Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/9af30d6e-07ee-3462-80f0-bd8ecaad51ce.roa
File:                     9af30d6e-07ee-3462-80f0-bd8ecaad51ce.roa (raw, json)
Hash identifier:          LkPamfN64+vswIQcEJYj2RbsMMQTn+r+orhKQrWWD6Y=
Subject key identifier:   B5:59:AC:0A:F6:FF:93:4B:19:82:1E:76:79:85:96:D6:DA:40:A2:C5
Certificate issuer:       /CN=ca3bedc6-e937-4195-9e25-d048122e2f60
Certificate serial:       010D0C9F4328584F0AEE92D4FEFE8A5BE9FD34E0
Authority key identifier: AB:2C:FD:17:8D:D9:EE:A8:16:10:19:82:D1:00:56:11:0C:28:75:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/9af30d6e-07ee-3462-80f0-bd8ecaad51ce.roa
Signing time:             Wed 02 Sep 2026 15:34:14 +0000
ROA not before:           Wed 02 Sep 2026 15:34:14 +0000
ROA not after:            Tue 01 Dec 2026 16:34:14 +0000
asID:                     22950
IP address blocks:        128.233.0.0/16 maxlen: 16
                          192.75.63.0/24 maxlen: 24
                          192.75.171.0/24 maxlen: 24
                          192.139.75.0/24 maxlen: 24
                          192.139.76.0/24 maxlen: 24
                          198.169.12.0/22 maxlen: 24
                          198.169.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:ee:92:d4:fe:fe:8a:5b:e9:fd:34:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3bedc6-e937-4195-9e25-d048122e2f60
        Validity
            Not Before: Sep  2 15:34:14 2026 GMT
            Not After : Dec  1 16:34:14 2026 GMT
        Subject: CN=e505e3af-b248-4711-904a-1d6d67616ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:a2:c7:cf:29:fd:04:82:1b:78:63:ec:8e:
                    fa:2b:b7:34:de:bb:e1:75:cd:9d:40:d6:48:f5:0d:
                    28:04:aa:f6:dc:86:a4:1d:fe:af:3f:f4:b8:60:87:
                    a2:d7:2c:1d:ac:c6:fe:ca:03:f6:32:f3:85:31:dc:
                    ed:42:f9:1b:aa:bf:74:aa:43:51:1e:99:3e:3f:b3:
                    43:e3:83:e8:79:83:dd:f8:5b:21:10:9b:d4:72:7a:
                    0f:9a:b2:70:af:c5:b9:a5:4d:b0:01:aa:d5:83:4b:
                    c0:d1:24:21:aa:e0:a7:15:8d:2b:fb:dd:9e:d0:d1:
                    b2:0b:ff:64:df:91:ee:e4:8d:27:78:ce:49:35:94:
                    4e:c8:71:dc:5c:20:b3:64:88:68:51:5d:84:b7:85:
                    5c:e5:a3:97:3d:da:1a:40:0c:95:4c:96:af:96:3b:
                    45:26:20:9d:18:9e:51:ff:da:ee:90:da:3f:a7:66:
                    7e:1e:90:a1:d9:64:b1:e8:1b:cf:7f:38:30:b6:d9:
                    31:b2:30:ff:51:81:6f:6c:5e:01:06:a7:18:e4:fa:
                    20:3e:65:6d:d0:10:86:1d:3d:f6:e8:bd:17:7f:ff:
                    8a:b2:5a:5e:99:8e:59:e2:90:3e:56:2b:d4:b8:2a:
                    9c:f3:7b:55:06:81:1b:69:c8:a6:ad:75:00:ec:36:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:59:AC:0A:F6:FF:93:4B:19:82:1E:76:79:85:96:D6:DA:40:A2:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/9af30d6e-07ee-3462-80f0-bd8ecaad51ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.crl

            X509v3 Authority Key Identifier:
                keyid:AB:2C:FD:17:8D:D9:EE:A8:16:10:19:82:D1:00:56:11:0C:28:75:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.233.0.0/16
                  192.75.63.0/24
                  192.75.171.0/24
                  192.139.75.0-192.139.76.255
                  198.169.12.0-198.169.19.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:39:22:2e:8f:41:2f:65:11:43:a5:ec:47:c7:98:dd:6f:a6:
         3e:b4:9e:3b:3b:bb:6a:ff:a7:57:0f:93:9f:df:7e:8e:47:28:
         01:c9:75:09:47:c2:c4:f8:b6:05:0d:a2:00:32:47:46:b3:90:
         8f:ad:32:d3:32:dd:48:bd:8d:3a:bb:9b:43:4f:2b:1b:1a:16:
         77:5e:14:06:79:b1:ac:1f:a7:2c:a2:48:4f:16:62:79:ce:aa:
         05:a9:0a:95:b8:70:7e:ac:05:7a:4d:f0:62:3a:0c:0e:48:b1:
         e5:ce:2e:57:e3:59:e6:e1:73:c8:9c:17:36:df:01:83:60:6c:
         2c:6c:95:86:e6:2d:77:59:b3:fc:86:db:7b:53:8e:34:67:d8:
         fb:65:ea:f5:9f:cc:be:95:6d:48:0f:ed:e4:6b:3e:60:63:78:
         ee:e4:25:ff:c7:69:ae:2e:4a:2f:c4:b6:08:89:a7:1a:d1:0e:
         fa:66:d7:7b:cc:e7:b4:0f:7d:ef:0d:73:c0:90:30:60:5c:2c:
         1a:9c:2d:cf:7b:af:4f:f4:7f:51:7e:c3:c2:44:f3:90:0d:0a:
         be:a8:50:15:b7:e2:b5:c3:64:97:5e:13:34:70:90:bb:75:d2:
         bf:82:a7:37:b3:f2:fd:95:4f:94:c4:63:9d:14:16:aa:74:08:
         65:98:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 15:44:14 2026 by rpki-client