Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa
File:                     4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa (raw, json)
Hash identifier:          PWFuy9gv9+iSyN+lhJbJMubtXLQRTlh9BEX6RNTUsrI=
Subject key identifier:   B9:CE:AC:BF:8B:5E:16:EC:6E:12:4E:EE:3D:E5:66:F3:86:B4:36:0A
Certificate issuer:       /CN=b45f6374-6cde-4681-a96a-9233e2715465
Certificate serial:       010D0C9F4328584EB2B1C16CCEB432B14E802DA0
Authority key identifier: 12:39:E2:63:A9:4F:E4:5A:B7:C9:13:A2:AC:35:02:79:4A:5E:B5:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     33044
IP address blocks:        192.40.240.0/22 maxlen: 24
                          192.122.206.0/24 maxlen: 24
                          199.7.136.0/22 maxlen: 24
                          199.91.112.0/22 maxlen: 24
                          199.91.252.0/22 maxlen: 24
                          205.211.166.0/23 maxlen: 24
                          2606:8900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/b45f6374-6cde-4681-a96a-9233e2715465.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/b45f6374-6cde-4681-a96a-9233e2715465.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c1:6c:ce:b4:32:b1:4e:80:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45f6374-6cde-4681-a96a-9233e2715465
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=66df0854-edbd-4ae0-ad70-85faf3b6533f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f1:50:fa:d2:c5:09:59:f7:db:31:cf:ff:2e:
                    d1:1c:74:38:3b:1c:a5:4b:e8:a0:3b:39:e3:c3:48:
                    11:0f:5e:c7:43:55:1b:56:cb:05:0d:f2:00:db:4b:
                    1f:67:00:24:03:18:92:8a:13:34:22:d5:70:5e:88:
                    46:4c:ca:8f:bb:fd:54:27:4e:c5:94:4d:6b:b2:d0:
                    1c:6d:ee:e0:4e:f1:76:56:88:e2:7d:1b:f8:5e:e6:
                    5c:ef:86:18:17:31:d2:40:d9:e2:86:bd:14:24:94:
                    44:c7:8b:92:93:64:63:e0:2d:21:c8:b5:de:cc:2b:
                    f4:2f:d4:ec:26:b0:0d:19:b5:a1:15:b3:83:62:81:
                    b8:e2:e4:df:f8:02:b0:4b:b6:e9:dc:65:3e:38:79:
                    21:55:4a:e4:3c:39:ea:e3:bf:f8:45:da:f2:b0:b6:
                    58:04:4c:73:3a:ca:da:dd:4d:c0:8f:35:8c:4e:b4:
                    13:1c:70:e7:7a:00:d7:e5:95:63:c1:5f:34:2e:5c:
                    a3:81:8e:2d:a2:7d:52:52:ed:60:75:19:66:1d:cb:
                    9b:db:c8:bb:29:5d:46:37:94:41:4c:97:16:37:65:
                    90:21:e2:f0:0e:e7:20:66:ba:e6:c0:19:61:2e:da:
                    1f:b3:ec:23:1b:67:b6:f0:6f:d8:22:8e:56:42:8f:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CE:AC:BF:8B:5E:16:EC:6E:12:4E:EE:3D:E5:66:F3:86:B4:36:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/b45f6374-6cde-4681-a96a-9233e2715465.crl

            X509v3 Authority Key Identifier:
                keyid:12:39:E2:63:A9:4F:E4:5A:B7:C9:13:A2:AC:35:02:79:4A:5E:B5:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.40.240.0/22
                  192.122.206.0/24
                  199.7.136.0/22
                  199.91.112.0/22
                  199.91.252.0/22
                  205.211.166.0/23
                IPv6:
                  2606:8900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:c9:f8:31:30:95:3b:fd:ba:1a:84:7d:3b:38:64:d5:bf:
         2d:63:37:66:8e:1f:da:5f:a1:fa:e5:b0:96:70:af:01:2b:6a:
         2c:8d:7d:b8:47:1a:b2:95:f2:8a:c0:91:31:ca:1b:b2:ff:5e:
         75:eb:4f:5e:27:0b:19:b7:8e:a9:92:83:cf:91:92:9d:ea:04:
         50:12:9e:3f:87:19:aa:71:cf:09:75:fb:0e:47:f2:1b:54:78:
         ca:3d:4d:1f:6f:22:77:22:a7:94:c0:5d:7c:34:09:97:74:27:
         0b:7e:8d:57:ee:2e:0b:45:28:4a:99:30:9c:5b:b4:f8:a5:fc:
         0f:24:c6:49:cc:8a:f7:69:4e:80:58:48:64:e4:f7:c0:a3:ce:
         73:a5:6a:7e:55:bd:f1:17:24:a7:0e:16:56:9f:a5:4a:41:a4:
         ca:59:ce:9f:75:ea:07:5e:ab:14:f8:34:f9:a8:ec:13:89:be:
         c4:34:9a:4f:dd:ab:58:26:e6:06:03:9d:e5:e4:63:cc:ac:13:
         82:68:a7:8b:bc:e0:89:a6:c1:e3:25:54:fd:40:4f:9c:f8:35:
         55:33:60:46:f1:29:b9:bd:6e:f4:65:29:df:be:dc:2e:67:8c:
         d8:5e:7c:3b:b6:58:00:c5:e5:1e:ca:64:52:19:1f:94:14:21:
         da:dc:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:19:56 2026 by rpki-client