Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/83fa3d6b-4052-4cfc-b511-ed900f25ffce/fad7d601-1c05-3df1-824d-060d56989e17.roa
File:                     fad7d601-1c05-3df1-824d-060d56989e17.roa (raw, json)
Hash identifier:          gYOG5+3uFH3+8RcNwIay9BVNRweTXaaLGU0lfJ6Bm3s=
Subject key identifier:   C3:19:DD:23:81:D2:4B:AC:35:9E:69:3D:48:79:03:BD:3D:F2:ED:0B
Certificate issuer:       /CN=83fa3d6b-4052-4cfc-b511-ed900f25ffce
Certificate serial:       010D0C9F4328584EA7945E7476B3D0F14DE59E40
Authority key identifier: 3F:F5:DD:53:DE:65:9B:69:59:CD:97:69:05:12:51:E0:BC:E3:EA:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/83fa3d6b-4052-4cfc-b511-ed900f25ffce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/83fa3d6b-4052-4cfc-b511-ed900f25ffce/fad7d601-1c05-3df1-824d-060d56989e17.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19079
IP address blocks:        216.163.144.0/20 maxlen: 20
                          216.163.144.0/24 maxlen: 24
                          216.163.145.0/24 maxlen: 24
                          216.163.146.0/24 maxlen: 24
                          216.163.147.0/24 maxlen: 24
                          216.163.148.0/24 maxlen: 24
                          216.163.149.0/24 maxlen: 24
                          216.163.150.0/24 maxlen: 24
                          216.163.151.0/24 maxlen: 24
                          216.163.152.0/24 maxlen: 24
                          216.163.153.0/24 maxlen: 24
                          216.163.154.0/24 maxlen: 24
                          216.163.155.0/24 maxlen: 24
                          216.163.156.0/24 maxlen: 24
                          216.163.157.0/24 maxlen: 24
                          216.163.158.0/24 maxlen: 24
                          216.163.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/83fa3d6b-4052-4cfc-b511-ed900f25ffce/83fa3d6b-4052-4cfc-b511-ed900f25ffce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/83fa3d6b-4052-4cfc-b511-ed900f25ffce/83fa3d6b-4052-4cfc-b511-ed900f25ffce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/83fa3d6b-4052-4cfc-b511-ed900f25ffce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:5e:74:76:b3:d0:f1:4d:e5:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83fa3d6b-4052-4cfc-b511-ed900f25ffce
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aba2740d-1ed6-4d1a-95e5-313135ce696a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:6f:9f:26:65:ce:ff:7a:de:04:35:fa:75:
                    00:41:b1:90:72:d0:68:22:a0:ba:a1:20:7b:e4:79:
                    76:35:76:62:fa:46:55:90:d0:0b:8e:ba:f2:44:86:
                    0a:04:29:d8:af:62:9d:5d:e7:c6:d7:ef:1e:c8:a6:
                    7f:ff:4a:08:9e:fc:83:68:99:90:6f:8f:e5:c7:4d:
                    38:ef:83:d5:b8:e2:02:30:08:ed:3a:c0:f5:a6:58:
                    b5:2f:60:f0:33:03:94:a4:ed:e8:8e:d0:9d:da:c2:
                    02:af:fd:cf:11:e5:b6:4e:2d:22:68:88:7b:13:b6:
                    49:d1:a1:5f:57:74:99:41:c9:f1:88:e0:80:55:5c:
                    28:13:9b:a3:ff:de:85:90:cb:82:92:52:4f:ef:cd:
                    e0:b2:2c:4d:fb:39:09:c3:78:3a:85:3b:3e:83:21:
                    7e:f2:ee:9f:cd:2f:5c:2f:8e:84:7d:e7:da:07:8c:
                    27:65:d7:92:d9:6b:58:95:ca:58:77:d6:01:63:e8:
                    a5:9f:20:02:32:f5:0f:b3:4e:c4:6a:40:81:6a:5e:
                    f3:d3:14:1d:a9:e4:65:6e:ec:ba:eb:9f:8c:23:a8:
                    09:aa:f0:bf:69:25:d4:74:77:ca:b4:46:1b:f9:2d:
                    b6:c3:fd:13:e3:68:40:8e:6f:5a:8b:3d:30:d5:e2:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:19:DD:23:81:D2:4B:AC:35:9E:69:3D:48:79:03:BD:3D:F2:ED:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/83fa3d6b-4052-4cfc-b511-ed900f25ffce/fad7d601-1c05-3df1-824d-060d56989e17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/83fa3d6b-4052-4cfc-b511-ed900f25ffce/83fa3d6b-4052-4cfc-b511-ed900f25ffce.crl

            X509v3 Authority Key Identifier:
                keyid:3F:F5:DD:53:DE:65:9B:69:59:CD:97:69:05:12:51:E0:BC:E3:EA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/83fa3d6b-4052-4cfc-b511-ed900f25ffce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:03:45:91:a3:9f:55:3a:f9:88:c4:d2:b5:85:af:ee:b4:e8:
         af:e6:3b:a3:a3:8e:61:f3:8d:da:1e:77:0f:68:5b:9b:85:36:
         99:4a:2d:fa:eb:5b:db:91:da:2c:d6:ec:ba:b1:ba:4b:86:46:
         a0:13:5b:88:92:5e:47:e0:9c:86:c8:92:30:5c:c9:d3:a7:55:
         9f:1a:45:99:3e:9b:c7:4c:ae:b5:f5:64:50:a4:3a:05:69:82:
         ec:2a:6f:eb:95:a5:9a:b3:22:fb:11:9b:ab:0f:a4:d3:06:cb:
         69:82:9e:c5:07:26:2d:11:a6:b4:4b:a7:c1:0f:01:cc:94:94:
         f2:32:90:c8:30:dc:01:b2:2d:25:c8:95:bb:07:02:82:83:25:
         63:ce:83:3f:ff:10:b3:93:e3:29:0c:d4:cf:2b:a7:e0:0e:1b:
         7d:97:cc:21:b8:de:e0:63:3f:11:87:2d:30:51:fb:2a:f9:39:
         cd:bf:2b:75:06:fb:77:bb:c3:75:d7:b4:64:45:52:af:11:55:
         e5:ac:9b:00:28:41:63:d8:52:80:64:db:f6:75:6c:49:99:a0:
         1e:06:cd:c3:83:f0:a7:46:a8:db:6c:12:57:93:08:6e:5d:c9:
         59:80:67:04:a7:04:a3:ae:32:f8:56:9c:f2:2e:5a:28:c7:5d:
         c9:42:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:51:27 2026 by rpki-client