                          160.202.90.0/24 maxlen: 24
                          160.202.91.0/24 maxlen: 24
                          160.202.92.0/24 maxlen: 24
                          160.202.98.0/24 maxlen: 24
                          160.202.102.0/24 maxlen: 24
                          160.202.104.0/24 maxlen: 24
                          160.202.107.0/24 maxlen: 24
                          172.82.133.0/24 maxlen: 24
                          172.82.148.0/24 maxlen: 24
                          172.82.158.0/24 maxlen: 24
                          172.82.161.0/24 maxlen: 24
                          172.82.170.0/24 maxlen: 24
                          172.82.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:82:de:8e:8f:0a:cd:1f:96:d9:2f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Jul 28 16:16:23 2026 GMT
            Not After : Oct 22 14:30:00 2026 GMT
        Subject: CN=ade7996f-50e5-4a82-ab78-96dd52c4e212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:97:0d:ad:99:4c:ca:54:0f:6c:33:e6:67:
                    be:df:56:96:d2:57:c2:32:72:4a:2a:20:30:32:15:
                    55:02:64:94:c0:68:ed:4c:6b:c2:35:b6:4e:10:c5:
                    3a:99:26:78:e5:95:7e:a0:da:ee:0a:e4:10:34:b4:
                    1e:f9:fa:b2:59:f4:51:fb:db:41:62:45:63:3f:b6:
                    24:f7:9d:a2:4a:ec:59:48:27:89:0e:d0:4c:76:88:
                    4b:fd:64:cc:af:cb:9d:80:ad:3e:9e:75:10:7f:19:
                    a0:66:84:d8:09:b1:fa:3e:14:eb:00:74:c8:20:38:
                    71:1e:99:df:5c:71:5f:70:c3:7b:84:3a:98:83:e5:
                    30:33:9d:ae:92:87:2a:8c:cf:20:09:17:a2:77:61:
                    1c:63:9f:b4:58:a8:85:65:20:26:7d:e2:01:7d:12:
                    fe:77:4d:7f:cd:11:f7:ef:9d:ca:d7:5e:f2:1c:59:
                    ec:54:39:60:e6:4a:91:08:ef:67:de:92:ea:f0:4b:
                    4e:b3:78:25:9c:a7:de:6f:63:3e:41:02:b6:2b:50:
                    7e:8a:94:f8:95:45:eb:50:b7:76:b9:2b:f3:48:d1:
                    55:2c:4f:70:e3:93:1a:db:28:60:ed:c1:95:a8:df:
                    dd:bc:f1:76:2e:70:d5:a2:c4:5d:5b:90:c2:43:f8:
                    b6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:ED:FA:86:91:B8:F2:7D:D8:57:9D:9D:52:5D:67:32:4B:C9:B4:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/eb06a04a-5f7d-3942-a500-581c3db11239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.192.0/24
                  160.202.64.0/24
                  160.202.74.0/24
                  160.202.80.0/24
                  160.202.82.0/24
                  160.202.84.0/24
                  160.202.87.0-160.202.88.255
                  160.202.90.0-160.202.92.255
                  160.202.98.0/24
                  160.202.102.0/24
                  160.202.104.0/24
                  160.202.107.0/24
                  172.82.133.0/24
                  172.82.148.0/24
                  172.82.158.0/24
                  172.82.161.0/24
                  172.82.170.0/24
                  172.82.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1a:0a:80:e5:8a:84:6e:f4:f5:ad:64:9a:65:68:51:41:d2:
         50:bf:a1:81:05:46:aa:8b:b1:a4:ce:0f:4a:fa:96:eb:38:a2:
         1e:68:bb:26:92:e0:34:ce:46:7e:dd:73:4a:84:31:8c:cd:a0:
         05:05:f7:4e:29:b4:d7:f1:2c:06:3f:7b:f6:4f:43:0a:c8:59:
         93:bd:98:2c:bb:3c:fc:95:85:24:c8:8e:15:0e:14:6d:a5:66:
         b4:1f:00:1b:e6:b1:cf:ab:9d:09:79:c4:2e:17:0f:69:0c:8e:
         73:8f:97:68:b6:af:a6:25:8a:c5:41:cb:69:93:9d:93:87:d2:
         10:33:f1:3f:f8:b1:19:eb:1d:d6:10:70:ff:58:e4:d2:ac:8a:
         b3:ef:be:c4:55:40:d9:51:fd:48:00:c3:d3:56:9b:77:c5:63:
         88:ba:d9:b6:c7:54:ba:f2:e5:81:ab:8e:a4:b2:13:d6:79:03:
         97:15:d8:31:19:aa:ea:00:96:62:5c:ec:c4:29:bc:88:5f:c7:
         00:c0:93:35:ef:bd:be:1b:e6:82:94:9b:6e:5b:35:05:7f:1a:
         cb:04:6d:1b:74:a4:73:91:56:d0:10:f4:a7:62:d2:c9:6e:75:
         d4:eb:e3:e1:3c:85:a4:d9:45:65:70:da:83:3a:68:b6:23:4d:
         55:83:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:21 2026 by rpki-client