Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d/fd437b24-1f40-3458-811f-0215d3c517db.roa
File:                     fd437b24-1f40-3458-811f-0215d3c517db.roa (raw, json)
Hash identifier:          CJqk8eLu5IpczbZ4cqixrd7X85+vSxzA3L0V0y4r1p4=
Subject key identifier:   30:81:74:50:42:E0:EC:93:17:FB:3A:4E:9F:5B:11:C6:00:1A:31:39
Certificate issuer:       /CN=558bf115-11b1-4e0f-88e8-4f38ecccf90d
Certificate serial:       010D0C9F4328584F82F2B78F1BB4D35464E55A40
Authority key identifier: 43:AC:23:55:8C:DB:0E:8B:49:9F:68:52:7E:DE:B7:6F:E8:D8:64:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d/fd437b24-1f40-3458-811f-0215d3c517db.roa
Signing time:             Thu 15 Oct 2026 15:19:35 +0000
ROA not before:           Thu 15 Oct 2026 15:19:35 +0000
ROA not after:            Wed 13 Jan 2027 16:19:35 +0000
asID:                     8103
IP address blocks:        170.219.0.0/16 maxlen: 16
                          170.219.28.0/24 maxlen: 24
                          205.145.224.0/19 maxlen: 19
                          205.145.225.0/24 maxlen: 24
                          205.145.226.0/24 maxlen: 24
                          205.145.233.0/24 maxlen: 24
                          205.145.235.0/24 maxlen: 24
                          205.145.238.0/24 maxlen: 24
                          205.145.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d/558bf115-11b1-4e0f-88e8-4f38ecccf90d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d/558bf115-11b1-4e0f-88e8-4f38ecccf90d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:f2:b7:8f:1b:b4:d3:54:64:e5:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558bf115-11b1-4e0f-88e8-4f38ecccf90d
        Validity
            Not Before: Oct 15 15:19:35 2026 GMT
            Not After : Jan 13 16:19:35 2027 GMT
        Subject: CN=d34756cb-ca69-4712-a1fb-97b7cb8b01ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:47:36:f1:42:10:6c:4d:8e:3d:15:d3:54:
                    8c:8d:41:d3:79:97:54:c5:74:f8:ba:f9:8b:34:4a:
                    30:b3:15:48:ad:38:85:48:47:07:63:59:14:c1:b0:
                    75:6b:8e:2c:dd:ec:cb:b6:b1:a0:75:87:fe:81:16:
                    3e:82:9d:1c:76:2a:18:d2:b3:c3:43:77:95:d2:db:
                    2b:0f:32:c1:2a:19:35:e0:c4:50:4b:73:79:45:38:
                    51:90:24:4d:7e:e6:8d:7a:cc:7e:9c:94:cb:6c:6c:
                    4e:f4:e6:26:90:2c:32:76:0a:5f:c8:f3:b2:6e:14:
                    ea:48:18:2d:01:07:ef:d7:74:78:73:e8:b4:cb:2d:
                    ca:f2:6e:da:8a:4f:66:de:c9:26:5b:ba:65:73:fa:
                    a7:33:44:13:b4:21:2b:12:db:62:71:09:17:e2:9e:
                    c9:90:58:9d:b2:6d:3d:1c:fe:52:d4:3b:19:ba:cd:
                    f6:e2:e7:47:da:76:ba:bd:64:45:d2:2a:f9:b9:0b:
                    63:f0:44:d7:4d:55:c4:bb:59:eb:d6:05:77:79:c5:
                    fa:78:a6:87:b7:20:f0:a3:30:91:a7:b0:66:85:1d:
                    c7:3c:ab:e5:08:ee:fc:17:8c:c7:93:79:46:32:b7:
                    c5:e9:1d:cb:a1:9a:b8:25:dd:2b:ce:fc:70:e2:bb:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:81:74:50:42:E0:EC:93:17:FB:3A:4E:9F:5B:11:C6:00:1A:31:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d/fd437b24-1f40-3458-811f-0215d3c517db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d/558bf115-11b1-4e0f-88e8-4f38ecccf90d.crl

            X509v3 Authority Key Identifier:
                keyid:43:AC:23:55:8C:DB:0E:8B:49:9F:68:52:7E:DE:B7:6F:E8:D8:64:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.219.0.0/16
                  205.145.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:bf:ac:f7:6f:d5:f7:75:15:65:2b:9b:29:44:de:64:b8:
         fa:72:a7:16:41:ee:c0:bf:72:ca:b4:9d:41:8c:20:ed:88:aa:
         a5:1a:72:4a:1f:4c:c5:a3:17:08:d1:e2:e1:76:8c:e7:ee:60:
         96:35:05:7c:e6:21:3a:17:4a:40:10:b0:76:02:c0:80:46:2e:
         cf:49:38:68:1b:62:b0:75:40:3c:52:b3:43:03:01:a7:5d:c4:
         dc:5e:d9:25:5e:e2:fb:bc:7f:93:4e:23:82:ee:a2:fd:38:19:
         56:5b:90:32:34:33:de:12:5b:69:a6:3b:3d:a5:dd:1f:5c:96:
         c7:ad:c3:99:19:18:0c:c4:97:b0:ec:2e:b7:e5:c8:11:b5:ec:
         cc:de:14:85:a0:f6:9c:16:4a:a2:58:73:67:ca:93:a4:77:8b:
         0e:10:d4:8e:22:6e:db:46:64:c7:3e:6a:59:a5:8a:0e:08:40:
         c3:a4:64:3d:86:f1:ca:a2:76:14:46:2d:fe:d1:91:f2:e4:bd:
         30:86:a1:54:45:4b:d2:68:68:7b:01:c4:bf:60:dc:eb:f1:31:
         a3:51:33:24:0d:4d:e7:8b:81:36:5a:f4:bc:76:16:52:74:a9:
         f0:4a:4b:98:e1:3c:8b:3a:c0:30:77:f1:cf:9c:d6:89:15:11:
         0d:8a:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:54:00 2026 by rpki-client