Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa
File:                     5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa (raw, json)
Hash identifier:          33pLAjyNxx31ovn6LuHrb3HyPk03RWZppBDQnnQETg4=
Subject key identifier:   EF:80:03:95:31:11:60:F9:6D:35:A7:24:D8:89:30:AF:FF:70:4E:08
Certificate issuer:       /CN=d0125580-9deb-4d15-b1e7-1a6f7958b187
Certificate serial:       010D0C9F4328584ED861EE1E84D354C0E740DED0
Authority key identifier: 27:1E:F7:AC:7E:4E:7A:FE:50:4B:09:66:D3:CC:F4:B5:E6:48:A9:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     396317
IP address blocks:        104.193.40.0/22 maxlen: 22
                          104.193.40.0/24 maxlen: 24
                          104.193.40.0/27 maxlen: 27
                          104.193.40.32/27 maxlen: 27
                          104.193.40.64/27 maxlen: 27
                          104.193.40.96/27 maxlen: 27
                          104.193.40.128/27 maxlen: 27
                          104.193.40.160/27 maxlen: 27
                          104.193.40.192/27 maxlen: 27
                          104.193.40.224/27 maxlen: 27
                          104.193.41.0/24 maxlen: 27
                          104.193.42.0/23 maxlen: 23
                          172.110.136.0/22 maxlen: 22
                          2605:3c40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:ee:1e:84:d3:54:c0:e7:40:de:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0125580-9deb-4d15-b1e7-1a6f7958b187
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=a7b2e681-1003-4a9c-9bb6-356fcf7cff4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:57:fe:a9:a3:8d:58:13:2e:83:5f:c1:ac:38:
                    18:ad:d3:36:5c:6a:f3:1a:7d:48:5e:ac:b7:bb:38:
                    bf:09:47:f7:3e:63:2f:ed:de:bd:32:4a:56:11:33:
                    62:98:83:88:6f:4c:45:af:4a:68:5a:9e:95:18:4e:
                    00:9a:9d:c4:21:b8:96:65:3a:4b:a9:95:c4:f9:47:
                    f8:58:12:7e:f8:5f:35:f9:14:61:c0:42:1c:86:9c:
                    6a:da:a6:1b:6b:8f:fb:67:61:6c:0a:31:84:1d:0a:
                    95:84:bb:95:f3:54:f3:0c:95:03:bd:84:a4:b6:e8:
                    ac:41:76:e4:17:36:69:bc:ad:38:3a:69:45:ff:61:
                    65:51:78:5b:4d:23:9c:a7:47:f9:39:f0:54:af:26:
                    e7:79:4c:52:8d:a2:fc:fa:ce:a5:7e:ea:a9:40:c2:
                    f4:7d:bf:84:0a:56:dd:a1:5f:32:4c:f6:ce:7d:66:
                    f7:be:3a:6b:0e:aa:bc:cc:1f:a0:28:3f:91:e4:cf:
                    ed:c2:32:da:9c:64:5e:4d:ac:e3:73:10:26:34:61:
                    e6:64:26:53:96:56:80:11:3e:15:b5:da:4c:b3:b4:
                    70:f1:51:b8:d8:5e:a1:1f:91:c9:ac:4d:16:2d:be:
                    ec:9e:81:63:2e:34:2d:39:d8:5e:58:c5:5f:b8:49:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:80:03:95:31:11:60:F9:6D:35:A7:24:D8:89:30:AF:FF:70:4E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.crl

            X509v3 Authority Key Identifier:
                keyid:27:1E:F7:AC:7E:4E:7A:FE:50:4B:09:66:D3:CC:F4:B5:E6:48:A9:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.40.0/22
                  172.110.136.0/22
                IPv6:
                  2605:3c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:2b:47:8d:24:66:ba:fc:9d:5a:0a:29:f6:07:06:1a:13:1d:
         5a:34:42:98:af:4d:94:47:c4:3f:b4:52:9d:90:1c:87:88:f5:
         cb:22:32:3a:0c:33:09:58:5f:42:ad:c3:b3:09:ad:44:d0:04:
         1a:2b:7b:37:f6:83:fe:f2:3e:a1:57:8b:a6:2e:2c:70:43:e4:
         b2:0e:d3:18:c2:24:fb:6d:a6:7b:46:58:28:8e:b9:a2:62:ea:
         4d:fd:87:b0:bd:80:b8:af:27:a7:33:2f:b2:71:55:99:86:54:
         04:a5:25:a5:37:b0:c2:50:a6:16:b3:4e:e9:25:d4:da:40:ad:
         84:42:80:e7:75:6c:94:b2:ec:c0:49:a8:3f:0b:60:94:92:d5:
         34:bb:8e:15:27:2d:4f:86:57:9e:1f:28:ed:dc:18:3b:b6:82:
         03:d8:e4:46:1c:cf:dc:b0:50:2f:4c:41:15:2f:93:d9:63:23:
         d9:3a:fa:29:b1:b5:60:c4:06:95:b6:a7:c0:5a:cb:d4:4c:42:
         93:8b:a4:ef:38:b7:43:35:fb:51:5d:37:8d:d1:b6:6d:f7:b6:
         5f:73:aa:84:9f:e8:12:7c:38:cb:95:77:73:bd:27:b2:ad:ee:
         de:4c:fa:18:85:40:b5:99:12:9e:1e:0e:33:3b:ef:69:f2:52:
         c8:55:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:11:26 2026 by rpki-client