Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8dbde97-51b6-3d32-b6b2-3b13f8d30e16.roa
File:                     e8dbde97-51b6-3d32-b6b2-3b13f8d30e16.roa (raw, json)
Hash identifier:          frEDZ/rJRDabfz3ld+ESXbGm4lz5tSqeFuS9+XWZu84=
Subject key identifier:   DC:4A:76:44:0E:E6:00:F9:27:98:13:58:86:66:BE:34:DB:8E:1C:C7
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584DE41B2DEE36009DC56C4F8700
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8dbde97-51b6-3d32-b6b2-3b13f8d30e16.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     10794
IP address blocks:        171.158.192.0/20 maxlen: 20
                          171.158.192.0/24 maxlen: 24
                          171.158.193.0/24 maxlen: 24
                          171.158.194.0/24 maxlen: 24
                          171.158.195.0/24 maxlen: 24
                          171.158.196.0/24 maxlen: 24
                          171.158.197.0/24 maxlen: 24
                          171.158.198.0/24 maxlen: 24
                          171.158.199.0/24 maxlen: 24
                          171.158.200.0/24 maxlen: 24
                          171.158.201.0/24 maxlen: 24
                          171.158.202.0/24 maxlen: 24
                          171.158.203.0/24 maxlen: 24
                          171.158.204.0/24 maxlen: 24
                          171.158.205.0/24 maxlen: 24
                          171.158.206.0/24 maxlen: 24
                          171.158.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:2d:ee:36:00:9d:c5:6c:4f:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=33163275-32f2-414a-84fa-ab2daad5afeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:f0:da:ec:7a:f2:ff:e7:53:29:bf:29:58:
                    0a:72:b8:03:37:d1:5f:30:6c:48:54:47:47:e6:7d:
                    dd:12:17:87:9d:83:b5:55:9e:ba:3b:02:6f:84:95:
                    cd:e0:f4:10:6d:91:0a:39:2b:0b:ba:44:70:43:8b:
                    c6:c4:74:34:7f:ff:88:67:f6:4b:8a:31:ff:30:a8:
                    fc:bf:94:4b:9b:65:06:14:b3:3c:b7:b6:91:8d:9a:
                    f5:88:45:27:22:4f:9b:00:17:b9:fd:f0:58:c7:6e:
                    09:ee:93:a4:4b:dc:1d:fd:52:13:8d:85:01:cb:42:
                    fe:e6:43:c8:44:f3:e4:b1:04:8e:57:cd:5c:c0:2b:
                    8c:59:f2:2e:16:5e:e6:bb:92:f0:5d:f0:69:0f:16:
                    82:e7:62:57:a7:78:7a:16:ad:a6:55:52:68:9a:57:
                    ab:46:16:7b:c0:a9:e8:22:be:b8:31:3e:db:47:3e:
                    52:5f:33:d1:f1:82:10:77:d0:4e:2a:1f:6e:86:b3:
                    68:79:45:6c:90:45:12:70:e8:6b:bc:2b:51:67:91:
                    b7:77:54:3e:49:c4:b5:78:69:d5:68:2e:97:86:a7:
                    ed:ff:e5:bb:d4:46:de:ad:49:d6:7f:a8:57:13:ee:
                    80:79:18:a4:a6:ff:32:6d:b5:43:7f:0c:a5:be:9e:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4A:76:44:0E:E6:00:F9:27:98:13:58:86:66:BE:34:DB:8E:1C:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8dbde97-51b6-3d32-b6b2-3b13f8d30e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.158.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5b:31:64:61:62:f0:df:90:93:ae:17:a9:bd:63:b3:fe:ff:
         70:60:d0:13:2c:df:81:f9:a3:02:ba:2e:3e:f0:9d:dc:d0:56:
         12:8f:84:27:89:bf:7d:32:cf:82:e0:15:bd:94:de:3d:84:25:
         39:67:7b:79:e9:cd:87:ad:db:8e:1b:4f:1d:5e:9f:98:58:61:
         ba:3a:22:22:e3:ba:22:10:14:04:2e:a3:d5:22:74:c0:17:06:
         05:9f:8b:33:62:d7:25:c6:6b:d6:d3:88:21:7a:d6:94:3a:b9:
         a2:8a:44:85:37:52:32:f8:cb:a1:3e:ad:21:4d:47:9a:4a:d8:
         fc:c9:4d:e6:73:08:35:4c:a3:70:46:61:c9:42:98:84:52:31:
         da:45:31:78:8e:01:80:7d:90:ac:de:16:71:12:b9:01:2e:32:
         b0:33:94:26:98:94:32:fa:44:47:24:ca:73:0e:58:ee:87:7d:
         ab:62:8f:d3:5a:e7:d8:87:a7:8a:86:f5:ae:6c:4c:82:47:69:
         3c:61:15:4a:c6:72:25:78:12:4c:5e:49:51:d4:46:31:e1:9a:
         a7:27:5c:ff:4d:78:30:c7:28:27:8d:93:c5:c6:86:c0:64:23:
         ae:bc:35:82:ea:9f:e6:1f:32:f6:c8:42:a6:25:7a:16:0f:bd:
         08:74:ce:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 18:31:36 2026 by rpki-client