Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8db84ec-fe5c-35eb-be66-545a28cddea7.roa
File:                     e8db84ec-fe5c-35eb-be66-545a28cddea7.roa (raw, json)
Hash identifier:          tlqGkjOV9VI+nCEn2WLNs2SkqMv1/1gpANZPErcL0bU=
Subject key identifier:   D9:4A:CD:DC:47:7C:2E:36:98:B9:78:AE:0B:8A:9C:4C:A8:8C:2A:B5
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584EA79110C6FA886B34BFE16280
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8db84ec-fe5c-35eb-be66-545a28cddea7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10794
IP address blocks:        171.161.128.0/20 maxlen: 20
                          171.161.128.0/23 maxlen: 23
                          171.161.128.0/24 maxlen: 24
                          171.161.129.0/24 maxlen: 24
                          171.161.130.0/24 maxlen: 24
                          171.161.131.0/24 maxlen: 24
                          171.161.132.0/22 maxlen: 22
                          171.161.132.0/24 maxlen: 24
                          171.161.133.0/24 maxlen: 24
                          171.161.134.0/24 maxlen: 24
                          171.161.135.0/24 maxlen: 24
                          171.161.136.0/22 maxlen: 22
                          171.161.136.0/24 maxlen: 24
                          171.161.137.0/24 maxlen: 24
                          171.161.138.0/24 maxlen: 24
                          171.161.139.0/24 maxlen: 24
                          171.161.140.0/24 maxlen: 24
                          171.161.141.0/24 maxlen: 24
                          171.161.142.0/24 maxlen: 24
                          171.161.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:10:c6:fa:88:6b:34:bf:e1:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=60c2f67b-1f84-4b21-b38f-ee6bfaef979e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:47:2d:b5:5d:db:4a:be:28:79:ee:8f:ff:d8:
                    a8:64:a6:46:31:0f:c5:07:d3:d7:44:7b:02:5c:16:
                    d9:32:4a:af:e9:f1:41:0b:8a:08:93:f3:ee:86:a4:
                    f9:d5:f5:52:df:be:c5:dc:f4:59:c8:7d:6b:37:ca:
                    6b:79:44:f1:cf:fe:ab:46:f5:54:a0:a2:02:46:38:
                    bb:44:e3:f0:2a:a0:91:6f:ef:2e:50:25:af:67:c3:
                    2f:7a:e4:ae:21:5e:dc:6c:b0:b0:d9:1a:5b:78:43:
                    30:5a:b8:55:a1:c1:42:09:e0:17:9e:9e:c1:83:bb:
                    e0:63:69:9b:35:fe:08:0e:e0:75:8e:93:10:0f:86:
                    ed:2e:ed:55:86:1f:c6:cf:f3:f0:f9:08:f5:ee:37:
                    bf:65:3f:70:dc:6e:88:09:31:1d:33:3a:a3:3d:0e:
                    da:b2:44:be:dc:64:df:f9:48:3e:cb:32:ea:82:7c:
                    b0:7d:3b:95:a3:3c:4f:f0:c6:54:a8:76:be:58:de:
                    c9:82:2f:50:1e:5a:1b:90:7b:e6:27:04:0f:8e:f4:
                    7b:47:70:04:1a:e5:79:f1:f6:d3:b1:70:bf:b7:c2:
                    3b:48:60:1e:df:e3:0e:17:e6:5c:4c:56:ad:46:68:
                    fd:b5:f3:88:b8:70:28:1d:09:2a:b6:1c:fe:51:26:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4A:CD:DC:47:7C:2E:36:98:B9:78:AE:0B:8A:9C:4C:A8:8C:2A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8db84ec-fe5c-35eb-be66-545a28cddea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:64:06:5f:79:eb:7d:d0:4e:fa:81:36:5c:ec:b9:50:3c:f1:
         ac:1f:b5:76:31:da:67:55:5d:82:41:b6:38:70:eb:3f:d0:dd:
         b9:29:da:0c:ed:9f:5c:7d:2c:a8:d1:2f:c6:e3:da:41:bd:58:
         37:43:f7:2e:d7:44:22:ca:38:7f:8b:3a:16:5d:8a:7e:68:5d:
         cf:86:0a:1b:d9:f7:3f:26:df:a0:f4:23:8c:a2:e6:27:62:a2:
         ad:f2:72:28:5a:1c:74:40:d2:9c:ec:ab:5d:3f:49:ed:2d:18:
         7d:10:f8:b0:d4:d3:85:e2:95:b0:dd:ca:e7:80:c4:99:0b:1e:
         6a:84:75:43:27:93:fe:f6:48:10:c0:f2:d4:e6:03:a8:01:89:
         a0:30:95:53:21:5b:c0:2c:7c:05:3b:f4:9b:1a:91:82:7b:fe:
         7a:84:8f:2f:2f:bf:aa:0b:62:a9:c8:8c:a3:cf:61:28:6e:ab:
         c9:41:73:72:8a:49:58:0f:bc:fe:27:b8:e3:b0:95:e9:7f:ef:
         fe:8b:a6:9e:fa:a2:23:65:50:6c:d8:cd:78:9a:bb:e6:eb:4e:
         3a:a6:e4:d6:0f:a9:6f:0c:76:44:0d:af:1c:69:eb:74:b7:79:
         a2:2d:e7:a4:59:7f:62:54:af:09:60:1b:93:64:38:a2:19:5f:
         3b:44:cd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:51:56 2026 by rpki-client