Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/83849bb4-bca0-362c-a30b-260e7058b496.roa
File:                     83849bb4-bca0-362c-a30b-260e7058b496.roa (raw, json)
Hash identifier:          kva0let4KKwAn9tl2haLw5mD/hmpoqOOErdT6njPIsE=
Subject key identifier:   F7:95:E8:07:D9:43:A7:D1:AC:17:8B:53:54:A6:F9:24:7D:26:3E:9F
Certificate issuer:       /CN=7801f48a-31fe-43fd-b9d7-b370febfe411
Certificate serial:       010D0C9F4328584E90BA437697C38720E009CA80
Authority key identifier: F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/83849bb4-bca0-362c-a30b-260e7058b496.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     399007
IP address blocks:        65.49.160.0/19 maxlen: 19
                          65.49.160.0/20 maxlen: 20
                          65.49.160.0/21 maxlen: 21
                          65.49.160.0/24 maxlen: 24
                          65.49.161.0/24 maxlen: 24
                          65.49.162.0/24 maxlen: 24
                          65.49.163.0/24 maxlen: 24
                          65.49.164.0/24 maxlen: 24
                          65.49.165.0/24 maxlen: 24
                          65.49.166.0/24 maxlen: 24
                          65.49.167.0/24 maxlen: 24
                          65.49.168.0/21 maxlen: 21
                          65.49.168.0/24 maxlen: 24
                          65.49.169.0/24 maxlen: 24
                          65.49.170.0/23 maxlen: 23
                          65.49.172.0/24 maxlen: 24
                          65.49.173.0/24 maxlen: 24
                          65.49.174.0/23 maxlen: 23
                          65.49.175.0/24 maxlen: 24
                          65.49.176.0/20 maxlen: 20
                          65.49.176.0/21 maxlen: 21
                          65.49.176.0/24 maxlen: 24
                          65.49.177.0/24 maxlen: 24
                          65.49.178.0/23 maxlen: 23
                          65.49.180.0/23 maxlen: 23
                          65.49.180.0/24 maxlen: 24
                          65.49.181.0/24 maxlen: 24
                          65.49.182.0/24 maxlen: 24
                          65.49.183.0/24 maxlen: 24
                          65.49.184.0/21 maxlen: 21
                          65.49.184.0/24 maxlen: 24
                          65.49.185.0/24 maxlen: 24
                          65.49.186.0/23 maxlen: 23
                          65.49.186.0/24 maxlen: 24
                          65.49.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:43:76:97:c3:87:20:e0:09:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7801f48a-31fe-43fd-b9d7-b370febfe411
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=9488fc4f-2485-485d-a51f-b51efd3d3917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a1:5a:d1:13:cd:40:ea:bd:6c:30:19:de:94:
                    7a:b2:34:d9:1d:0d:d4:15:fa:18:ef:31:b4:98:b7:
                    e5:28:13:50:ee:43:7e:cb:e1:cb:8a:a8:97:ab:a3:
                    2e:cc:2c:7e:b0:93:eb:91:6b:f4:2d:dd:03:7e:fa:
                    30:5d:3a:5d:5c:91:12:c3:4a:bd:dc:0c:27:dc:8c:
                    c6:fc:df:ae:a8:08:d9:8d:ac:2d:b5:b0:17:a9:e0:
                    d1:1f:04:bc:f0:bf:b9:67:32:2e:60:48:61:e4:6f:
                    47:f4:2a:12:0f:0b:4e:f0:b0:bf:9d:3f:4c:25:a5:
                    0e:a6:71:f9:ce:3a:89:5e:f4:3a:9e:4e:1b:42:d6:
                    73:21:f3:01:75:89:11:ea:06:f7:0c:37:ec:24:a3:
                    10:84:06:25:5f:7f:15:78:7e:5a:17:46:dd:39:a5:
                    3c:b9:dd:3b:b5:ff:1a:b0:53:15:0d:5f:ae:2a:b1:
                    33:4a:e4:51:b8:6d:2c:ca:a2:02:57:9a:06:9f:d0:
                    07:04:77:fd:b4:3e:47:47:cd:14:50:c0:9a:11:36:
                    73:fc:fe:ff:83:dc:fc:a3:a3:bf:5d:64:a4:a9:bd:
                    7b:cb:dc:cb:34:e4:59:9f:24:23:a9:07:4d:20:ae:
                    5e:a3:81:93:ed:bd:2d:ae:81:e4:6b:05:c6:98:fe:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:95:E8:07:D9:43:A7:D1:AC:17:8B:53:54:A6:F9:24:7D:26:3E:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/83849bb4-bca0-362c-a30b-260e7058b496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl

            X509v3 Authority Key Identifier:
                keyid:F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:88:a3:33:a3:7e:08:0d:2f:9c:79:3d:12:5f:4d:13:08:8e:
         c5:43:49:35:7b:c5:2d:fe:e6:ea:a5:25:31:dc:49:1c:31:75:
         f1:ed:e6:a1:b0:5e:cb:cb:ab:15:2f:34:d1:c6:b7:a0:40:cf:
         ae:f0:a7:0f:62:16:6d:d0:64:3c:cf:0e:ec:ff:0f:35:8a:84:
         a4:71:8f:0d:3d:c2:24:12:64:ae:4c:e4:2e:58:d5:64:50:94:
         86:7d:0f:05:40:1b:c4:e8:f7:99:84:01:de:4c:80:e9:0c:d6:
         da:f7:0a:b2:95:21:48:ae:c8:67:00:52:54:11:7d:7f:9c:07:
         64:83:cf:3d:2d:1a:d7:44:9a:f6:cc:02:38:cb:3e:c6:c8:60:
         c1:d4:08:42:a1:66:6c:ac:fd:a4:1f:21:01:7e:ed:12:b3:08:
         59:55:41:34:29:d7:52:e0:82:5d:af:8c:ab:54:40:f6:79:e2:
         d1:d8:c7:ee:d6:50:00:1b:e4:9b:8a:3d:4d:a4:85:3a:7e:bc:
         b5:c7:a5:d9:83:db:0d:ae:ca:91:c8:9c:8c:c3:30:a7:95:82:
         ee:b5:92:c8:05:ba:60:1f:a0:9a:26:e4:d4:06:b1:2e:bc:9a:
         33:92:c4:14:99:0e:5f:18:00:bd:4a:b3:26:d0:51:a1:31:4e:
         fb:58:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:57:46 2026 by rpki-client