Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/518ee888-049d-3574-b313-fd6a0a4da901.roa
File:                     518ee888-049d-3574-b313-fd6a0a4da901.roa (raw, json)
Hash identifier:          z/MDAmMBU+TN8PGdNHm2XYSQNYotY9Gzn+fTpNVLahE=
Subject key identifier:   7D:8D:04:99:6F:57:8D:F5:29:42:2A:F8:A9:A5:80:0A:60:91:C3:B4
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584DBFD058199961F7DDB9810CC0
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/518ee888-049d-3574-b313-fd6a0a4da901.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     2639
IP address blocks:        165.173.128.0/19 maxlen: 24
                          165.173.164.0/22 maxlen: 24
                          165.173.168.0/21 maxlen: 24
                          165.173.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:58:19:99:61:f7:dd:b9:81:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=47c3898f-2064-4a81-88b5-95c894843726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:f9:88:1d:4e:a5:7d:be:52:d9:77:91:d0:
                    ca:bf:8d:dd:6d:ba:68:d6:e8:a9:bf:ff:06:d1:81:
                    29:45:59:a8:8f:78:6f:3f:c0:e5:a7:ee:d6:ff:fc:
                    9f:e4:62:3a:6b:e1:c3:cf:76:11:c1:ed:76:65:65:
                    df:9c:b1:2d:d1:5f:96:c9:d8:3d:77:40:dc:4e:d5:
                    41:9a:77:05:1a:34:42:8e:79:c6:c5:af:63:50:49:
                    5e:9e:bc:93:c7:06:5a:f8:08:f0:b4:d5:70:3f:fc:
                    c1:20:61:38:b9:67:10:6a:57:4b:89:bc:d4:bf:8d:
                    3b:23:5d:f6:e0:39:f4:36:e4:04:7e:52:7f:9a:e2:
                    fd:16:0b:b7:03:36:8f:f0:6b:97:fb:d3:f7:c9:0f:
                    ad:3a:35:6a:7a:df:c8:65:2f:bb:a6:19:46:34:04:
                    dd:2b:85:7b:7a:2f:2d:91:73:74:03:64:d2:47:8f:
                    5b:29:47:7e:2f:e5:a9:c2:c5:f5:95:5c:ae:bf:0f:
                    4e:56:73:f3:3d:3c:ad:13:02:31:c1:5c:65:4d:18:
                    77:de:73:b8:e4:d8:dd:25:9f:8d:8f:d3:02:2d:3a:
                    5a:89:3c:33:ca:6d:cc:3a:ab:c2:e8:c8:8e:6d:58:
                    ab:4f:99:a5:56:a5:ff:2f:5d:ef:12:37:d7:de:47:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8D:04:99:6F:57:8D:F5:29:42:2A:F8:A9:A5:80:0A:60:91:C3:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/518ee888-049d-3574-b313-fd6a0a4da901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.173.128.0/19
                  165.173.164.0-165.173.183.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:c5:ec:1c:93:6e:82:3f:7a:b6:b3:56:76:03:99:86:44:cd:
         a9:03:95:95:e3:6e:23:31:fa:e7:69:ac:0f:19:7b:18:c9:1b:
         e6:4b:d9:76:fc:c7:4d:3e:89:fd:d9:5f:8e:50:38:b5:2d:ba:
         a4:51:c5:a3:2f:10:e1:2e:9f:83:ac:4c:09:0a:a6:8d:86:48:
         e9:b6:99:9e:87:7b:57:d8:f3:2b:73:0e:3d:ab:59:68:f1:64:
         82:ca:53:17:21:2c:62:2e:66:96:7b:e6:76:27:cf:96:6a:32:
         ad:66:6f:89:8f:d5:a8:e5:64:39:8b:9f:ad:8a:be:7a:b2:53:
         25:12:2c:8d:e2:49:5f:17:8c:43:6c:ac:5b:35:57:7a:3a:e8:
         d1:aa:22:6e:b5:86:fd:71:3b:07:14:15:34:e7:d3:9a:92:79:
         19:90:54:f4:fe:e9:a9:8c:05:34:04:3b:a5:4a:55:ef:3f:2f:
         8b:c5:e4:68:bc:90:5e:39:b5:be:37:4b:e9:bc:59:cf:8d:c6:
         fe:c6:60:00:72:79:52:4c:38:6a:99:fe:be:ff:b7:40:eb:3c:
         40:39:a9:15:76:de:7b:82:f4:7a:98:1e:f9:f6:1c:00:f0:1a:
         b0:b0:7d:ae:6f:b4:29:3d:d4:69:80:9a:83:be:f0:25:c6:18:
         86:b3:e3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:57:04 2026 by rpki-client