Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/558204fb-872b-3cf3-bc34-97254c313c52.roa
File:                     558204fb-872b-3cf3-bc34-97254c313c52.roa (raw, json)
Hash identifier:          fyh5qEduBSTnEneATmiBbPnAfgOeKchjSkGpv5Tq8K8=
Subject key identifier:   9E:95:0B:59:D2:DA:C6:FF:B0:E8:CE:A0:85:C0:12:41:8C:2F:40:3D
Certificate issuer:       /CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
Certificate serial:       010D0C9F4328584EC20C7D822AE8255DF0839860
Authority key identifier: 07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/558204fb-872b-3cf3-bc34-97254c313c52.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     36295
IP address blocks:        162.254.8.0/22 maxlen: 24
                          192.153.46.0/24 maxlen: 24
                          192.245.118.0/24 maxlen: 24
                          208.93.220.0/22 maxlen: 24
                          209.141.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7d:82:2a:e8:25:5d:f0:83:98:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=fdc7f980-7631-4b79-93ef-f3f11ff5c288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ca:6d:c2:56:c3:79:78:30:de:3d:32:91:ba:
                    93:ab:5e:0a:c7:13:d2:46:a9:06:09:9d:dc:58:2a:
                    6c:4c:c3:dc:66:1d:da:46:10:99:72:b6:1a:5d:0f:
                    a7:dc:12:8b:75:62:a0:5e:b5:4d:17:8c:57:94:3c:
                    08:7d:b2:00:27:d9:45:96:09:dc:c5:88:a0:79:5b:
                    a0:46:03:9c:09:bf:3e:d3:69:10:8c:26:06:83:48:
                    b4:9e:13:27:e2:54:ec:e9:04:af:99:8c:6f:9c:30:
                    9e:cf:08:a2:b4:43:2c:10:d2:55:07:16:de:fa:3b:
                    38:8b:c6:3d:1a:e5:5c:24:0d:bc:6f:cf:32:d4:b6:
                    9a:05:20:fb:80:af:1b:19:09:2b:59:7f:7b:ea:0b:
                    bf:65:5a:47:c4:33:20:1c:eb:df:23:9e:fd:b4:c0:
                    70:a7:64:20:50:0c:68:8e:ab:d4:3a:12:f4:de:c0:
                    de:17:15:56:e6:3c:12:98:5f:c4:41:df:e3:61:b1:
                    e7:49:bc:b0:9a:23:70:68:0e:5d:c2:6c:3a:b8:2b:
                    34:78:cf:91:34:df:0c:0a:f6:6d:e8:ef:a2:be:02:
                    ab:d8:9f:71:7c:b9:ea:bf:9c:a8:3c:50:4e:06:13:
                    a0:43:86:23:c4:db:37:5e:69:91:b8:c4:e0:41:65:
                    99:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:95:0B:59:D2:DA:C6:FF:B0:E8:CE:A0:85:C0:12:41:8C:2F:40:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/558204fb-872b-3cf3-bc34-97254c313c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.crl

            X509v3 Authority Key Identifier:
                keyid:07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.8.0/22
                  192.153.46.0/24
                  192.245.118.0/24
                  208.93.220.0/22
                  209.141.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:45:f5:19:37:24:4f:44:76:9a:08:83:09:26:14:e2:24:69:
         86:69:13:39:f7:3a:f1:bb:b7:f6:eb:08:7b:8c:00:e2:63:82:
         1f:96:3a:77:e6:8a:4f:0b:ed:61:0e:ff:5e:9e:f1:1c:50:4f:
         17:41:d5:90:73:6d:9b:eb:9a:ff:ed:7b:9c:d7:be:63:2e:6a:
         84:b8:8e:9b:81:be:79:69:07:8c:ba:7c:f6:5e:c8:53:94:ac:
         4d:c1:d7:74:db:06:0a:12:fc:24:a2:82:ee:f2:72:b5:72:9f:
         6e:75:e6:2d:f6:0b:bd:d4:97:0e:c5:39:a7:19:27:58:70:61:
         7f:72:2f:f5:61:94:a3:aa:73:cf:a7:1a:1c:79:2c:73:71:4f:
         d1:fa:c8:99:d9:c9:58:e5:86:70:33:a9:27:6d:5e:8c:81:1d:
         81:ad:87:c9:f5:14:c4:70:a0:fa:b1:bb:72:10:59:96:f8:ae:
         04:09:7b:f1:0f:23:65:6f:a9:e4:37:e2:ef:ff:2d:fa:73:da:
         2a:73:86:e6:cc:67:06:02:3c:14:fa:39:a8:9b:1f:5c:0c:4c:
         87:1a:65:72:1f:a8:7f:ab:43:37:26:21:c4:43:8e:0a:b6:98:
         86:fb:e8:b8:7c:56:ac:1c:94:99:a7:d7:a9:a4:48:c6:65:96:
         20:88:c0:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 13 11:04:03 2026 by rpki-client