Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
File:                     4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa (raw, json)
Hash identifier:          zv9JM3P1k/GL3BRF00vC1mOetVuOhiDJgLyk0r7tXsE=
Subject key identifier:   E5:67:0C:90:C6:22:AF:45:15:7B:C3:D6:3B:2F:63:92:0D:57:08:00
Certificate issuer:       /CN=255d6559-2c60-49ac-b136-415b4469af78
Certificate serial:       010D0C9F4328584F3052798DA818BDD5EDE9CF00
Authority key identifier: 58:8D:97:13:12:EB:A8:FC:6C:82:19:E1:04:61:7F:36:49:06:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     20300
IP address blocks:        136.143.204.0/22 maxlen: 24
                          147.185.144.0/22 maxlen: 24
                          162.142.96.0/22 maxlen: 24
                          192.65.4.0/22 maxlen: 24
                          192.152.214.0/24 maxlen: 24
                          207.66.124.0/22 maxlen: 24
                          208.83.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/255d6559-2c60-49ac-b136-415b4469af78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/255d6559-2c60-49ac-b136-415b4469af78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:79:8d:a8:18:bd:d5:ed:e9:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255d6559-2c60-49ac-b136-415b4469af78
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=2752ae4c-ff9d-483e-98df-4530a7c9fe1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:38:d7:8a:ff:7b:de:0f:dd:ad:70:a7:bb:ce:
                    44:27:c2:8f:22:4c:24:ba:cc:eb:3c:32:db:cb:ea:
                    8b:90:b2:2e:d2:24:d7:7b:5c:a8:80:bf:9c:3f:da:
                    21:a7:5c:d2:d1:8c:b4:27:09:98:cf:f9:fe:d7:01:
                    bf:24:dd:12:d6:49:cb:3b:58:31:7c:2d:a6:23:da:
                    08:9c:14:97:a4:8d:1a:b9:27:20:5b:c6:cf:78:e0:
                    4e:f1:e8:98:91:70:f1:51:93:ec:10:1b:55:eb:c8:
                    71:35:4e:98:28:4e:c9:0a:c6:80:8d:4c:b3:75:7d:
                    be:3e:d2:d3:99:f4:ed:05:42:37:5a:51:26:71:7a:
                    f2:94:fd:71:a7:08:95:ac:35:5a:26:bf:09:97:ee:
                    ed:a2:3c:4a:d2:a8:8f:ec:b6:f9:4d:65:4a:82:65:
                    31:e8:36:4e:c4:48:da:3b:43:55:52:72:1d:1c:e7:
                    24:f0:f6:f0:5d:00:72:1f:6c:3a:a5:39:82:73:10:
                    95:66:2f:11:b8:48:ab:a6:34:6c:7b:8c:98:92:45:
                    e4:46:ee:0e:74:1b:2a:bf:4c:c1:0b:1a:20:54:25:
                    68:4d:e3:e8:27:e2:74:b9:7c:e5:16:17:6a:7a:db:
                    b5:e9:e0:de:03:93:28:1f:e5:5e:6d:24:bf:54:3b:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:67:0C:90:C6:22:AF:45:15:7B:C3:D6:3B:2F:63:92:0D:57:08:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/255d6559-2c60-49ac-b136-415b4469af78.crl

            X509v3 Authority Key Identifier:
                keyid:58:8D:97:13:12:EB:A8:FC:6C:82:19:E1:04:61:7F:36:49:06:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.204.0/22
                  147.185.144.0/22
                  162.142.96.0/22
                  192.65.4.0/22
                  192.152.214.0/24
                  207.66.124.0/22
                  208.83.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ba:8d:80:fa:52:82:8b:99:7b:7c:9a:4e:59:de:eb:18:55:
         c4:b7:bd:0a:f1:b8:a0:61:a0:27:36:9a:37:28:a4:ce:03:64:
         c7:36:af:9d:89:93:d7:5e:ce:15:87:b7:8c:5c:12:4a:d3:14:
         2c:85:5b:33:5b:bc:2a:14:c7:fb:43:82:72:c9:b2:86:4f:04:
         10:15:3d:78:7b:0f:eb:ca:fb:27:73:66:2e:85:87:de:cd:22:
         e3:88:5f:c7:ee:ab:b4:84:53:89:b2:39:5f:41:63:b1:b4:95:
         fc:2c:12:b1:56:6a:97:f8:82:84:f0:92:e7:a6:0e:e8:f2:a0:
         2b:bd:80:84:81:2e:91:e1:f4:97:ee:14:5c:97:c2:4b:7c:ae:
         d0:c0:10:e0:3c:d4:49:4e:77:df:f8:c8:d7:3e:2f:a5:89:fc:
         8e:0a:50:b0:c3:d7:26:3c:92:f0:04:4d:ad:ab:2c:b6:86:08:
         64:9a:3b:10:dc:93:fa:ec:b5:31:0c:1e:3b:8f:94:4a:2f:73:
         04:af:ce:0f:11:f7:41:b6:0c:33:19:90:c1:e3:66:b4:4a:5d:
         fd:99:97:c9:61:0e:15:ff:e6:30:9d:45:26:01:1e:30:0a:dd:
         0f:fc:93:69:58:75:98:a2:b3:03:bb:da:e9:bd:1e:28:a6:f0:
         21:66:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:37:29 2026 by rpki-client