Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/61387c07-f158-3c20-90a5-7ad89a370277.roa
File:                     61387c07-f158-3c20-90a5-7ad89a370277.roa (raw, json)
Hash identifier:          DZwcXzYqZA5R/JQoPfKOovHw+NAD4PbZAmuze+z75kE=
Subject key identifier:   B2:5A:97:91:56:85:62:E2:00:E6:39:AD:F6:68:20:02:42:F0:D8:84
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E5D14A6FF4E581B5B1C7D5B00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/61387c07-f158-3c20-90a5-7ad89a370277.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        161.58.0.0/16 maxlen: 24
                          198.65.128.0/18 maxlen: 24
                          198.65.224.0/19 maxlen: 24
                          199.240.0.0/16 maxlen: 24
                          206.58.0.0/16 maxlen: 24
                          206.86.0.0/16 maxlen: 24
                          207.21.128.0/18 maxlen: 24
                          207.22.64.0/18 maxlen: 24
                          207.31.192.0/18 maxlen: 24
                          207.32.64.0/18 maxlen: 24
                          207.33.0.0/16 maxlen: 24
                          207.97.0.0/17 maxlen: 24
                          207.150.0.0/17 maxlen: 24
                          207.153.128.0/18 maxlen: 24
                          207.153.192.0/18 maxlen: 24
                          207.158.192.0/18 maxlen: 24
                          207.159.0.0/18 maxlen: 24
                          207.196.0.0/17 maxlen: 24
                          207.197.128.0/17 maxlen: 24
                          207.199.0.0/17 maxlen: 24
                          207.206.0.0/17 maxlen: 24
                          209.69.0.0/16 maxlen: 24
                          209.75.0.0/16 maxlen: 24
                          209.130.0.0/17 maxlen: 24
                          209.157.0.0/16 maxlen: 24
                          209.238.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a6:ff:4e:58:1b:5b:1c:7d:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=03df0838-18da-45ae-ae42-7e604256399c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:b3:75:ac:a0:4a:bf:ec:87:2a:a4:39:00:
                    ce:49:35:60:ae:85:51:cb:2a:30:d1:b0:3c:68:c2:
                    e4:c6:59:78:c7:b3:4f:59:31:0f:59:1d:c9:7e:ab:
                    75:bb:86:0d:cf:a7:c1:32:a7:ba:be:18:44:6e:d6:
                    c7:4c:b2:eb:d1:85:e5:b2:ee:9a:bd:c8:06:3b:0b:
                    c2:7d:06:ce:00:74:ba:4d:1f:1c:28:bd:77:aa:53:
                    87:38:01:6c:6c:c6:43:f5:8e:d1:9c:b1:54:28:cd:
                    08:60:d7:0f:b3:83:22:15:b7:81:81:69:3d:18:96:
                    04:94:9c:95:7f:2b:33:1b:4a:49:36:3d:3d:71:0f:
                    45:cc:23:c7:c0:4e:a2:00:7e:92:ac:c2:e2:6a:dc:
                    b9:77:a0:40:26:be:80:89:e0:89:f9:4c:03:e9:2c:
                    27:ef:02:49:a6:ad:0c:5f:8d:19:30:9a:e7:59:fd:
                    b9:5f:8f:58:e5:72:71:ee:b2:dd:93:c0:81:1d:09:
                    6a:5b:e6:0c:cc:2f:65:5c:46:cb:98:be:20:7e:4f:
                    b8:e7:3d:27:8e:18:77:75:88:22:f9:52:5e:45:4f:
                    f8:39:6f:2b:4c:37:f6:08:67:3f:a0:d4:5f:3b:ab:
                    15:08:3d:9e:84:0e:a4:32:ac:69:6d:5b:05:49:bd:
                    c2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5A:97:91:56:85:62:E2:00:E6:39:AD:F6:68:20:02:42:F0:D8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/61387c07-f158-3c20-90a5-7ad89a370277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.58.0.0/16
                  198.65.128.0/18
                  198.65.224.0/19
                  199.240.0.0/16
                  206.58.0.0/16
                  206.86.0.0/16
                  207.21.128.0/18
                  207.22.64.0/18
                  207.31.192.0/18
                  207.32.64.0/18
                  207.33.0.0/16
                  207.97.0.0/17
                  207.150.0.0/17
                  207.153.128.0/17
                  207.158.192.0-207.159.63.255
                  207.196.0.0/17
                  207.197.128.0/17
                  207.199.0.0/17
                  207.206.0.0/17
                  209.69.0.0/16
                  209.75.0.0/16
                  209.130.0.0/17
                  209.157.0.0/16
                  209.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:1f:ca:48:3e:0a:94:ac:c8:76:27:86:75:53:4f:ca:99:27:
         c4:f9:15:3a:9d:18:33:72:73:e6:67:19:4c:08:df:53:98:84:
         53:97:41:2a:07:7a:55:65:fe:1b:f6:5f:fe:b6:89:ba:d8:00:
         68:9c:64:d9:de:d7:d6:9d:b0:e0:2a:e6:a7:da:71:0e:9f:10:
         84:7e:dc:a7:49:9c:74:8a:b1:43:37:3c:ee:99:98:b3:10:04:
         29:59:e3:4f:45:f8:4e:35:0b:18:09:76:cc:cc:94:d5:a2:f0:
         1e:06:5d:43:e2:d8:e9:1f:d1:43:5c:66:56:be:0f:fc:02:dd:
         4e:87:3a:2e:ca:47:69:19:96:34:ab:e7:ca:e2:e8:40:78:e9:
         73:79:67:d6:57:52:7b:2f:cd:5b:ef:9a:f1:c8:ce:29:17:90:
         26:98:9a:19:63:2c:fb:0b:a5:57:f4:d9:0a:f5:2a:e3:c3:fa:
         77:a1:40:ee:fa:8d:77:95:21:81:fa:b6:d7:f4:58:87:80:ca:
         2c:5c:c0:10:cd:7e:1a:05:9a:0a:b3:b5:60:da:34:bc:a0:c8:
         9f:46:3e:aa:46:9f:0b:53:a3:3f:05:bc:dc:0a:3b:2f:14:36:
         b8:55:38:e2:91:c8:ae:09:74:79:47:6f:05:14:6d:21:8c:a4:
         42:86:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 03:08:10 2026 by rpki-client