Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e90f9852-5c4c-3843-af48-ec6e81ea44a4.roa
File:                     e90f9852-5c4c-3843-af48-ec6e81ea44a4.roa (raw, json)
Hash identifier:          Q1M+fAFbucEJT9MdPvbvUR0r/qaiwzAW/tUm8m4/R5U=
Subject key identifier:   99:B2:A4:46:B2:66:F9:E8:AC:06:90:B0:2C:0D:E5:71:46:45:1E:81
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584EA791AB21D2A0E73F63AE4C00
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e90f9852-5c4c-3843-af48-ec6e81ea44a4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46606
IP address blocks:        142.4.0.0/19 maxlen: 19
                          162.144.32.0/19 maxlen: 19
                          162.144.64.0/19 maxlen: 19
                          162.144.96.0/19 maxlen: 19
                          162.144.128.0/19 maxlen: 19
                          162.144.192.0/19 maxlen: 19
                          162.144.232.0/21 maxlen: 21
                          162.214.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:ab:21:d2:a0:e7:3f:63:ae:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c1c7ed7b-9dcf-4c04-959c-98ebdb2d911f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3c:fe:d3:ba:42:dd:5d:6b:a3:90:40:41:d7:
                    91:e3:2e:ba:b7:7d:cf:cf:c7:97:e7:e0:c2:c0:ed:
                    ac:b0:e0:7b:d3:0e:c1:cc:25:1c:43:e5:61:d4:f4:
                    07:46:30:36:79:4e:3d:40:87:49:c5:dd:22:c5:57:
                    dc:dd:7a:0e:3e:2f:1c:c6:7e:b3:98:ff:c4:dc:fb:
                    e8:86:fd:cf:60:fc:32:6d:4c:9e:72:c1:98:e3:aa:
                    ff:21:09:e7:6e:dd:dd:08:fd:a2:78:43:a6:f8:8a:
                    bd:4c:65:cd:83:14:2c:b1:6c:fc:34:05:0a:86:2c:
                    6c:06:a5:02:d7:45:ad:74:3b:99:cc:de:f3:f9:56:
                    cf:6c:af:44:8a:55:b6:5e:2c:9a:5e:5c:be:33:71:
                    29:8d:d5:60:5c:69:6a:e5:7b:b1:cc:b6:e4:30:be:
                    44:75:08:d9:b9:59:34:a3:fd:b6:51:cb:ce:d1:ca:
                    2e:3f:40:49:19:fb:27:25:77:fc:25:bd:4d:6d:ec:
                    26:f8:49:c9:99:6c:b4:83:1d:16:c7:22:23:60:8b:
                    84:08:d7:e4:7e:ba:1d:46:bd:63:35:66:de:cf:e5:
                    f2:60:66:4a:bc:a6:b8:5f:eb:cc:2b:1d:ae:53:74:
                    87:6f:0b:98:84:17:73:6c:0c:55:f8:f0:7a:74:90:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:A4:46:B2:66:F9:E8:AC:06:90:B0:2C:0D:E5:71:46:45:1E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e90f9852-5c4c-3843-af48-ec6e81ea44a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.4.0.0/19
                  162.144.32.0-162.144.159.255
                  162.144.192.0/19
                  162.144.232.0/21
                  162.214.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:31:b1:5f:a9:12:6c:f3:42:f3:8c:6c:0b:10:43:5b:72:be:
         73:65:3a:5d:6f:79:51:e3:81:7a:02:d8:34:14:ff:12:ff:4e:
         be:f7:54:78:b8:a6:33:c9:cd:e3:34:05:50:b1:84:69:51:cb:
         b8:d3:a2:61:9a:d3:a3:5c:cd:82:9b:98:80:67:75:e9:1b:0e:
         10:29:1b:0a:f3:40:fb:bc:00:92:de:a4:05:59:82:cd:1f:df:
         45:7e:07:cd:20:81:53:7c:e4:9c:3d:a6:a6:97:ef:0e:a5:cc:
         b2:41:05:0d:34:e0:5b:cc:4e:73:d5:7c:e9:b9:03:2f:a3:85:
         3f:28:2d:06:97:98:1a:ec:67:bd:1a:de:55:15:7d:7f:a4:67:
         c2:8f:55:74:55:18:91:3b:f8:7c:dc:ea:b9:4a:2e:dc:dc:8f:
         97:d6:6c:c8:23:2d:ed:cc:6a:f5:af:af:2a:d5:e5:ed:34:3c:
         7a:29:ae:18:50:3c:27:14:0c:57:86:5f:66:3d:96:c9:ad:1d:
         02:3f:93:9a:fd:b8:35:67:ac:e3:0a:9a:4d:5f:73:86:ee:53:
         d4:7b:1a:9f:86:88:84:85:c4:77:b1:8f:a2:a9:1e:b2:10:48:
         21:21:cb:42:8b:1f:21:19:d5:3a:0f:bd:9b:8c:1c:c9:f3:fd:
         e7:43:38:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:16:35 2026 by rpki-client