Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11410836-5d1b-3125-b16f-4d6a999077e4.roa
File:                     11410836-5d1b-3125-b16f-4d6a999077e4.roa (raw, json)
Hash identifier:          sZc1YUJ+8nrNuU2GplptGMbMn8WQK7hI3JVzQEagiLM=
Subject key identifier:   05:B3:D3:10:EA:9D:F6:22:E6:7C:9F:28:DD:F2:EE:3D:11:B0:56:01
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584DE2B5F66FBF32D58DE02330A0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11410836-5d1b-3125-b16f-4d6a999077e4.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     6079
IP address blocks:        198.170.0.0/17 maxlen: 24
                          198.171.0.0/16 maxlen: 24
                          198.172.0.0/18 maxlen: 24
                          198.173.64.0/18 maxlen: 24
                          199.103.192.0/18 maxlen: 24
                          199.236.0.0/16 maxlen: 24
                          199.237.0.0/18 maxlen: 24
                          199.237.128.0/17 maxlen: 24
                          199.239.192.0/18 maxlen: 24
                          206.50.64.0/18 maxlen: 24
                          206.184.64.0/18 maxlen: 24
                          206.184.128.0/17 maxlen: 24
                          206.239.64.0/18 maxlen: 24
                          206.239.128.0/17 maxlen: 24
                          207.20.0.0/18 maxlen: 24
                          207.20.128.0/17 maxlen: 24
                          207.137.128.0/17 maxlen: 24
                          209.39.128.0/17 maxlen: 24
                          209.57.128.0/17 maxlen: 24
                          209.70.0.0/17 maxlen: 24
                          209.70.128.0/18 maxlen: 24
                          216.42.0.0/17 maxlen: 24
                          216.44.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:f6:6f:bf:32:d5:8d:e0:23:30:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=6688a66d-aab2-4c61-a20f-2b86e1dfac45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:c7:b8:4a:fa:00:18:27:29:a1:0e:52:b8:
                    cd:c9:35:79:f5:28:ba:86:8b:d1:d8:62:70:bd:16:
                    25:0f:ce:92:35:5d:3b:2e:2b:1c:2f:12:2f:5f:72:
                    c8:a4:6a:d7:0a:ed:e4:9d:29:44:c7:15:3b:ef:56:
                    11:3f:31:c5:d1:62:8b:8c:a7:cb:d5:76:7c:0e:ca:
                    0a:eb:5a:2e:fd:32:2b:d7:c0:74:20:81:58:87:7d:
                    d1:50:70:1b:bf:e1:56:64:0d:b9:44:62:83:06:a2:
                    70:7b:d1:45:c6:fa:5d:8a:2d:53:9b:93:a9:4e:96:
                    2f:ab:55:7a:47:00:c5:9b:f1:7e:fd:b8:b8:4e:1f:
                    1b:26:2f:1c:ac:af:d4:3a:45:8f:ee:e2:44:40:52:
                    de:9f:f1:ea:25:9b:b5:ea:4e:c2:c7:7a:62:02:cb:
                    70:bc:55:59:a7:b8:24:5d:42:1c:98:a1:37:91:35:
                    b7:a4:12:df:52:fb:12:40:d0:55:34:76:0d:45:4a:
                    b3:16:63:31:7e:16:c7:c2:13:f8:85:00:bc:fc:74:
                    a7:f1:f6:4f:d4:e2:6c:05:12:4d:42:7d:64:84:eb:
                    6d:ed:1c:99:38:66:18:e0:22:05:54:0b:b8:da:73:
                    c6:e1:25:8c:4d:88:b6:90:3d:21:79:80:01:6d:a5:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B3:D3:10:EA:9D:F6:22:E6:7C:9F:28:DD:F2:EE:3D:11:B0:56:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11410836-5d1b-3125-b16f-4d6a999077e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.170.0.0/17
                  198.171.0.0-198.172.63.255
                  198.173.64.0/18
                  199.103.192.0/18
                  199.236.0.0-199.237.63.255
                  199.237.128.0/17
                  199.239.192.0/18
                  206.50.64.0/18
                  206.184.64.0-206.184.255.255
                  206.239.64.0-206.239.255.255
                  207.20.0.0/18
                  207.20.128.0/17
                  207.137.128.0/17
                  209.39.128.0/17
                  209.57.128.0/17
                  209.70.0.0-209.70.191.255
                  216.42.0.0/17
                  216.44.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:27:11:2d:99:90:4d:d8:f5:fc:8e:1c:c2:4e:47:aa:81:79:
         cc:a3:45:32:a1:3e:3f:1c:ed:b7:2b:f7:96:fd:ab:cd:0b:1e:
         2d:ed:42:c1:17:c3:e4:5e:07:b6:77:29:cb:ba:33:d5:71:46:
         d0:18:c9:bc:41:6d:2b:b2:eb:97:b0:44:48:71:ad:45:30:68:
         4c:50:77:cc:20:7a:03:b5:27:ea:33:ab:99:bd:dd:ce:a5:b3:
         ad:48:6d:b2:65:f4:75:d5:9a:f6:86:a3:a3:5a:7a:ed:b4:d3:
         66:ad:62:30:25:1d:3b:82:15:87:b9:f0:96:e2:0e:fb:1b:34:
         d2:16:38:e6:75:21:e2:c4:1d:0e:d8:1a:90:f2:de:b6:98:9c:
         10:b3:1c:b2:3c:70:85:d4:2e:c3:40:10:c7:92:d7:10:43:77:
         ce:00:8b:03:09:14:ad:0f:cf:ec:9b:e5:2c:14:f7:14:6c:b6:
         52:d5:d3:67:ce:b5:56:31:d1:bb:20:b1:9e:d0:34:62:95:c7:
         ec:cf:ff:66:93:9d:04:a9:a1:ea:f7:85:4c:4b:c9:7e:35:9f:
         03:4d:54:9a:fb:f5:e2:8d:d0:73:1b:a9:00:e5:a9:6b:55:bb:
         f3:7e:05:24:9d:ad:c9:46:d7:e2:f0:38:eb:a3:18:02:e4:a8:
         88:0b:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:26:29 2026 by rpki-client