Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/91a33a82-7a3f-380c-8092-58cb232957ba.roa
File:                     91a33a82-7a3f-380c-8092-58cb232957ba.roa (raw, json)
Hash identifier:          +JJg/prEnN+IvOErw2IyE3VPTxOmhr7R7M4r673DfQg=
Subject key identifier:   22:C4:82:A6:D7:E3:82:57:94:B8:F0:9D:1B:4B:98:8C:96:3A:A6:D8
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F4328584EE38C9A1A40D1F246CB58FE80
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/91a33a82-7a3f-380c-8092-58cb232957ba.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     6315
IP address blocks:        68.69.160.0/20 maxlen: 20
                          166.70.0.0/16 maxlen: 16
                          198.60.22.0/24 maxlen: 24
                          198.60.80.0/22 maxlen: 22
                          198.60.84.0/24 maxlen: 24
                          198.60.113.0/24 maxlen: 24
                          198.60.114.0/24 maxlen: 24
                          199.104.120.0/21 maxlen: 21
                          204.107.178.0/24 maxlen: 24
                          204.228.128.0/19 maxlen: 19
                          207.135.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9a:1a:40:d1:f2:46:cb:58:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=b3f6f71f-46c6-4965-97d6-ac6efee32f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:18:d9:97:02:c0:6c:51:97:38:13:18:1d:
                    c0:71:1f:c2:2f:0c:a7:82:5c:b8:97:d8:83:25:60:
                    69:d0:47:69:43:54:92:6a:9a:8f:5e:72:7f:92:19:
                    69:f7:64:aa:d2:86:8d:8c:35:3a:6a:df:20:d1:70:
                    0f:f9:dd:18:24:77:70:0c:d3:91:88:67:ae:04:8d:
                    ed:db:b9:0f:cc:93:50:2e:47:81:24:1e:90:97:f2:
                    61:59:5d:40:78:54:eb:82:df:17:02:44:15:07:9b:
                    fd:3b:93:87:dc:f8:97:54:b9:33:7a:cb:8b:2a:33:
                    a1:62:3c:6c:0f:c7:55:97:cd:ce:37:d2:a7:3c:e9:
                    3c:22:3e:a6:f4:9e:49:00:0f:f9:c9:05:80:21:1d:
                    41:b8:0c:f5:c0:50:2d:ff:27:48:3d:99:ac:72:0c:
                    a7:08:42:ec:11:eb:db:54:9e:c3:d4:e9:83:bb:81:
                    14:02:d7:09:be:ff:8b:0b:69:84:43:58:5d:6f:cf:
                    c9:d2:f8:51:2f:ed:04:44:61:b2:f8:17:3f:bd:ad:
                    fe:04:b8:7c:73:a6:aa:83:5b:14:c0:d6:19:6c:69:
                    98:52:96:75:29:5c:62:02:df:98:f4:eb:43:75:04:
                    be:30:6b:20:6f:7b:c4:d6:e1:eb:37:22:37:19:87:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C4:82:A6:D7:E3:82:57:94:B8:F0:9D:1B:4B:98:8C:96:3A:A6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/91a33a82-7a3f-380c-8092-58cb232957ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.160.0/20
                  166.70.0.0/16
                  198.60.22.0/24
                  198.60.80.0-198.60.84.255
                  198.60.113.0-198.60.114.255
                  199.104.120.0/21
                  204.107.178.0/24
                  204.228.128.0/19
                  207.135.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:ee:60:32:8d:17:ae:d6:e8:7e:b7:00:18:9f:03:db:0a:
         40:34:7a:cd:68:c9:a7:7f:69:0f:64:19:62:ff:4f:9c:af:28:
         21:c6:1a:3d:bd:e7:09:5a:2e:ca:03:99:58:16:f5:95:bc:69:
         c8:5d:b4:32:ea:68:fe:ec:6d:53:b5:33:c4:46:29:0f:a6:75:
         5e:93:0b:c6:a1:33:04:4a:67:f8:8e:d5:d9:d1:f3:35:1b:9e:
         26:93:8b:ad:97:9c:75:1b:c4:97:4d:f6:c3:ce:c7:78:f8:0a:
         ca:df:03:3e:7e:0f:12:89:98:20:85:d4:7a:ac:8f:ee:2a:3e:
         72:4d:3e:8b:5c:8b:0a:ef:70:41:64:02:4c:bc:93:21:f1:66:
         93:ff:e1:93:57:61:cb:17:ae:aa:f0:f4:1c:bd:6e:72:78:f3:
         b5:ec:3d:a1:95:31:c0:3a:e6:26:85:d1:86:ea:a2:e6:c8:ea:
         ce:16:36:d4:9e:23:66:ad:d1:59:c8:09:8b:48:36:40:85:26:
         14:e2:86:1e:72:61:26:00:30:59:6f:a5:29:2b:c9:aa:23:49:
         46:38:27:4c:e2:a8:06:d7:13:45:e5:b8:f9:d7:ca:93:9f:44:
         25:1c:f9:4a:05:c0:c2:92:ea:a1:2c:e3:be:09:89:bc:d5:42:
         ff:da:80:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:55:11 2026 by rpki-client