Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/9e908481-e959-31bf-9196-914b2d9a342c.roa
File:                     9e908481-e959-31bf-9196-914b2d9a342c.roa (raw, json)
Hash identifier:          5YDeF9pKds8JPWYD7SQJfOVIVwtZkQjijPpDF/uF1ZI=
Subject key identifier:   43:A7:24:5E:5A:D3:DC:4B:5E:9A:79:1E:F4:2D:B0:52:62:CC:52:29
Certificate issuer:       /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial:       010D0C9F4328584E09CB428C3A6DBBDF74448300
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/9e908481-e959-31bf-9196-914b2d9a342c.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     11911
IP address blocks:        160.254.126.0/24 maxlen: 24
                          167.113.164.0/23 maxlen: 23
                          167.113.166.0/23 maxlen: 23
                          167.113.176.0/23 maxlen: 23
                          167.113.178.0/23 maxlen: 23
                          167.113.196.0/23 maxlen: 23
                          167.113.198.0/23 maxlen: 23
                          167.222.253.0/24 maxlen: 24
                          170.61.40.0/24 maxlen: 24
                          170.61.41.0/24 maxlen: 24
                          170.61.42.0/24 maxlen: 24
                          170.61.43.0/24 maxlen: 24
                          170.61.71.0/24 maxlen: 24
                          170.61.72.0/23 maxlen: 23
                          170.61.74.0/24 maxlen: 24
                          170.61.76.0/23 maxlen: 23
                          170.61.132.0/23 maxlen: 23
                          170.61.139.0/24 maxlen: 24
                          170.61.160.0/23 maxlen: 23
                          170.61.170.0/24 maxlen: 24
                          170.61.171.0/24 maxlen: 24
                          170.61.173.0/24 maxlen: 24
                          170.61.174.0/24 maxlen: 24
                          170.61.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:42:8c:3a:6d:bb:df:74:44:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=9518b701-a3d2-4197-9436-27bf63e12584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d2:9b:61:21:df:01:58:c4:9a:50:bb:02:81:
                    8a:38:ec:51:26:b7:0f:28:95:29:d5:e5:63:47:a9:
                    f2:2b:b5:b2:4d:bd:1e:9b:05:27:f4:a0:96:2a:7d:
                    b4:3a:3a:0a:27:7f:86:de:a3:3f:25:28:ba:70:bc:
                    fb:09:5a:5e:ef:81:7d:17:5d:77:81:c0:50:5f:bf:
                    10:05:cd:80:27:0b:21:85:e9:33:21:4c:8c:5d:aa:
                    6f:29:ac:90:b1:3f:67:83:03:8f:b0:7a:cd:6b:f5:
                    28:f3:c5:95:b5:50:e0:e0:88:85:37:18:61:e2:70:
                    a9:33:19:5b:ee:ad:99:c7:92:94:6c:6f:45:49:d3:
                    6c:9c:f3:f8:55:60:bb:76:f1:30:d4:1b:51:9c:6a:
                    ba:67:78:38:3b:ee:0e:60:58:a3:d3:fa:0a:b4:62:
                    6f:45:09:1d:25:c8:0a:8b:9b:1b:c6:9d:f7:99:17:
                    8d:f4:34:06:6c:42:00:18:51:cd:10:98:a5:e0:62:
                    ee:28:1d:dd:3e:40:98:ba:a9:33:15:18:42:ae:ce:
                    bb:b0:0b:47:52:2a:83:94:13:d4:b8:81:e6:76:82:
                    09:e8:d9:73:e0:c4:58:cd:1a:fa:38:53:6d:0f:19:
                    e1:57:24:cb:17:be:3a:05:d5:6b:f0:d0:26:3a:5e:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A7:24:5E:5A:D3:DC:4B:5E:9A:79:1E:F4:2D:B0:52:62:CC:52:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/9e908481-e959-31bf-9196-914b2d9a342c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl

            X509v3 Authority Key Identifier:
                keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.254.126.0/24
                  167.113.164.0/22
                  167.113.176.0/22
                  167.113.196.0/22
                  167.222.253.0/24
                  170.61.40.0/22
                  170.61.71.0-170.61.74.255
                  170.61.76.0/23
                  170.61.132.0/23
                  170.61.139.0/24
                  170.61.160.0/23
                  170.61.170.0/23
                  170.61.173.0-170.61.174.255
                  170.61.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4f:8b:f4:e0:4f:5c:33:99:fa:26:7f:be:1f:58:db:9b:e6:
         57:31:41:ef:a5:79:5e:91:85:cc:e6:de:8c:0c:13:23:01:ba:
         f0:9d:a6:ec:cb:18:45:5a:f1:94:e7:68:ba:b6:41:4a:95:6f:
         ad:cf:61:7a:cd:51:1f:cd:9d:6d:61:6c:6c:b8:3b:dc:67:19:
         87:2a:5d:f9:12:50:64:b7:8e:d3:00:a6:f5:3d:0d:6c:b0:55:
         36:4a:19:b7:27:d7:b0:f7:a1:1b:2a:82:fe:d4:62:fd:ee:4e:
         ab:13:48:6d:04:6e:7c:93:4e:10:4b:2b:80:79:7d:c0:2b:e2:
         9c:b9:38:88:3d:65:6f:75:fb:96:f5:11:86:a6:ce:47:93:85:
         43:12:82:9d:6a:fb:16:7a:85:60:0e:b7:6b:07:cc:9c:30:b8:
         57:6b:17:2a:53:58:8a:d5:d1:5e:de:8a:7a:df:af:3e:68:5d:
         ab:15:e9:8c:01:19:6e:c9:ce:ff:d9:52:cf:f5:6d:23:a1:1f:
         4b:91:b1:4c:58:8d:da:b8:5f:6c:48:33:91:e6:c6:c5:00:0f:
         21:54:63:ac:9a:dd:de:96:52:47:67:d7:28:4f:f2:44:24:72:
         22:22:b5:21:24:98:ef:99:6c:9e:eb:75:2c:72:10:d5:fd:09:
         5b:35:3e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:28 2026 by rpki-client