Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/f8956965-ea82-38dc-b53b-fcc5740c0d34.roa
File:                     f8956965-ea82-38dc-b53b-fcc5740c0d34.roa (raw, json)
Hash identifier:          VBq853Uj4zCfAyUJnE/Q/ff2qlc1iNF4DNMWliasLUw=
Subject key identifier:   44:B4:9A:CA:FC:AA:A5:CF:5C:3B:5F:8E:32:03:4C:1D:D1:7E:1D:A6
Certificate issuer:       /CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
Certificate serial:       010D0C9F4328584DDA55DA3BE9CC2F6C1EB3CF40
Authority key identifier: 9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/f8956965-ea82-38dc-b53b-fcc5740c0d34.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     23255
IP address blocks:        131.219.0.0/20 maxlen: 20
                          131.219.0.0/21 maxlen: 21
                          131.219.0.0/22 maxlen: 22
                          131.219.0.0/24 maxlen: 24
                          131.219.1.0/24 maxlen: 24
                          131.219.2.0/24 maxlen: 24
                          131.219.3.0/24 maxlen: 24
                          131.219.4.0/24 maxlen: 24
                          131.219.5.0/24 maxlen: 24
                          131.219.6.0/24 maxlen: 24
                          131.219.7.0/24 maxlen: 24
                          131.219.8.0/22 maxlen: 22
                          131.219.8.0/23 maxlen: 23
                          131.219.8.0/24 maxlen: 24
                          131.219.9.0/24 maxlen: 24
                          131.219.9.0/25 maxlen: 25
                          131.219.10.0/24 maxlen: 24
                          131.219.11.0/24 maxlen: 24
                          131.219.12.0/23 maxlen: 23
                          131.219.12.0/24 maxlen: 24
                          131.219.13.0/24 maxlen: 24
                          131.219.14.0/24 maxlen: 24
                          131.219.15.0/24 maxlen: 24
                          131.219.16.0/24 maxlen: 24
                          131.219.17.0/24 maxlen: 24
                          131.219.18.0/24 maxlen: 24
                          131.219.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:da:3b:e9:cc:2f:6c:1e:b3:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=e183ddd4-b88c-44c9-941e-7186e3b41a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:1d:6f:2b:d5:47:75:d7:ef:ea:5b:de:9b:
                    1b:45:31:e6:23:3c:5a:c5:81:c1:e4:d8:a1:35:0b:
                    6a:c5:25:56:72:cb:74:98:f8:e9:b8:99:ac:72:aa:
                    0c:44:b6:20:69:c8:59:d6:be:c7:9f:6a:eb:6b:41:
                    bb:e8:29:f7:d7:9a:7a:50:1b:6c:35:e0:3a:b3:c4:
                    03:be:ec:56:96:dd:b9:e3:39:71:3b:a9:d8:7b:22:
                    c8:67:3d:72:98:d6:e6:67:3f:e5:cc:22:40:ca:88:
                    34:b3:07:71:b7:bf:ed:91:b8:fc:95:80:5b:f7:ca:
                    ca:78:1c:9b:5d:7c:1e:0d:bd:24:25:7d:3a:95:5d:
                    ce:12:20:00:7c:dc:5b:f9:57:27:6e:9e:f0:37:f0:
                    96:98:56:f4:21:0e:00:16:af:f9:09:c1:ac:1a:ac:
                    b3:4a:14:2a:e9:f0:f9:16:a7:6f:d0:0b:5e:a9:a7:
                    6b:63:ca:0b:c7:9f:87:a7:36:1c:7c:09:01:e2:64:
                    b8:15:8a:49:eb:6f:56:6b:da:f5:5f:d5:3f:4e:d0:
                    da:f8:f2:61:6f:f4:1f:17:47:61:a2:a9:08:b4:03:
                    46:da:77:2d:e3:85:6e:67:c2:c7:ad:61:e4:20:7a:
                    2d:f5:73:fe:19:a0:a4:b5:76:f5:ae:ac:92:c4:c0:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B4:9A:CA:FC:AA:A5:CF:5C:3B:5F:8E:32:03:4C:1D:D1:7E:1D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/f8956965-ea82-38dc-b53b-fcc5740c0d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl

            X509v3 Authority Key Identifier:
                keyid:9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.219.0.0-131.219.19.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:96:fe:cb:e8:71:fc:66:28:27:97:4d:f2:66:db:e0:3a:46:
         1b:57:a1:09:bd:8b:07:fe:03:5e:a3:8a:b6:6e:5a:c8:47:34:
         7f:5c:eb:69:9e:af:16:06:92:ed:3c:d3:5e:1c:69:50:b3:66:
         de:9b:73:90:3e:04:33:21:05:e1:99:4b:b5:30:15:c5:93:ec:
         da:bf:e5:c4:cd:2b:e7:5e:39:01:07:01:16:c0:79:95:fe:0a:
         69:b4:00:1e:ea:5f:dc:3c:a9:33:2b:04:6c:ea:dc:8e:51:40:
         14:8c:b7:c5:42:fd:b8:19:67:17:5c:8d:19:11:14:4d:bf:8a:
         51:45:2b:0c:39:5f:43:e6:f3:ef:91:8a:07:4c:d5:17:7e:93:
         7d:dd:6e:5e:24:23:cc:0c:d9:38:8f:48:8d:ac:a9:97:1d:3e:
         aa:0c:b0:23:7d:61:ef:8d:53:89:04:b8:e2:51:c6:21:0c:78:
         21:3f:a3:8e:c7:86:16:c1:21:52:0b:6a:8a:e8:4e:89:95:c0:
         30:1e:35:4e:7c:aa:98:23:09:99:66:97:70:5d:f3:cf:13:c1:
         10:93:b2:3b:bd:b0:d7:ca:02:f4:15:d4:47:ee:15:d1:7d:f2:
         9b:c1:0b:6e:b7:03:a1:4a:5d:c1:16:33:14:a7:05:48:9c:8f:
         e0:05:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:27:57 2026 by rpki-client