Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa
File:                     0771c23b-83cc-37a6-9f7f-a7eae9053198.roa (raw, json)
Hash identifier:          asRmYJkiyiWv1YVgCfS6ZEp6wbIQcg2SBS9vqsUVEsc=
Subject key identifier:   0F:61:8F:98:29:16:E9:BA:2D:3F:AF:6E:C6:88:5F:4B:67:2B:68:A3
Certificate issuer:       /CN=8753160d-30e1-48b1-afdb-394389cbcc81
Certificate serial:       010D0C9F4328584ECBD1CBA34A5B957FE1C80000
Authority key identifier: F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     21723
IP address blocks:        162.211.192.0/21 maxlen: 24
                          162.222.120.0/21 maxlen: 24
                          162.246.128.0/22 maxlen: 24
                          162.255.248.0/21 maxlen: 24
                          172.85.80.0/21 maxlen: 24
                          172.103.48.0/20 maxlen: 24
                          198.1.56.0/21 maxlen: 24
                          199.91.80.0/21 maxlen: 24
                          199.192.184.0/21 maxlen: 24
                          199.193.88.0/21 maxlen: 24
                          207.232.96.0/19 maxlen: 24
                          208.85.212.0/22 maxlen: 24
                          209.207.64.0/18 maxlen: 24
                          216.21.128.0/19 maxlen: 24
                          216.40.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:cb:a3:4a:5b:95:7f:e1:c8:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8753160d-30e1-48b1-afdb-394389cbcc81
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=b5987204-714f-44c3-aa1e-8c58d49f0a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:87:4a:d7:41:ae:67:7d:88:83:15:24:34:
                    af:d6:42:cb:49:a9:f9:01:83:fa:46:30:19:98:f5:
                    85:5a:b8:d4:44:42:14:d0:87:4a:8c:2a:05:12:3e:
                    90:1d:41:f5:c3:bc:e1:1f:9f:4f:a8:75:4e:b1:fe:
                    db:41:65:5d:ca:9c:8e:f2:6f:75:a9:e9:ee:a7:bb:
                    cc:b7:00:ca:ad:1a:e6:b1:d1:ee:e4:37:93:39:cb:
                    09:d7:cc:a4:8e:f3:24:55:16:13:0f:dd:01:46:39:
                    14:ce:b5:bd:a8:7f:5f:c5:ab:de:70:bd:7f:8b:06:
                    22:14:06:50:4f:42:0c:74:0d:73:8e:c3:ff:67:87:
                    32:c5:33:4d:80:c6:33:d8:c0:36:6f:ac:d4:a6:43:
                    87:ae:61:db:c9:e4:29:b8:21:26:08:93:a9:91:85:
                    f3:dd:6c:e8:8a:ac:45:89:12:c1:06:8c:ab:fc:36:
                    b2:6e:ba:eb:d7:72:cc:91:8b:be:c7:3b:39:c2:73:
                    62:fc:9a:2f:8a:74:bd:c8:b6:48:f2:4a:ff:ca:bc:
                    f3:c6:cb:07:3c:27:45:84:40:a9:d3:61:41:d5:ab:
                    a8:e7:c5:a8:30:9c:c9:16:bd:84:3a:9a:8a:f5:05:
                    03:c5:81:bd:c2:c2:08:d0:68:c7:0e:3d:27:56:db:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:61:8F:98:29:16:E9:BA:2D:3F:AF:6E:C6:88:5F:4B:67:2B:68:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl

            X509v3 Authority Key Identifier:
                keyid:F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.192.0/21
                  162.222.120.0/21
                  162.246.128.0/22
                  162.255.248.0/21
                  172.85.80.0/21
                  172.103.48.0/20
                  198.1.56.0/21
                  199.91.80.0/21
                  199.192.184.0/21
                  199.193.88.0/21
                  207.232.96.0/19
                  208.85.212.0/22
                  209.207.64.0/18
                  216.21.128.0/19
                  216.40.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d3:96:f3:14:2b:5d:7f:b4:cd:e2:f9:63:56:ef:5d:0d:c3:
         5d:7f:09:ee:66:0a:43:a3:63:d0:c0:f0:b9:62:73:a1:45:e3:
         f0:0d:b8:e1:6a:9b:7a:1b:35:f8:72:2f:8c:22:de:85:f1:76:
         a9:2f:ca:db:d4:7d:75:3b:09:c6:af:ae:9c:10:72:5c:ca:f8:
         11:ba:2e:01:7b:d4:cf:4d:b4:a9:2d:e2:6d:94:6f:db:92:60:
         06:69:53:f4:56:59:46:64:b5:6a:e2:ed:90:dd:71:c4:74:46:
         79:64:8c:e3:28:e6:74:94:09:99:da:2a:af:27:d8:29:28:1d:
         e7:59:b8:57:4d:da:3b:7a:d4:11:79:e7:59:a1:60:56:9a:e9:
         81:cb:b4:d1:e3:e9:a5:f0:18:79:06:8e:2c:b6:8a:b9:04:10:
         d5:c6:ee:ff:e5:19:b6:ac:0a:11:b8:5a:9a:69:f0:dc:89:82:
         3b:17:f6:b4:91:bb:6c:db:c6:36:55:68:cb:f8:bd:38:ae:86:
         fd:03:5a:c5:a9:d6:26:e8:28:34:aa:47:4e:00:fb:67:cf:f1:
         2a:ad:d2:f7:d3:9f:9d:b7:62:42:46:a0:5d:d5:05:f0:dc:ba:
         4e:9d:11:71:f0:0b:99:01:c3:c6:b3:eb:65:87:f8:c9:cb:4a:
         1a:9d:36:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:16:01 2026 by rpki-client