Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/919acf53-1694-3fd1-b408-20238c84adf0.roa
File:                     919acf53-1694-3fd1-b408-20238c84adf0.roa (raw, json)
Hash identifier:          /4eoGMFK0g+9bZvmxs9tgEmkNMewnskd2ng/CspKJTI=
Subject key identifier:   3A:9E:CB:78:16:26:D3:9E:9D:0B:4A:FD:22:0D:EB:ED:54:F0:10:80
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584F119D07F8DE78B60B7B5AF680
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/919acf53-1694-3fd1-b408-20238c84adf0.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     13830
IP address blocks:        142.202.220.0/22 maxlen: 24
                          161.129.152.0/22 maxlen: 24
                          163.123.204.0/22 maxlen: 24
                          192.34.100.0/22 maxlen: 24
                          2001:506:30::/48 maxlen: 48
                          2604:fbc0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:07:f8:de:78:b6:0b:7b:5a:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=e7028e36-baa3-48bb-83f7-5fd1cd637b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:70:c4:b5:4d:ba:d4:95:e9:95:bd:ed:26:08:
                    c0:bc:fb:35:cf:21:51:bf:85:39:46:f8:5b:86:8b:
                    7f:54:0a:22:f0:11:63:ae:42:88:24:12:ea:d3:79:
                    26:5b:1a:26:5b:f6:6a:7b:3b:02:c3:61:0e:91:6f:
                    39:a4:1b:93:cf:f8:ee:7e:7a:40:18:7d:47:f7:f5:
                    8f:c1:81:72:39:f4:bb:e8:42:78:9e:13:89:c5:91:
                    ff:13:70:3d:db:74:e5:46:5b:65:0b:fe:5f:70:50:
                    3f:f4:1c:ca:0e:43:17:d1:f1:50:f9:41:fd:fc:39:
                    d4:57:1e:d6:8b:a4:0e:7e:1b:7e:ff:ec:f7:d3:dd:
                    60:74:95:0c:ae:c1:b2:a8:49:c1:eb:a0:39:22:8b:
                    c5:b4:4c:5b:de:78:ec:4d:0d:bd:ef:a5:3f:58:57:
                    ab:79:97:f6:08:38:12:d7:c1:7f:3a:c0:73:47:c1:
                    2c:4f:5b:18:36:0e:dc:f0:59:59:e6:cf:d2:15:31:
                    6a:2e:1f:c4:fb:8a:95:4f:59:f7:39:b3:0d:62:d9:
                    11:99:16:1f:d2:9b:c8:29:f3:2f:c7:26:d1:24:31:
                    ed:90:74:4c:5f:a2:86:68:08:31:03:9b:53:ee:40:
                    d4:f2:0e:0b:f5:d5:0a:dd:c9:82:df:d1:cd:fd:16:
                    7e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9E:CB:78:16:26:D3:9E:9D:0B:4A:FD:22:0D:EB:ED:54:F0:10:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/919acf53-1694-3fd1-b408-20238c84adf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.220.0/22
                  161.129.152.0/22
                  163.123.204.0/22
                  192.34.100.0/22
                IPv6:
                  2001:506:30::/48
                  2604:fbc0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a3:2a:37:4e:76:fa:d3:ab:13:e8:2c:a0:f3:7e:19:ae:97:
         03:46:de:b6:bd:25:39:fa:a1:3b:51:16:07:52:cc:43:19:0c:
         c2:b7:16:05:f2:4a:7d:7e:e5:d3:af:02:12:56:80:8a:6e:6a:
         89:53:a5:86:60:db:dd:ab:8e:94:fc:d4:1d:09:b9:3f:ce:b3:
         88:35:82:3a:b7:b9:d1:4b:d8:1b:0f:36:12:ab:f1:22:04:ff:
         51:12:bf:2a:37:4f:b8:56:90:a2:40:49:38:95:80:29:c6:ea:
         c3:83:f5:f6:a4:61:db:96:65:fe:21:39:56:65:45:71:0b:de:
         2e:26:c5:93:f5:17:46:c4:52:e1:a7:34:22:25:2d:22:cd:04:
         b1:7d:0d:c3:93:d9:eb:d6:b8:76:91:5b:10:e7:fe:68:35:9c:
         1f:bd:db:1a:26:aa:f9:c9:b2:6c:31:94:ad:c4:4a:6d:60:21:
         85:46:70:01:08:cc:da:18:f7:91:4a:ea:8a:13:49:4f:6a:c6:
         3c:43:1a:ac:cc:79:61:c4:59:da:c0:dc:df:2b:c3:10:95:77:
         4f:60:54:7c:6b:7e:fe:42:1f:1e:59:94:b8:f4:b8:08:c2:a4:
         fe:43:eb:60:c8:b1:c2:c6:72:be:ee:79:1f:4b:73:ef:8e:98:
         71:e5:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:33:20 2026 by rpki-client