Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/4e337377-925e-334f-8f27-e615031587b5.roa
File:                     4e337377-925e-334f-8f27-e615031587b5.roa (raw, json)
Hash identifier:          MaDVrLJFec41gD879F0EaSB2mibWFnePdPYPmV7+4EM=
Subject key identifier:   5B:7C:13:BD:2C:3B:87:21:07:DD:54:DE:D5:22:40:D8:1E:45:4A:19
Certificate issuer:       /CN=6b94ef6e-7ebc-4239-94f3-7165ed163af5
Certificate serial:       010D0C9F4328584EFB47616740DDBE70AAF14080
Authority key identifier: A4:8C:DF:01:15:04:7B:EA:BB:5F:6C:F7:FC:0A:5D:7D:AA:B8:1C:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/4e337377-925e-334f-8f27-e615031587b5.roa
Signing time:             Fri 28 Aug 2026 01:00:12 +0000
ROA not before:           Fri 28 Aug 2026 01:00:12 +0000
ROA not after:            Thu 26 Nov 2026 02:00:12 +0000
asID:                     397903
IP address blocks:        137.220.8.0/21 maxlen: 21
                          172.83.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fb:47:61:67:40:dd:be:70:aa:f1:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b94ef6e-7ebc-4239-94f3-7165ed163af5
        Validity
            Not Before: Aug 28 01:00:12 2026 GMT
            Not After : Nov 26 02:00:12 2026 GMT
        Subject: CN=4d49117d-86e7-48a3-bd3d-1e50cc8dd7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:74:42:ae:ce:20:73:3b:e1:11:5e:61:61:
                    45:54:34:8e:19:7f:b4:4b:4f:ea:ee:81:15:da:56:
                    e1:b2:0f:97:f7:f5:6e:21:39:70:9f:e4:93:14:04:
                    e5:cb:27:89:ac:d5:51:ec:9a:f0:17:84:82:79:5b:
                    f9:ad:bb:ab:a3:03:de:4d:72:33:05:0a:6b:d7:38:
                    85:af:02:38:ff:e9:77:da:ef:a9:31:95:1c:ab:47:
                    fc:10:3d:74:57:e1:1b:e6:22:f2:87:be:be:f3:99:
                    2e:f0:4f:85:dc:e7:80:ad:19:61:af:40:b7:af:f7:
                    4b:22:86:50:02:9b:6c:b9:2d:c4:19:00:99:76:b6:
                    bc:1b:39:ab:eb:fe:bb:f2:e4:77:47:99:7a:b1:ae:
                    3f:04:ac:be:74:2f:47:de:4a:6b:d8:97:74:fb:11:
                    71:d2:3d:9c:ce:62:80:b5:91:2e:da:86:73:e2:02:
                    7a:25:15:46:32:40:61:5c:c4:c7:a8:83:db:75:d0:
                    d9:32:84:57:6d:18:02:9f:fe:e5:6f:88:cd:3e:51:
                    51:c9:1a:72:27:4b:35:40:2a:67:ec:6e:d3:df:da:
                    e8:d8:40:2c:7e:22:e5:1b:e8:d9:89:9d:9f:57:c5:
                    c0:82:eb:89:70:a5:fe:d5:8c:81:0d:c1:3f:42:3b:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7C:13:BD:2C:3B:87:21:07:DD:54:DE:D5:22:40:D8:1E:45:4A:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/4e337377-925e-334f-8f27-e615031587b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.crl

            X509v3 Authority Key Identifier:
                keyid:A4:8C:DF:01:15:04:7B:EA:BB:5F:6C:F7:FC:0A:5D:7D:AA:B8:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.220.8.0/21
                  172.83.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:97:09:90:d2:ac:c2:c7:e0:cd:c7:8a:2f:1f:86:8e:36:
         10:17:db:d5:1a:b7:1a:fc:f8:c9:f2:3f:b0:ab:b8:d4:97:31:
         cb:94:f6:94:34:01:6a:a9:ab:3a:df:b4:7b:ed:93:45:ed:57:
         cb:63:95:d9:b0:a6:c1:8c:80:06:c0:f4:9c:33:dd:70:70:d2:
         6d:c5:81:be:d3:4a:a8:db:c3:12:77:fd:bd:8d:68:0b:af:35:
         63:8e:43:c1:a8:69:2a:52:01:7d:51:a5:53:fb:02:62:e4:49:
         f8:c4:e6:da:d4:90:6a:6e:0a:f8:08:43:85:91:e8:60:a0:ff:
         cd:54:62:d3:07:13:5b:f9:57:29:9a:99:79:2e:d8:9c:76:96:
         d5:81:48:ba:03:0f:66:ca:b9:de:ef:20:6a:c8:53:1e:2e:0b:
         6d:82:27:8c:1a:db:2e:eb:fd:d8:72:3b:fd:5e:e1:e9:d8:54:
         48:21:08:d4:04:be:7e:a8:8e:cc:53:12:aa:33:30:bf:50:7c:
         2d:86:6f:a3:a0:a9:fc:5a:70:96:26:02:01:bd:7a:92:ac:d3:
         55:96:2e:8b:d6:89:83:41:6f:31:9f:49:a7:53:4f:fb:cc:99:
         2b:9c:c2:c7:56:f3:6f:89:d3:5b:53:5a:ef:ed:e9:83:07:65:
         dc:c8:04:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:21 2026 by rpki-client