Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/a2294655-0b7c-30a7-a52f-5b89e275331c.roa
File:                     a2294655-0b7c-30a7-a52f-5b89e275331c.roa (raw, json)
Hash identifier:          nNB0Y9Q8iIP4yc/n0aCTl+xy+D2u9a7ah1IdVnTh9jo=
Subject key identifier:   D9:7E:1C:3B:D6:68:4D:31:E8:E2:C9:F8:01:66:B6:74:07:5D:47:34
Certificate issuer:       /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial:       010D0C9F4328584EABB6F690DBE0626FDCD32780
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/a2294655-0b7c-30a7-a52f-5b89e275331c.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     40376
IP address blocks:        167.222.120.0/22 maxlen: 22
                          167.222.120.0/24 maxlen: 24
                          167.222.121.0/24 maxlen: 24
                          167.222.122.0/24 maxlen: 24
                          167.222.123.0/24 maxlen: 24
                          170.61.234.0/24 maxlen: 24
                          170.61.236.0/24 maxlen: 24
                          170.61.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:f6:90:db:e0:62:6f:dc:d3:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=fe752daa-bfea-48fa-9c7e-311af491607c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:4d:03:f5:dc:88:b4:e4:b5:12:64:bd:c3:
                    1e:94:cb:08:52:b0:cc:e6:af:14:07:f0:f9:ad:7f:
                    d7:82:67:36:b8:4f:93:4f:76:36:8a:43:bc:33:40:
                    58:7c:9b:a1:36:e3:a5:51:ee:21:4b:91:f0:af:07:
                    62:f3:6e:f1:3d:5b:70:10:35:9e:67:d5:51:2e:ed:
                    63:ef:65:1a:9e:ac:b2:9e:79:a1:25:09:65:be:c9:
                    2f:3c:65:b1:4c:e3:2a:da:32:91:f2:5e:54:b7:51:
                    62:7d:4d:4d:b0:43:24:9c:32:df:24:bc:38:4c:5e:
                    a6:18:fa:26:67:49:ab:fb:f9:6e:21:95:e1:a5:08:
                    99:cd:56:43:12:1c:a7:87:84:4e:5b:8e:44:3e:29:
                    65:99:5d:c4:34:f1:db:0e:7d:ad:27:fa:17:47:7f:
                    b1:a4:9c:f6:c7:68:11:9a:04:43:27:2a:1a:58:bf:
                    17:35:5d:01:0d:0a:48:35:23:ee:ce:25:75:68:32:
                    4f:2d:3c:df:b8:6d:df:3e:c2:f4:85:8d:39:d3:35:
                    37:69:dc:1f:f3:14:5c:fa:ab:3c:2b:fa:f1:30:17:
                    84:e4:be:c2:f3:20:0f:b9:db:03:8e:a1:17:3b:09:
                    8b:0f:5c:ee:a5:2a:93:5d:53:e0:cb:6c:59:b3:46:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7E:1C:3B:D6:68:4D:31:E8:E2:C9:F8:01:66:B6:74:07:5D:47:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/a2294655-0b7c-30a7-a52f-5b89e275331c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl

            X509v3 Authority Key Identifier:
                keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.222.120.0/22
                  170.61.234.0/24
                  170.61.236.0/24
                  170.61.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:fe:5b:65:c9:35:c3:b7:dc:13:75:dd:ee:bd:8d:97:8e:c7:
         57:2f:b7:ce:d1:20:9b:2c:b7:5b:1b:7a:4d:4c:07:3e:c1:23:
         b3:05:de:91:c9:f3:8b:60:22:35:49:cb:ee:74:ef:d6:3b:60:
         61:68:57:93:13:95:df:42:8b:3a:26:ba:8d:bc:7d:ba:06:2f:
         84:1e:92:c6:a3:30:0a:25:c5:90:87:66:f0:96:72:ff:72:3f:
         50:8e:34:b3:b7:7f:92:e3:5e:41:ee:2c:68:af:c8:49:78:94:
         9b:a6:ca:3d:8a:14:e7:2a:76:aa:8e:24:9f:32:1c:ec:01:1d:
         b4:a8:84:b3:90:5d:41:e5:cd:7d:d1:b3:37:f1:5a:5b:99:63:
         f6:5a:2c:74:20:57:64:7f:fa:9b:ab:de:a3:13:d5:45:88:3d:
         16:7e:87:b1:e6:f0:06:06:50:7f:07:2f:0b:07:16:38:95:6a:
         40:02:1b:99:e2:6a:6a:9e:ec:53:12:33:29:f4:75:6c:fd:f0:
         59:ca:4d:5f:08:12:78:b3:94:72:a0:20:dd:7b:26:1d:cb:da:
         8b:96:ce:62:25:d2:84:3e:78:37:8e:e5:90:5c:1e:7c:01:3a:
         a3:ad:50:59:7c:e7:57:64:d7:f7:f2:88:f7:4b:6b:69:04:88:
         43:fb:90:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:45:07 2026 by rpki-client