Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa
File:                     563e4146-93d5-346d-b331-7b58a7727771.roa (raw, json)
Hash identifier:          xjlrMdJEQXBLbOMxdiGVxAiDH7O66Z7FXcXg/e3lIEo=
Subject key identifier:   CA:45:25:7E:D8:1A:00:1C:B9:44:04:23:68:43:C7:30:A4:CD:E3:E2
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F4328584ED001E7A644E55F41A61FF940
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     393238
IP address blocks:        162.253.44.0/22 maxlen: 24
                          192.154.14.0/23 maxlen: 24
                          192.199.180.0/22 maxlen: 24
                          192.236.0.0/24 maxlen: 24
                          199.10.4.0/22 maxlen: 24
                          199.188.64.0/22 maxlen: 24
                          199.189.228.0/22 maxlen: 24
                          205.143.47.0/24 maxlen: 24
                          207.191.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e7:a6:44:e5:5f:41:a6:1f:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=e1597d80-cb62-4975-9383-b2ea8ac7768a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:f0:eb:cf:6f:eb:c5:2b:33:2b:b8:3e:4b:
                    05:f6:f9:ea:a6:03:c7:bf:94:37:66:69:42:26:c2:
                    a2:da:f7:16:f4:70:15:af:d2:6d:8a:3d:f7:7b:2a:
                    55:f8:8d:1b:81:7c:2a:96:83:98:25:94:d7:89:57:
                    76:af:1a:27:72:a5:03:ee:dc:35:84:44:80:8c:d4:
                    f4:2d:9a:68:a5:79:c0:02:c4:93:d2:e8:bf:24:39:
                    f4:3c:67:1c:fa:ba:88:d8:58:7f:1f:26:72:0a:d4:
                    b1:c6:c1:2f:e7:84:47:9d:4f:ce:99:0f:e2:81:f2:
                    80:e5:28:c6:37:ea:08:08:b7:8d:a6:e9:87:7e:ca:
                    a4:eb:cd:53:ec:9f:0d:b9:7f:e3:b5:34:b4:4e:ee:
                    30:34:f3:77:90:d7:00:ed:9c:f1:43:43:2f:9a:6b:
                    14:17:24:22:e2:12:cb:30:7f:05:38:5a:5f:01:c0:
                    c4:eb:ab:35:4c:d1:24:66:4e:08:27:e9:a5:93:38:
                    3b:09:9a:32:c0:a6:11:a6:e8:a4:7d:22:5b:de:50:
                    cc:f5:be:60:9b:1f:6e:b5:04:21:6e:f7:88:52:3c:
                    10:b8:29:b6:05:f9:31:f7:21:58:75:b1:41:2d:ff:
                    0e:98:af:68:14:dd:93:c6:5c:80:71:30:1f:3a:20:
                    d4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:45:25:7E:D8:1A:00:1C:B9:44:04:23:68:43:C7:30:A4:CD:E3:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.44.0/22
                  192.154.14.0/23
                  192.199.180.0/22
                  192.236.0.0/24
                  199.10.4.0/22
                  199.188.64.0/22
                  199.189.228.0/22
                  205.143.47.0/24
                  207.191.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:37:1f:c4:87:ea:d4:5b:e7:79:79:d9:b6:2a:22:73:0f:f1:
         4b:3d:ce:88:fc:f0:2d:67:93:68:8c:be:2f:bc:3a:d6:02:90:
         2f:28:7b:1b:26:b1:19:1f:7d:32:e7:78:1d:c3:5c:d1:ee:32:
         0b:c7:08:e8:45:f3:7d:d3:5f:79:d8:5e:6a:1e:78:e2:59:11:
         78:a0:95:af:9f:33:a9:0d:7f:ea:2e:4a:fa:cf:8a:46:3b:63:
         9b:f5:4d:69:2b:da:98:77:55:ab:87:d0:e6:1a:6a:6d:1e:5d:
         22:e2:fb:b4:5f:1c:19:1b:83:7b:bf:f1:ee:b4:14:c7:a5:34:
         a1:5a:b6:aa:96:70:a6:d8:d7:40:bb:67:94:83:16:2b:d7:b1:
         9d:5d:2f:f1:f2:76:1a:da:1f:9e:b5:b9:1a:98:2a:d4:c6:b8:
         b3:f8:a5:10:8b:5d:79:1b:2d:c3:26:a7:1b:2f:71:66:04:c5:
         96:26:3e:10:22:a2:34:ad:32:f7:6f:12:99:77:00:ce:7e:2e:
         2e:a5:41:20:cb:a9:b8:f7:ed:bf:d5:6f:c5:69:c5:94:2c:ea:
         3c:5f:a0:6b:74:2b:b2:2c:31:e2:eb:4e:42:dd:18:41:c1:67:
         e4:59:6e:ef:51:f6:7d:dd:dc:d8:44:72:39:7b:0e:41:25:8e:
         15:59:52:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:40:23 2026 by rpki-client