Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/c186341a-7a3b-3ebf-8a3a-e00212f954e4.roa
File:                     c186341a-7a3b-3ebf-8a3a-e00212f954e4.roa (raw, json)
Hash identifier:          so3slWriprST3tzwPxZyYjxJ1HrdIldy0DE/iNOv8Bo=
Subject key identifier:   A7:C7:E5:55:D4:23:4A:7C:C0:CA:7A:25:50:18:0E:0C:C5:5C:19:B9
Certificate issuer:       /CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
Certificate serial:       010D0C9F4328584EA788953EC886493C49EDEEC0
Authority key identifier: 9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/c186341a-7a3b-3ebf-8a3a-e00212f954e4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399938
IP address blocks:        131.219.0.0/20 maxlen: 20
                          131.219.0.0/21 maxlen: 21
                          131.219.0.0/22 maxlen: 22
                          131.219.0.0/24 maxlen: 24
                          131.219.1.0/24 maxlen: 24
                          131.219.2.0/24 maxlen: 24
                          131.219.3.0/24 maxlen: 24
                          131.219.4.0/24 maxlen: 24
                          131.219.5.0/24 maxlen: 24
                          131.219.6.0/24 maxlen: 24
                          131.219.7.0/24 maxlen: 24
                          131.219.8.0/22 maxlen: 22
                          131.219.8.0/23 maxlen: 23
                          131.219.8.0/24 maxlen: 24
                          131.219.9.0/24 maxlen: 24
                          131.219.9.0/25 maxlen: 25
                          131.219.10.0/24 maxlen: 24
                          131.219.11.0/24 maxlen: 24
                          131.219.12.0/23 maxlen: 23
                          131.219.12.0/24 maxlen: 24
                          131.219.13.0/24 maxlen: 24
                          131.219.14.0/24 maxlen: 24
                          131.219.15.0/24 maxlen: 24
                          131.219.16.0/24 maxlen: 24
                          131.219.17.0/24 maxlen: 24
                          131.219.18.0/24 maxlen: 24
                          131.219.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:95:3e:c8:86:49:3c:49:ed:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=24abce9d-a227-475b-af76-cab7a065d045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:ce:4d:0d:f9:73:18:5d:06:d0:41:94:99:
                    57:ae:c5:d2:3e:7e:3d:63:c6:38:70:4e:69:7b:f6:
                    2d:d4:b7:d7:b1:e2:aa:80:31:be:db:12:8d:22:6a:
                    ce:3b:57:06:6d:73:57:49:40:49:6c:c3:b2:bf:a1:
                    54:6c:b9:41:7e:d7:9a:b0:58:ef:35:93:df:63:b0:
                    c7:62:19:17:d2:4b:03:68:58:5c:b4:fe:e3:4d:cb:
                    91:45:2b:8a:98:ef:1a:14:be:13:96:b1:a9:e2:92:
                    ea:70:3a:88:5d:d2:d6:78:0a:d6:d8:f5:d1:20:0f:
                    1c:31:a6:8a:bb:62:43:23:6c:fe:ef:4b:ea:d9:ec:
                    ae:23:e1:8f:3d:78:62:76:b7:e2:f7:3e:88:6d:0f:
                    9a:ae:94:e4:47:bd:69:71:4f:7d:93:78:0d:82:cf:
                    ba:6e:59:b5:5f:ee:ee:07:d9:21:1c:81:6d:df:29:
                    fb:9f:8b:04:5d:62:b1:25:eb:cc:aa:8c:df:af:e5:
                    51:ff:85:da:d1:1e:11:14:d3:a3:ee:52:b0:6e:ed:
                    47:1c:d0:1c:a6:05:54:04:7f:0c:e2:a1:cb:e9:9b:
                    97:ee:7a:b5:45:f6:70:fd:5b:e1:12:52:91:a2:bb:
                    2b:57:f6:ce:d2:cd:df:d7:a4:ac:62:a5:8e:77:b5:
                    d3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:E5:55:D4:23:4A:7C:C0:CA:7A:25:50:18:0E:0C:C5:5C:19:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/c186341a-7a3b-3ebf-8a3a-e00212f954e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl

            X509v3 Authority Key Identifier:
                keyid:9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.219.0.0-131.219.19.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:61:eb:e9:48:bd:fe:5b:8e:10:5c:db:43:55:51:71:25:
         68:4e:6e:e5:91:4a:32:c4:87:16:92:71:78:ee:de:22:da:f2:
         e4:96:d2:d7:dd:c1:ab:4a:9b:3e:46:4d:2a:02:0a:cb:6a:84:
         29:44:d8:2b:b8:9f:20:cb:6b:7b:22:a6:4c:0d:eb:fb:0c:a3:
         df:81:d9:6b:19:f2:4d:95:9c:2c:11:f2:e7:db:bb:8f:79:c9:
         0c:52:42:21:50:7e:26:e5:f1:bd:a0:80:ed:3b:06:3b:6b:f5:
         f9:c3:03:c8:0d:6a:0a:bb:6d:4a:db:87:7e:0b:28:99:29:f6:
         39:8c:1d:9e:4c:43:ef:94:73:22:86:9f:12:b7:a3:ee:fd:c2:
         da:34:4f:51:ac:36:a4:c3:17:85:c5:63:b6:b8:dd:6e:da:3a:
         17:0b:18:85:75:ed:aa:c2:6a:69:f3:20:12:14:10:c4:bb:54:
         6a:37:6e:53:58:cd:e8:bd:75:51:8b:5d:c4:74:15:17:78:be:
         da:65:5a:5a:85:e2:ac:ce:f6:ea:3d:31:a7:e0:5a:0e:95:2c:
         5b:51:f2:bf:6f:27:04:f6:89:05:24:55:be:ee:cc:ff:96:64:
         40:6e:1e:3f:d2:53:9b:24:6d:cc:dd:5d:66:35:e9:4e:f3:f6:
         03:ad:bd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:50:05 2026 by rpki-client