Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa
File:                     62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa (raw, json)
Hash identifier:          +g5dHgLam8gGEiMQLbtt56OMqHr6TO+yIhbEIQIWZ1U=
Subject key identifier:   EB:37:FF:C2:A4:CB:BA:BA:46:86:B7:8A:87:C8:B9:91:10:E4:E3:D0
Certificate issuer:       /CN=7895ee85-2a16-4e54-9c5b-a9a05908877e
Certificate serial:       010D0C9F4328584FA1631F43174C6DD58C131C80
Authority key identifier: B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     16832
IP address blocks:        138.128.232.0/21 maxlen: 21
                          192.161.66.0/23 maxlen: 23
                          208.117.64.0/20 maxlen: 20
                          208.123.128.0/19 maxlen: 19
                          216.41.136.0/22 maxlen: 22
                          2605:2b80::/32 maxlen: 32
                          2606:9f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:1f:43:17:4c:6d:d5:8c:13:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7895ee85-2a16-4e54-9c5b-a9a05908877e
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=e33d34c7-7b31-4cb2-9241-6d849a634921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:33:91:d8:76:1d:79:9c:5c:ef:27:e6:ae:
                    00:8d:fb:70:a1:b1:4f:c2:b3:f0:40:c0:f8:20:7a:
                    a7:dd:03:2e:db:57:bc:ff:7d:3e:ac:93:60:9a:27:
                    ba:37:eb:69:63:da:3f:57:f4:ff:78:73:3d:9f:3b:
                    12:6b:11:6b:4b:5a:81:e9:a5:9c:19:45:fe:81:09:
                    38:04:df:27:48:fb:5c:ce:58:b8:40:9f:a1:0e:58:
                    68:f8:b4:d9:b7:90:61:29:4b:d8:e9:9d:9f:2e:eb:
                    57:9d:3b:9f:3b:13:79:cf:e1:f9:80:e5:5b:88:02:
                    91:b3:b0:ac:29:24:f6:bd:cd:0d:1c:27:16:da:c8:
                    3e:d0:24:c8:83:0c:ca:8f:89:f7:ee:03:8c:22:6d:
                    d6:5e:5f:b1:d3:34:c5:fc:b2:9e:8c:87:18:a4:c1:
                    04:c7:0f:92:73:ee:9e:2c:fb:eb:43:46:27:5c:9d:
                    6a:9c:ea:0c:b1:5d:9f:be:ec:28:8b:4a:4d:fe:80:
                    62:c8:c1:81:d0:0d:81:2f:3f:cf:3d:72:90:f3:ff:
                    34:0a:23:f9:98:3b:ed:37:5b:0d:a7:f0:e4:a1:8c:
                    95:ba:cb:1d:f5:1e:3b:ac:78:87:45:f3:bd:ec:fa:
                    ca:39:4d:bb:29:07:d0:7b:99:e0:05:06:c1:23:d2:
                    30:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:37:FF:C2:A4:CB:BA:BA:46:86:B7:8A:87:C8:B9:91:10:E4:E3:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl

            X509v3 Authority Key Identifier:
                keyid:B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.128.232.0/21
                  192.161.66.0/23
                  208.117.64.0/20
                  208.123.128.0/19
                  216.41.136.0/22
                IPv6:
                  2605:2b80::/32
                  2606:9f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d0:7f:3c:3c:8f:64:3d:3b:1e:81:ad:9b:9e:fc:53:f8:c4:
         05:4c:e1:df:12:0a:be:53:2b:50:4b:88:1a:21:d4:ff:28:21:
         ef:26:ef:ee:ed:e2:48:5a:6b:19:bc:73:cf:40:2c:62:d5:e8:
         fb:9c:b8:b2:62:b5:80:4b:2f:ed:1e:0b:6a:4f:85:c9:0f:4a:
         32:1e:8f:fb:b6:39:42:e2:d1:4e:d8:00:6f:32:24:7f:fe:b3:
         1e:86:99:3b:be:72:4c:40:d4:78:61:3e:e0:68:a1:80:3d:e3:
         67:06:58:25:1b:2d:a8:73:96:6c:5b:de:78:82:57:72:e3:d6:
         ce:93:e8:f2:95:e6:75:c9:61:58:05:27:9b:23:9d:b7:a7:e4:
         97:68:f1:e0:9f:1d:be:ba:88:93:d0:6c:e2:df:ce:97:23:ac:
         93:a4:f3:ed:b9:35:9e:06:c1:62:18:e7:60:97:86:db:ea:7a:
         2d:79:1f:eb:bd:77:a6:71:50:7a:28:4f:60:4a:ea:8f:bb:49:
         c1:4c:73:78:0c:ac:72:77:15:ec:3e:92:6c:42:db:dd:b8:09:
         9e:6c:6f:71:a8:a5:04:5b:ae:18:12:03:75:71:32:4d:e4:7f:
         52:08:4c:7e:e2:cd:17:96:7d:f5:6b:a6:f2:be:3e:a1:ab:12:
         3c:35:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:14:58 2026 by rpki-client