Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/600283ff-d1c9-3253-9924-f5ece3bd7839.roa
File:                     600283ff-d1c9-3253-9924-f5ece3bd7839.roa (raw, json)
Hash identifier:          NZNkeXC4jsEia39zv0bnxkd0HPIY1IPpZE5268eQ3p8=
Subject key identifier:   65:6E:B2:40:C2:65:E6:B4:E2:BA:79:A8:D4:89:42:59:9D:4D:1E:1F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E5D14A7C87290F9C0FC37ED80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/600283ff-d1c9-3253-9924-f5ece3bd7839.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     3257
IP address blocks:        161.58.0.0/16 maxlen: 24
                          198.65.128.0/18 maxlen: 24
                          198.65.224.0/19 maxlen: 24
                          199.240.0.0/16 maxlen: 24
                          206.58.0.0/16 maxlen: 24
                          206.86.0.0/16 maxlen: 24
                          207.21.128.0/18 maxlen: 24
                          207.22.64.0/18 maxlen: 24
                          207.31.192.0/18 maxlen: 24
                          207.32.64.0/18 maxlen: 24
                          207.33.0.0/16 maxlen: 24
                          207.97.0.0/17 maxlen: 24
                          207.150.0.0/17 maxlen: 24
                          207.153.128.0/18 maxlen: 24
                          207.153.192.0/18 maxlen: 24
                          207.158.192.0/18 maxlen: 24
                          207.159.0.0/18 maxlen: 24
                          207.196.0.0/17 maxlen: 24
                          207.197.128.0/17 maxlen: 24
                          207.199.0.0/17 maxlen: 24
                          207.206.0.0/17 maxlen: 24
                          209.69.0.0/16 maxlen: 24
                          209.75.0.0/16 maxlen: 24
                          209.130.0.0/17 maxlen: 24
                          209.157.0.0/16 maxlen: 24
                          209.238.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a7:c8:72:90:f9:c0:fc:37:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=b3784ff5-6fad-4360-8c47-4e8f0bc33e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:af:ba:fe:0f:4d:3b:ff:77:8c:37:81:74:
                    b1:9f:5b:0d:24:0c:b0:ca:7a:71:18:90:2e:4b:42:
                    ed:b0:6b:fb:e7:44:c2:f2:cf:85:33:bf:2a:49:11:
                    9a:7f:16:b1:85:d4:9c:37:40:9b:05:d2:1a:98:b5:
                    c7:ab:b0:ea:28:5e:66:ae:53:6c:dd:54:7b:60:b0:
                    86:d9:72:57:99:98:21:7c:15:ff:bc:9e:e8:69:61:
                    2c:3c:12:2f:74:10:f8:d2:a6:a3:0a:ba:1e:0c:57:
                    d9:9a:cf:b7:71:76:f7:24:72:f8:3c:56:bd:dd:65:
                    a1:1d:12:9a:e5:00:22:a3:cb:86:1d:8d:05:22:48:
                    fa:4b:97:70:e8:b1:db:3e:79:27:df:c1:71:99:aa:
                    18:fb:c8:2b:c2:01:e3:e6:b4:16:c3:b4:30:c3:d0:
                    24:3a:2a:78:9c:fe:b5:38:8e:cd:a8:2c:d8:64:88:
                    03:e8:56:4e:dd:84:74:e7:9f:8e:f2:db:49:6d:31:
                    60:d4:cc:e3:bf:9b:3c:73:58:f9:4e:1c:21:06:8b:
                    44:e2:53:e2:10:21:e7:63:41:c3:98:87:f1:16:39:
                    cd:31:ea:7c:e7:f3:e1:45:f0:ff:fa:10:e7:8e:e5:
                    c1:a3:25:36:08:14:ac:af:d4:4a:e5:e2:6d:7a:30:
                    ea:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6E:B2:40:C2:65:E6:B4:E2:BA:79:A8:D4:89:42:59:9D:4D:1E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/600283ff-d1c9-3253-9924-f5ece3bd7839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.58.0.0/16
                  198.65.128.0/18
                  198.65.224.0/19
                  199.240.0.0/16
                  206.58.0.0/16
                  206.86.0.0/16
                  207.21.128.0/18
                  207.22.64.0/18
                  207.31.192.0/18
                  207.32.64.0/18
                  207.33.0.0/16
                  207.97.0.0/17
                  207.150.0.0/17
                  207.153.128.0/17
                  207.158.192.0-207.159.63.255
                  207.196.0.0/17
                  207.197.128.0/17
                  207.199.0.0/17
                  207.206.0.0/17
                  209.69.0.0/16
                  209.75.0.0/16
                  209.130.0.0/17
                  209.157.0.0/16
                  209.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:a6:0d:f1:ba:a6:96:4b:57:fa:eb:f3:3e:3b:67:1e:0d:80:
         9f:6f:ef:5d:8a:bc:b7:e0:ed:3a:74:dc:20:f5:0f:b4:12:c7:
         b9:8b:ba:95:4e:64:c7:9f:6a:65:b6:63:90:c6:fc:a4:f7:8f:
         6b:b3:b7:5b:fc:26:ce:f2:75:eb:c0:a8:a1:bb:46:8c:6e:fb:
         aa:83:04:f9:a8:aa:be:84:e5:b5:db:78:9c:d5:96:5f:81:a9:
         0e:c9:dd:e0:e8:4a:d3:db:f5:39:3e:0e:51:b9:49:86:42:a0:
         87:42:87:7b:6e:8c:98:da:00:9d:45:5d:b5:b7:a3:b3:81:a6:
         26:89:2b:11:37:57:47:0a:92:9d:67:58:87:3e:ec:cb:bf:55:
         f6:28:cc:7e:be:9b:a1:ca:5b:96:8f:ab:bb:f5:95:64:7d:84:
         6c:1e:65:07:55:89:21:b7:1d:48:df:90:41:1f:c8:25:d7:a6:
         63:2a:52:86:5b:41:d9:60:ea:b9:ab:e8:2c:cc:02:f1:fc:50:
         ab:3f:83:95:72:89:18:7b:8f:06:51:bd:95:a7:00:67:fd:80:
         f9:0e:68:86:32:1c:43:91:81:2a:80:f3:2f:35:ef:91:63:df:
         8b:40:76:60:88:7f:dc:0e:a9:dc:a0:3d:1f:0f:e3:42:8f:cf:
         75:c9:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 02:40:35 2026 by rpki-client