Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/833998ac-b1fb-3172-8bef-f1a4bb72b6f3.roa
File:                     833998ac-b1fb-3172-8bef-f1a4bb72b6f3.roa (raw, json)
Hash identifier:          oCfIfnRd0mp1bWKI+6mV5xSdjPjaIitpoQSK/20/OLk=
Subject key identifier:   D8:C5:68:62:5B:07:26:09:CD:0F:52:BB:30:33:88:97:4D:50:9D:EF
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F82F5B3F0482A08402E0A3C80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/833998ac-b1fb-3172-8bef-f1a4bb72b6f3.roa
Signing time:             Thu 15 Oct 2026 15:25:36 +0000
ROA not before:           Thu 15 Oct 2026 15:25:36 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     203020
IP address blocks:        128.121.128.0/17 maxlen: 24
                          128.241.48.0/20 maxlen: 24
                          128.241.64.0/20 maxlen: 24
                          128.241.96.0/19 maxlen: 24
                          128.242.64.0/20 maxlen: 24
                          128.242.160.0/20 maxlen: 24
                          130.94.160.0/20 maxlen: 24
                          130.94.224.0/20 maxlen: 24
                          131.103.32.0/19 maxlen: 24
                          131.103.64.0/19 maxlen: 24
                          131.103.144.0/20 maxlen: 24
                          140.174.112.0/20 maxlen: 24
                          157.238.96.0/19 maxlen: 24
                          168.143.80.0/20 maxlen: 24
                          168.143.192.0/19 maxlen: 24
                          192.204.112.0/20 maxlen: 24
                          192.204.128.0/20 maxlen: 24
                          192.204.160.0/19 maxlen: 24
                          198.64.96.0/19 maxlen: 24
                          198.64.224.0/20 maxlen: 24
                          204.0.32.0/20 maxlen: 24
                          204.1.144.0/20 maxlen: 24
                          204.1.224.0/20 maxlen: 24
                          204.3.0.0/19 maxlen: 24
                          204.3.64.0/18 maxlen: 24
                          204.141.64.0/20 maxlen: 24
                          209.139.0.0/17 maxlen: 24
                          209.207.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:f5:b3:f0:48:2a:08:40:2e:0a:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 15:25:36 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=0ff4ecc7-2ce6-47f5-8a5d-b13de5658df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:2c:6c:43:25:e8:3a:62:6d:9a:5b:32:1e:
                    6a:0c:58:6b:83:5b:6d:7f:08:ec:7f:47:e0:8c:34:
                    51:13:92:0c:73:5f:f3:fb:ef:ad:ae:57:70:63:1e:
                    0e:44:fa:80:5e:3a:10:64:0b:a8:2b:c6:40:4a:86:
                    53:c1:95:07:13:28:c0:4f:78:83:94:62:91:26:6d:
                    42:43:53:e7:c7:b9:e7:4d:50:63:03:d1:5f:e1:83:
                    ed:2b:0a:d7:47:f0:27:a2:27:53:88:f5:8b:ce:b1:
                    0d:ea:a1:d5:70:10:ec:aa:85:6b:0e:81:eb:3e:cd:
                    a4:3e:66:db:5f:8e:be:7c:5d:e5:70:a3:15:c3:b3:
                    32:7d:3e:02:72:1a:ea:44:94:fa:66:c8:52:a8:6a:
                    7d:03:22:30:16:20:8a:39:4f:86:7b:dc:14:48:c7:
                    a3:5c:7e:a1:0f:2e:14:cb:a6:28:38:ce:81:b6:cc:
                    ee:58:5a:7c:6c:06:f1:b5:43:30:b4:c0:ca:d9:21:
                    b7:62:4b:ff:c9:43:e5:fe:ca:71:75:17:00:a8:8b:
                    51:08:74:68:84:2e:ca:95:8b:d2:d5:41:ba:72:a1:
                    6c:b3:f3:7e:45:56:5a:20:73:d8:d4:e8:4e:53:4e:
                    82:74:0f:ce:35:61:dc:57:d0:c8:69:bf:ad:80:b5:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C5:68:62:5B:07:26:09:CD:0F:52:BB:30:33:88:97:4D:50:9D:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/833998ac-b1fb-3172-8bef-f1a4bb72b6f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.128.0/17
                  128.241.48.0-128.241.79.255
                  128.241.96.0/19
                  128.242.64.0/20
                  128.242.160.0/20
                  130.94.160.0/20
                  130.94.224.0/20
                  131.103.32.0-131.103.95.255
                  131.103.144.0/20
                  140.174.112.0/20
                  157.238.96.0/19
                  168.143.80.0/20
                  168.143.192.0/19
                  192.204.112.0-192.204.143.255
                  192.204.160.0/19
                  198.64.96.0/19
                  198.64.224.0/20
                  204.0.32.0/20
                  204.1.144.0/20
                  204.1.224.0/20
                  204.3.0.0/19
                  204.3.64.0/18
                  204.141.64.0/20
                  209.139.0.0/17
                  209.207.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ca:52:ab:94:34:d8:89:81:72:38:b0:03:4f:8b:9b:7e:41:
         be:c5:55:24:64:68:7f:a8:7f:fc:8a:79:bb:f1:6a:b3:77:ca:
         18:68:49:77:6e:ca:93:67:3d:0a:88:3b:ad:05:d7:4c:d7:aa:
         55:35:5a:a5:c0:9a:31:c9:8c:a6:39:f9:e8:3c:5b:bf:e0:b8:
         bf:e3:3d:9c:85:bf:a9:eb:da:cd:ff:e1:2f:27:cd:cc:ca:a1:
         7f:0f:40:38:0a:77:14:b5:c4:7f:7e:ba:dc:f8:68:57:7b:10:
         ae:3f:c4:4e:b5:30:4e:00:82:5b:6b:77:f4:cc:d4:15:62:72:
         c2:cc:24:e5:9d:ec:43:a2:89:09:b1:59:49:aa:3d:ed:5c:c9:
         fb:85:45:9b:51:4f:1a:05:1b:0c:cf:af:ce:7f:87:23:1a:e7:
         5e:d8:1f:82:35:c0:c5:fb:a5:6e:cc:df:05:b0:a3:54:4b:14:
         2c:ed:45:07:c5:63:ea:4c:40:bb:e5:ef:8e:5c:e5:0d:04:23:
         57:1b:eb:e9:41:e6:8b:16:ee:b9:be:6d:c3:c0:26:18:4a:e0:
         21:58:d9:4a:6c:77:74:32:8a:8f:59:ba:48:79:dc:5f:f4:7f:
         38:1a:7e:5a:c0:7c:9c:45:3c:4b:e0:e7:a5:c0:98:51:25:73:
         2e:46:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:45:54 2026 by rpki-client