Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1a456c20-ca9a-313f-8b1c-610261724796.roa
File:                     1a456c20-ca9a-313f-8b1c-610261724796.roa (raw, json)
Hash identifier:          ZxN6VV8bPcO5xraOeOz6erBsIh12lZ8BKEkY0qlLS+g=
Subject key identifier:   4A:B9:A6:9F:8F:77:F8:BD:85:48:6D:14:8A:38:6B:39:6E:09:84:E4
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584EAE81994D893DD571FC7D6340
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1a456c20-ca9a-313f-8b1c-610261724796.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     396982
IP address blocks:        162.210.70.0/24 maxlen: 24
                          162.222.225.0/24 maxlen: 24
                          162.222.226.0/23 maxlen: 24
                          162.251.80.0/24 maxlen: 24
                          162.251.85.0/24 maxlen: 24
                          199.79.62.0/23 maxlen: 23
                          204.11.58.0/23 maxlen: 23
                          207.174.212.0/22 maxlen: 24
                          208.91.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:99:4d:89:3d:d5:71:fc:7d:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=bddfb8c3-8402-41e6-ba37-1a0c27766f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fa:49:33:ad:ec:a5:6b:2a:eb:56:16:80:cf:
                    9e:be:aa:d1:3a:23:e3:bd:e5:ca:18:ea:69:d6:f4:
                    e8:d7:c1:8d:be:fe:aa:02:34:b7:47:35:46:c9:f0:
                    3e:9c:3f:99:c9:b4:fb:b7:45:d6:2d:72:4a:9f:72:
                    29:ae:d4:05:a4:27:1f:3a:6a:6f:54:cf:13:ce:d3:
                    27:f2:79:23:33:02:07:17:fc:69:90:04:ec:78:98:
                    8f:c7:2a:cf:5b:ef:f6:5d:bc:09:62:4f:ab:e6:d3:
                    a9:e9:c2:4d:16:03:b5:c2:85:c7:ae:36:16:25:d0:
                    97:84:f6:1c:43:57:b9:f2:94:fc:53:53:88:34:56:
                    34:67:2c:d5:50:f7:b3:2e:ce:e8:d6:09:19:d5:b0:
                    74:75:9f:61:65:cb:a6:0d:d7:1c:98:25:69:8d:f9:
                    aa:29:b1:d5:18:25:5d:26:4c:07:e3:68:87:f4:aa:
                    a1:65:1d:11:97:d4:12:0f:ac:cf:28:c8:cc:08:85:
                    44:c4:85:18:28:e2:8f:6e:45:6b:c7:5d:a8:37:c4:
                    d9:23:5c:26:16:d0:0c:f7:6f:3a:49:03:9e:31:44:
                    db:cf:35:7c:79:41:05:fe:00:4d:6a:be:a1:f7:65:
                    56:b6:db:d0:d6:f2:fc:eb:0c:19:0b:cc:17:4f:20:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B9:A6:9F:8F:77:F8:BD:85:48:6D:14:8A:38:6B:39:6E:09:84:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1a456c20-ca9a-313f-8b1c-610261724796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.70.0/24
                  162.222.225.0-162.222.227.255
                  162.251.80.0/24
                  162.251.85.0/24
                  199.79.62.0/23
                  204.11.58.0/23
                  207.174.212.0/22
                  208.91.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b4:15:b0:ee:ee:d4:c4:e1:43:89:f1:b8:94:47:bc:37:bd:
         e6:5d:cf:60:86:9a:5b:53:bf:34:22:f9:4d:cb:39:6f:3f:12:
         28:e0:c9:d7:de:a1:b6:eb:ed:81:4e:e5:59:c7:f2:19:e1:7f:
         3c:72:90:eb:6c:65:62:36:ab:01:0f:d6:76:2c:6f:5b:3d:f2:
         49:df:0b:63:38:cb:d8:ff:e4:3e:11:b0:51:35:1b:1a:3a:29:
         36:cb:ce:dc:f4:82:b2:a7:38:bf:77:7b:eb:fe:f2:07:19:4d:
         c3:f2:d3:ab:e9:db:68:af:c1:10:a5:1e:13:2b:cb:13:a6:41:
         c2:1b:11:74:b4:ab:54:de:de:76:e9:05:40:92:75:07:5d:b5:
         da:00:8d:51:e1:b2:5e:1d:c7:00:b0:22:d8:2f:71:94:27:f3:
         41:44:30:93:21:cf:37:e3:71:35:21:16:77:7f:a2:ee:6f:9c:
         b5:60:aa:b5:19:00:c2:d4:22:91:cf:06:82:21:93:59:b6:48:
         5a:e2:78:9f:c7:94:cd:3d:2f:bd:3a:e6:e9:ce:a0:08:da:04:
         f6:35:74:b4:32:e3:6f:47:d5:70:a8:4d:04:11:f3:5e:97:7d:
         0a:7a:51:fe:ad:7b:67:f8:5e:0b:02:90:f6:f5:a4:f5:08:c2:
         a5:b3:d5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:08:34 2026 by rpki-client