Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/669dba78-92b3-31fa-a873-bec03f8aecb6.roa
File:                     669dba78-92b3-31fa-a873-bec03f8aecb6.roa (raw, json)
Hash identifier:          sWqQKVMelEXNgQB9zFRLPTgW4iCc9HMi2flI65hhX/o=
Subject key identifier:   96:D5:3A:FD:BF:0C:1B:BB:E4:F1:C1:01:46:10:30:38:2C:72:39:42
Certificate issuer:       /CN=05ceb199-4ec7-4d16-9739-22face258c65
Certificate serial:       010D0C9F4328584F0ED237C30F405BCE000617A0
Authority key identifier: 25:A3:6A:9B:CE:3D:CB:6F:93:56:D2:97:42:07:51:16:5C:E9:9D:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/669dba78-92b3-31fa-a873-bec03f8aecb6.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     32073
IP address blocks:        205.222.0.0/17 maxlen: 17
                          205.222.14.0/24 maxlen: 24
                          205.222.128.0/18 maxlen: 18
                          205.222.192.0/19 maxlen: 19
                          205.222.224.0/20 maxlen: 20
                          205.222.240.0/21 maxlen: 21
                          205.222.248.0/22 maxlen: 22
                          205.222.248.0/24 maxlen: 24
                          205.222.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:37:c3:0f:40:5b:ce:00:06:17:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ceb199-4ec7-4d16-9739-22face258c65
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=443e2ce6-ae16-407a-8237-26da1b1c31be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:90:14:26:dc:22:dc:fb:0b:1e:f7:d5:ca:
                    bd:0b:dd:08:1d:c5:74:9e:fa:94:e4:5f:7b:ca:4e:
                    8a:aa:dc:b2:78:26:29:12:f7:2a:31:2b:9b:53:74:
                    bc:7c:be:33:87:d2:70:c4:63:1e:95:f3:02:5b:24:
                    47:64:d7:ea:98:14:07:f9:4c:e6:f2:3e:25:4e:09:
                    06:0c:d1:44:fe:e6:ff:ff:13:67:9d:36:7d:b2:0c:
                    eb:a1:01:21:ca:e4:8a:79:14:ee:91:fd:62:ec:ba:
                    90:7b:03:00:ba:dd:b2:96:1b:7c:48:44:6f:83:7f:
                    46:89:77:57:4f:6c:ba:ee:6d:d2:05:3b:1c:28:c4:
                    c0:64:c2:ef:88:02:36:01:47:b8:f3:01:be:02:9f:
                    a2:a4:4f:a5:97:bb:93:2c:74:76:13:98:86:10:a1:
                    7d:83:9d:5c:32:a6:f9:c9:b5:be:ea:67:40:ae:d3:
                    5e:d3:a6:d2:ab:f5:80:a3:51:22:47:5d:57:97:41:
                    b3:18:0b:3b:44:69:8a:85:30:93:51:20:d5:12:55:
                    bf:b6:44:d6:c7:bb:ec:e7:f3:d8:78:6b:0a:a1:f5:
                    80:bf:50:5e:55:38:85:ad:f1:26:fa:07:f5:ba:8d:
                    91:8f:d9:59:81:0c:36:9b:db:cf:e4:d6:d5:e0:d9:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D5:3A:FD:BF:0C:1B:BB:E4:F1:C1:01:46:10:30:38:2C:72:39:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/669dba78-92b3-31fa-a873-bec03f8aecb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.crl

            X509v3 Authority Key Identifier:
                keyid:25:A3:6A:9B:CE:3D:CB:6F:93:56:D2:97:42:07:51:16:5C:E9:9D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.222.0.0-205.222.251.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:92:0a:1c:1c:cf:f4:32:14:f7:9d:98:8f:3d:65:e8:c3:2e:
         9e:c4:76:7b:72:b6:af:84:de:82:f2:55:01:2c:b6:37:44:fc:
         eb:60:6f:73:4d:bd:2d:35:fb:b9:15:ce:ed:81:b5:8f:0e:f8:
         a1:78:6c:7a:ba:e6:8b:92:10:a8:b6:a4:08:7c:8b:0d:dc:d8:
         79:76:94:84:65:2e:ed:30:51:44:9e:79:8a:d7:30:82:59:f1:
         91:a8:b9:f1:41:3c:b2:de:a7:03:d3:96:e2:90:e1:e8:01:65:
         52:78:44:44:fc:29:cd:9a:73:24:24:07:4d:b2:86:0a:11:4e:
         54:a1:5e:0a:20:6b:e7:38:6b:29:d6:68:0a:fb:7e:dc:09:63:
         a4:d4:dc:95:23:11:26:68:7a:c3:ee:49:15:d4:ab:d9:64:be:
         50:2a:0d:03:af:00:0b:7d:d5:76:72:fe:e9:7f:6a:24:22:34:
         b0:26:68:c5:c3:e8:82:55:21:4e:12:d8:8b:f6:c9:bb:ff:9f:
         64:cd:0b:d8:5f:be:71:44:84:04:19:3b:43:0e:f9:75:f4:a7:
         ab:a3:d6:af:5b:1f:c4:63:8f:d9:0e:be:e9:19:b4:1e:da:11:
         6a:32:6a:37:fb:e0:a5:fb:76:71:92:5e:8c:d6:da:9b:a6:b7:
         e8:15:7a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:19:50 2026 by rpki-client