Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d9ac39ab-192b-30f8-946c-eccd8e3285b7.roa
File:                     d9ac39ab-192b-30f8-946c-eccd8e3285b7.roa (raw, json)
Hash identifier:          TUZdz1JPso/y88fCklyQlAIWcSlYxLZlhJ/kaYJ3F2Y=
Subject key identifier:   93:03:69:01:03:C8:6B:4B:68:07:66:2D:9B:CB:E9:7A:C0:71:AF:7F
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584EA79742A4ABB5D778F826CB80
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d9ac39ab-192b-30f8-946c-eccd8e3285b7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401041
IP address blocks:        192.67.137.0/24 maxlen: 24
                          192.67.138.0/23 maxlen: 24
                          192.67.140.0/22 maxlen: 24
                          192.67.145.0/24 maxlen: 24
                          192.67.146.0/23 maxlen: 24
                          192.67.148.0/22 maxlen: 24
                          192.67.153.0/24 maxlen: 24
                          192.67.154.0/23 maxlen: 24
                          198.55.32.0/21 maxlen: 24
                          198.55.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:42:a4:ab:b5:d7:78:f8:26:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d1241957-0170-4e09-885b-81737cdd2abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:81:e1:b4:d8:75:f9:56:5a:06:bd:9e:50:68:
                    2f:23:87:a5:a9:52:0c:a5:d4:51:0c:ed:88:d9:85:
                    85:bf:b9:47:02:87:05:da:7f:72:3e:08:06:63:26:
                    c8:79:98:8e:58:c5:8c:f4:cb:8e:71:7d:04:23:29:
                    d0:df:5f:6f:9c:a1:37:f5:28:b3:e2:d5:34:80:2c:
                    30:fc:28:fd:a7:c2:4e:86:f6:54:2c:0f:3d:7a:53:
                    b3:af:c0:0e:f8:59:32:3a:7c:b3:d3:a0:35:66:fc:
                    ab:c1:f3:84:dc:40:f4:ba:53:dd:03:80:cf:71:ab:
                    44:c4:f3:9e:52:0a:81:76:4b:4b:94:18:bc:71:17:
                    7b:57:a3:bc:ff:5f:64:27:39:70:f9:c7:97:80:2d:
                    8f:bb:cf:1e:81:31:29:54:1a:03:0e:4c:4a:c8:b2:
                    a9:d1:7d:1f:25:25:9e:84:cc:5e:b3:4c:c3:41:6f:
                    28:16:52:c8:ad:08:46:49:4c:b4:3f:09:f0:c6:a8:
                    d9:af:0c:23:fd:7c:03:13:19:b3:3c:18:cf:64:d7:
                    e2:e9:9a:16:00:b4:c4:54:77:16:fd:d1:60:a4:11:
                    31:4b:1e:35:3e:7d:a1:19:c6:97:da:87:09:7d:63:
                    1a:cc:1c:8e:12:ed:32:61:00:55:62:7e:73:44:bc:
                    7c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:03:69:01:03:C8:6B:4B:68:07:66:2D:9B:CB:E9:7A:C0:71:AF:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d9ac39ab-192b-30f8-946c-eccd8e3285b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.137.0-192.67.143.255
                  192.67.145.0-192.67.151.255
                  192.67.153.0-192.67.155.255
                  198.55.32.0-198.55.41.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c5:7c:07:03:24:7c:56:e7:c5:ac:e1:c6:0e:25:3f:da:b3:
         b7:74:35:82:56:38:ee:4f:00:b5:59:2a:b4:ce:54:cc:e1:15:
         5a:5d:41:e0:5b:9d:f8:9c:87:63:55:b9:25:eb:4b:a7:55:22:
         d2:1c:5f:dc:f3:28:9d:7e:85:1d:8a:d2:04:6a:bb:f6:60:bc:
         68:b9:83:0a:e7:8d:34:5e:5f:fc:f5:48:f1:6c:fe:34:af:5e:
         dd:b8:88:62:06:7c:48:48:4a:03:a5:9b:f8:23:07:e9:41:31:
         72:dc:19:a6:75:38:fc:be:a5:29:42:08:60:fe:56:ea:62:28:
         95:71:92:1a:60:10:d3:c8:3c:0d:94:18:23:34:aa:ca:47:2d:
         4f:3c:22:6c:9f:5c:78:22:76:c0:37:e3:a3:b4:8e:0d:ff:bc:
         67:b2:d6:aa:7b:21:28:3f:1a:c1:dc:b7:35:13:2e:0c:bb:de:
         93:46:4f:6a:37:83:40:16:ee:99:29:44:bc:02:b7:5b:58:19:
         e0:55:b1:e8:c6:d3:5c:b5:ad:85:ca:e4:94:a1:78:ba:9a:f7:
         a0:fe:a8:7a:ee:61:00:2a:10:59:5b:da:02:de:5d:27:bc:97:
         e2:1f:3b:b1:4c:29:76:fb:5c:3e:0b:cc:17:48:82:c8:b8:e9:
         ab:83:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:41:31 2026 by rpki-client