Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3200161c-c67c-3c1e-b3de-1a94680c4bb9.roa
File:                     3200161c-c67c-3c1e-b3de-1a94680c4bb9.roa (raw, json)
Hash identifier:          ZMiEGFRWDSicsgp+ihrAco6o5N9Hus/+FpdV98tGBZ0=
Subject key identifier:   35:CF:99:BF:9F:E1:22:32:49:59:7B:8E:BC:82:64:40:58:0E:12:FB
Certificate issuer:       /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
Certificate serial:       010D0C9F4328584E6DD4D46EEA788AE6AF1428EC
Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3200161c-c67c-3c1e-b3de-1a94680c4bb9.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     161
IP address blocks:        192.91.66.0/24 maxlen: 24
                          192.91.75.0/24 maxlen: 24
                          192.91.101.0/24 maxlen: 24
                          192.94.92.0/24 maxlen: 24
                          198.47.19.0/24 maxlen: 24
                          198.47.20.0/24 maxlen: 24
                          198.47.21.0/24 maxlen: 24
                          198.47.22.0/24 maxlen: 24
                          198.47.23.0/24 maxlen: 24
                          198.47.26.0/24 maxlen: 24
                          198.47.27.0/24 maxlen: 24
                          198.47.28.0/24 maxlen: 24
                          198.47.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d4:6e:ea:78:8a:e6:af:14:28:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=9e7f8531-e5ec-4e38-b6f4-93141d652018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:6c:03:ca:7d:82:22:0f:aa:18:ae:65:65:
                    2c:78:fa:3a:05:67:8e:22:e6:3c:dc:5a:dc:e4:66:
                    5e:6a:75:51:d3:db:81:24:75:ca:8a:aa:8f:80:0f:
                    b6:aa:14:5a:9d:07:18:45:a7:4d:5e:cb:58:e5:1b:
                    a4:61:8e:a5:e6:3b:28:e2:ac:99:c3:7f:d1:49:c0:
                    2a:d9:3b:20:f6:e0:d2:9a:1c:48:c8:f5:13:70:81:
                    30:9c:c3:b6:5f:da:e0:a9:ed:12:88:bb:be:23:59:
                    93:da:2c:01:40:be:fc:af:f9:2a:a0:19:ad:4e:57:
                    ab:aa:0b:e3:a6:55:7d:b4:34:39:52:27:b8:35:25:
                    9d:be:22:2e:af:01:68:6e:cc:7a:d9:ec:e8:a8:a3:
                    66:c7:74:c2:cb:38:3e:7f:f2:da:9d:99:10:47:99:
                    a3:96:0d:12:67:53:a9:18:ca:b5:45:5c:90:4b:5b:
                    f0:31:03:fa:15:9f:7a:39:33:e3:8a:07:5e:81:25:
                    5f:9d:ab:51:f6:f4:d9:27:2b:3e:83:80:6c:74:56:
                    be:03:b9:93:fa:72:24:3b:12:f2:ee:45:4a:f4:9c:
                    a9:b3:46:7a:db:77:a1:5a:90:bb:2f:c2:6f:5e:a0:
                    a3:bf:b9:69:30:8d:3c:c1:d5:fb:be:49:47:d2:9d:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CF:99:BF:9F:E1:22:32:49:59:7B:8E:BC:82:64:40:58:0E:12:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3200161c-c67c-3c1e-b3de-1a94680c4bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl

            X509v3 Authority Key Identifier:
                keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.91.66.0/24
                  192.91.75.0/24
                  192.91.101.0/24
                  192.94.92.0/24
                  198.47.19.0-198.47.23.255
                  198.47.26.0-198.47.29.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:19:81:5a:d5:9e:cd:79:e3:ed:f5:05:ce:7c:0a:29:56:fc:
         99:94:0a:61:b0:f7:b5:c3:5b:10:ae:5f:f3:09:93:9e:fc:10:
         03:a4:43:ff:40:90:01:ca:d6:94:1c:5d:75:8e:7a:7e:d4:dd:
         52:82:d0:f5:82:42:8b:f1:8f:2a:da:01:e5:d1:bb:a4:2c:ae:
         63:17:d9:e6:79:10:45:08:df:93:7f:a8:54:45:26:36:08:a4:
         5b:dc:87:fe:20:17:c5:c0:30:8f:9e:73:db:05:37:8f:51:03:
         50:9d:91:60:82:4b:56:df:02:2a:30:63:87:58:00:a6:08:24:
         03:32:97:2e:72:45:44:f2:8e:ec:72:fc:98:48:b3:66:70:01:
         9d:48:95:17:77:1f:3e:bb:b3:8a:95:7f:4f:b1:46:a5:f0:0d:
         05:61:2d:59:d7:ea:fc:b6:4a:87:bd:e3:61:47:c4:cc:a5:c6:
         cb:95:1d:25:37:ee:5b:57:c5:3a:5d:52:5a:95:19:ff:b5:07:
         a9:8e:fc:00:ab:e3:b5:d0:a0:38:ed:6d:9e:94:15:e7:a1:f9:
         12:c8:e9:c0:e1:1e:82:89:ab:f1:06:27:e5:8b:28:21:d6:63:
         c2:a6:3d:b5:6b:18:b5:83:33:06:f0:ce:69:da:c1:0b:1f:9a:
         4b:e1:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:02 2026 by rpki-client