Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/9f949324-ba14-3119-9cbb-e8baba338f7e.roa
File:                     9f949324-ba14-3119-9cbb-e8baba338f7e.roa (raw, json)
Hash identifier:          ewcCF5+c0Qj/3Yq06VUOSOtowqMB99dRhJ5LutvTLCo=
Subject key identifier:   DA:76:34:6B:54:F9:BD:97:A1:2F:AA:2F:D1:50:4D:8C:51:1C:72:3F
Certificate issuer:       /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
Certificate serial:       010D0C9F4328584E736A23E2C0C1B36454C727F8
Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/9f949324-ba14-3119-9cbb-e8baba338f7e.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     393689
IP address blocks:        165.112.6.0/23 maxlen: 24
                          165.112.8.0/22 maxlen: 24
                          165.112.34.0/23 maxlen: 24
                          165.112.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:23:e2:c0:c1:b3:64:54:c7:27:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=d1fc5c00-9395-4eda-9b1a-6953bfb645a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4d:b4:d7:0b:35:01:97:6c:8a:65:58:30:94:
                    7f:90:ce:55:96:8c:36:8e:20:37:44:0e:9b:3e:6d:
                    44:0f:79:b1:05:75:e8:08:4c:e1:8e:46:27:bc:4e:
                    f9:a9:3a:50:57:b4:8b:fd:7c:65:0d:d3:ee:00:48:
                    7e:c9:3e:27:65:4a:83:37:68:07:92:17:99:8f:47:
                    c3:d4:5b:26:ab:29:79:9d:6f:0a:a5:09:54:fc:26:
                    66:bd:a1:84:7a:46:c0:8a:27:df:66:f6:79:b0:a7:
                    a3:65:b4:fe:48:9d:21:96:71:f2:6b:6a:be:46:e5:
                    d7:76:ca:f9:8d:ca:a6:0c:ac:d3:9c:88:5a:d3:69:
                    b8:e4:d3:63:9d:3c:0d:2f:6f:4e:71:b2:bd:f9:0c:
                    93:af:50:c0:f3:99:50:ec:06:57:0a:db:b5:98:6a:
                    76:96:d5:3f:8d:a9:1f:60:64:cf:d2:2b:5d:b7:47:
                    65:c5:c4:2a:b2:1f:f5:f7:0b:59:12:62:8c:6b:79:
                    10:4f:43:3a:25:3c:76:03:e6:ac:18:c8:ff:07:2c:
                    14:6b:94:c7:77:c0:bb:3d:dc:e6:09:d7:ea:30:3a:
                    6b:4b:b6:3b:ab:3a:07:aa:4a:6a:8d:16:d0:cf:f3:
                    f3:c7:6d:6e:82:e5:cc:33:eb:2f:b3:d4:78:db:ad:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:76:34:6B:54:F9:BD:97:A1:2F:AA:2F:D1:50:4D:8C:51:1C:72:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/9f949324-ba14-3119-9cbb-e8baba338f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl

            X509v3 Authority Key Identifier:
                keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.112.6.0-165.112.11.255
                  165.112.34.0/23
                  165.112.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:dd:9f:1f:ae:7f:29:cf:c3:61:9c:76:8c:10:d6:ae:7b:16:
         94:79:1e:c3:82:65:a3:64:b1:63:21:33:ce:60:23:17:81:15:
         80:3c:a9:37:80:b3:75:8c:2c:02:1d:49:2d:c6:52:90:07:f4:
         67:a3:ee:22:9c:24:37:d0:a1:18:9d:2e:b1:f4:c3:ab:a1:f8:
         f4:c4:d5:4d:4a:3e:0d:a3:d2:22:f8:70:c6:b5:8c:56:d6:1b:
         ff:a1:51:61:32:11:51:f9:be:2c:8a:d8:2b:e9:3a:a2:81:ab:
         70:02:11:6b:60:02:91:f7:39:11:11:6d:9d:63:9d:ea:22:c1:
         ea:e5:14:d0:20:e9:d7:a2:87:9a:d2:09:aa:f2:37:b1:7e:d1:
         62:00:01:5f:b6:15:5d:43:22:65:26:c8:0c:f7:8f:b8:49:de:
         24:96:68:13:5d:f9:e8:39:35:5c:77:99:98:45:0b:df:60:9b:
         23:d3:eb:f0:19:46:0b:25:cd:8a:12:a7:f4:48:93:0b:57:2f:
         b7:27:46:7b:8b:4a:97:99:18:79:e1:bc:44:a7:7f:bd:fe:d5:
         96:46:59:5d:49:74:ed:ab:89:ae:66:fe:6e:47:f7:e5:30:e5:
         70:32:94:1e:3c:8f:3d:c3:0e:16:2e:69:4e:7b:98:1f:ac:4e:
         b7:26:ec:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:30:09 2026 by rpki-client