Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/222edd9b-e290-31ce-95af-40a5c0132009.roa
File:                     222edd9b-e290-31ce-95af-40a5c0132009.roa (raw, json)
Hash identifier:          mWSeZ25L2mJZhZQatO9ytGbdOh6U7T5PF7gf+BXhbng=
Subject key identifier:   D8:C8:A1:01:D5:A1:08:23:42:8A:25:A8:C0:F3:00:2F:7E:62:3A:10
Certificate issuer:       /CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f
Certificate serial:       010D0C9F4328584EE38C9B622DAC9BF968927FE0
Authority key identifier: 19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/222edd9b-e290-31ce-95af-40a5c0132009.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     397553
IP address blocks:        45.42.184.0/22 maxlen: 22
                          45.42.184.0/24 maxlen: 24
                          45.42.185.0/24 maxlen: 24
                          45.42.186.0/24 maxlen: 24
                          45.42.187.0/24 maxlen: 24
                          216.24.34.0/24 maxlen: 24
                          2605:de40::/32 maxlen: 32
                          2605:de40:1000::/48 maxlen: 48
                          2605:de40:1001::/48 maxlen: 48
                          2605:de40:1002::/48 maxlen: 48
                          2605:de40:1003::/48 maxlen: 48
                          2605:de40:1004::/48 maxlen: 48
                          2605:de40:2000::/48 maxlen: 48
                          2605:de40:2001::/48 maxlen: 48
                          2605:de40:2002::/48 maxlen: 48
                          2605:de40:2003::/48 maxlen: 48
                          2605:de40:2004::/48 maxlen: 48
                          2605:de40:3000::/48 maxlen: 48
                          2605:de40:3001::/48 maxlen: 48
                          2605:de40:3002::/48 maxlen: 48
                          2605:de40:3003::/48 maxlen: 48
                          2605:de40:3004::/48 maxlen: 48
                          2605:de40:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9b:62:2d:ac:9b:f9:68:92:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=77f437d7-8899-497f-b090-2c71003c630b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5d:91:ee:25:c7:8f:9b:9a:30:16:59:8b:d3:
                    05:a3:fe:5b:b3:2f:4d:06:11:94:21:9e:ea:84:69:
                    85:8b:14:0e:84:a9:7f:2e:98:90:11:b5:78:b0:c9:
                    09:bd:c8:cb:d3:7e:9f:4c:a7:85:4c:28:37:3b:19:
                    6c:ee:58:aa:63:40:1e:c5:90:d6:f5:26:49:cb:ad:
                    8f:b1:ce:49:64:3e:6b:75:f0:1f:39:5e:23:92:c3:
                    17:de:b5:85:66:0c:4f:2b:00:0c:33:6e:01:ef:9e:
                    00:cb:23:08:ed:25:30:58:65:b3:ae:1f:72:f4:b5:
                    71:28:82:e6:be:df:97:f9:91:c7:f8:17:83:8c:95:
                    52:54:48:c4:e6:26:38:16:ed:92:6b:0a:09:d0:dc:
                    7f:e7:68:1b:45:86:c7:6a:10:f7:ae:d0:9a:cf:93:
                    ba:a3:e7:c9:19:c1:f0:0f:65:c6:29:f9:8b:1b:e4:
                    20:b4:ac:06:8c:82:46:7b:bd:d4:ab:89:4f:0c:0f:
                    d5:f6:8c:1c:f3:8a:ca:7d:5b:77:10:89:ec:56:2f:
                    c3:4c:fe:27:41:85:2f:fd:39:8c:14:0c:45:6a:70:
                    b1:7b:e4:d8:e2:fc:95:6a:42:e1:17:4e:6c:75:d2:
                    8a:40:e8:6a:58:8f:66:83:b2:7f:e1:b5:be:1d:b8:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C8:A1:01:D5:A1:08:23:42:8A:25:A8:C0:F3:00:2F:7E:62:3A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/222edd9b-e290-31ce-95af-40a5c0132009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.184.0/22
                  216.24.34.0/24
                IPv6:
                  2605:de40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:bd:47:3b:76:a4:c4:fa:13:20:ab:96:0b:22:f4:1b:3b:46:
         df:76:3a:1a:aa:a7:e4:6b:d0:8d:15:74:79:7c:b5:c9:33:ea:
         13:d5:1d:27:93:30:64:f6:6b:68:30:97:9f:ca:26:a7:64:f2:
         80:77:aa:9f:d8:1c:97:5f:73:6a:90:4b:e3:f6:cf:f4:de:20:
         2c:0b:ce:ed:e6:a1:f3:8e:31:62:56:31:e7:e4:2c:95:e3:8c:
         13:b1:e3:4f:ff:07:58:92:be:43:67:25:b2:e7:00:85:57:1f:
         02:d3:c6:fc:9c:ba:db:3e:86:d8:04:bb:11:2a:e2:e7:c7:33:
         da:fe:70:65:4e:50:68:70:20:6a:0e:47:38:2f:10:95:d9:f9:
         90:a1:f4:fe:69:fd:38:a3:97:25:32:3d:d2:ee:9f:91:2f:a8:
         1f:06:29:b9:a3:24:ca:e3:79:f3:70:5b:0e:76:07:5a:f7:7a:
         ca:fb:19:fb:10:85:9e:8a:d1:70:c3:a5:32:ea:b3:5e:f7:42:
         ba:f2:a8:bc:c8:66:c9:91:c3:9f:13:1e:cf:6b:55:e1:0d:49:
         42:6d:f5:03:e2:11:27:df:f6:4c:10:24:cc:4e:e3:79:24:94:
         b7:14:3f:81:60:07:48:9a:ac:ad:cc:db:3d:01:00:46:02:45:
         9f:7e:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:07:47 2026 by rpki-client