Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/204e5921-c590-320c-bc34-108e188842dc.roa
File:                     204e5921-c590-320c-bc34-108e188842dc.roa (raw, json)
Hash identifier:          tmLo3DNVlvFU+Ytp23/UFoL+1wghu7N4OcVzeM2wLTM=
Subject key identifier:   7A:4A:49:7C:48:11:02:2F:35:31:2B:BD:89:88:F8:06:FF:6C:F7:16
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E73F3903FD76F9988D8924BD0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/204e5921-c590-320c-bc34-108e188842dc.roa
Signing time:             Fri 10 Jul 2026 13:37:13 +0000
ROA not before:           Fri 10 Jul 2026 13:37:13 +0000
ROA not after:            Thu 08 Oct 2026 13:37:13 +0000
asID:                     20115
IP address blocks:        64.93.36.0/22 maxlen: 24
                          64.205.216.0/22 maxlen: 24
                          65.86.80.0/22 maxlen: 24
                          72.244.232.0/22 maxlen: 24
                          74.0.20.0/22 maxlen: 24
                          74.1.8.0/22 maxlen: 24
                          216.46.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:f3:90:3f:d7:6f:99:88:d8:92:4b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 10 13:37:13 2026 GMT
            Not After : Oct  8 13:37:13 2026 GMT
        Subject: CN=d849a765-7973-47f9-9f5e-75224795983e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:18:d1:7f:4d:37:fa:c8:81:18:83:39:f1:21:
                    80:05:27:b2:9f:c3:81:45:ec:23:3f:56:6f:5b:9c:
                    70:26:ef:7d:09:15:46:0a:29:17:b9:74:7b:e8:da:
                    da:97:2f:b6:ac:52:15:1a:b1:0d:b2:a8:0a:3d:ff:
                    19:a4:ac:24:68:8d:cf:b2:92:11:91:9b:b7:02:d8:
                    84:14:57:11:a3:40:47:69:25:50:f0:81:42:cc:da:
                    04:31:e2:e8:5f:f6:70:ba:40:fa:70:4c:e5:37:39:
                    49:b5:68:e6:56:c2:69:1f:f9:67:b4:0b:34:56:2a:
                    f8:f5:fb:30:d8:42:fb:95:1a:9f:57:ae:89:ea:53:
                    e0:72:1b:8b:b0:bc:22:92:c9:fa:bc:eb:8c:6b:0e:
                    ad:2b:d7:c2:88:b6:73:ee:c8:fa:b0:ab:3d:82:52:
                    e2:77:fa:1f:ce:8a:f1:5d:b4:7b:2a:4d:30:7f:be:
                    74:4f:1a:30:31:e7:6c:12:cf:5f:b3:3d:33:4a:2f:
                    f5:88:75:e1:c5:ba:d0:93:83:75:19:b3:76:d9:08:
                    b6:91:7c:8d:c8:ba:a8:f1:f0:6a:bf:54:63:ec:6e:
                    d6:09:2f:7e:74:d9:1c:bf:a7:dd:12:92:14:e9:3b:
                    46:3e:2f:a8:46:a7:8e:2f:53:f7:7d:18:41:b5:f9:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4A:49:7C:48:11:02:2F:35:31:2B:BD:89:88:F8:06:FF:6C:F7:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/204e5921-c590-320c-bc34-108e188842dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.36.0/22
                  64.205.216.0/22
                  65.86.80.0/22
                  72.244.232.0/22
                  74.0.20.0/22
                  74.1.8.0/22
                  216.46.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:eb:33:cf:e8:72:42:23:32:31:05:d6:34:8d:80:f6:0b:c4:
         ea:60:e2:16:47:52:90:5f:dd:0a:30:50:c0:e7:fd:53:04:78:
         45:59:dd:95:d8:81:82:f4:d7:ec:67:ba:81:e2:2d:99:d0:a5:
         6b:01:f0:5c:1d:ab:ad:f3:96:17:01:db:54:25:ff:5e:75:51:
         fe:75:d4:75:2f:76:1e:bc:4d:8f:03:83:5a:13:1a:ad:08:12:
         a5:36:00:bb:28:1f:e2:a0:d8:20:69:a4:ab:f3:b1:ba:5c:1e:
         f0:14:e7:a2:b4:7c:4f:27:83:a8:99:71:00:fc:78:61:86:56:
         df:29:2f:76:e6:c9:94:1b:c7:8f:b3:54:f0:22:cc:73:c3:37:
         ec:92:3e:70:3a:02:7f:be:3d:a2:56:b4:ed:95:9c:ee:99:09:
         a8:34:5c:94:82:8c:fd:c2:a1:0f:4c:b8:7a:ac:6c:5a:2d:7f:
         a2:4f:a7:b6:d0:09:e4:c2:3d:ac:9c:1a:91:8d:e0:44:ef:a0:
         ad:3f:75:75:cb:32:9b:cb:b8:90:ab:aa:52:56:8e:39:43:6c:
         c5:8e:01:e2:45:e5:24:58:14:f9:77:f9:fa:16:15:e9:1a:c8:
         6a:3c:cf:b3:b8:6a:c6:aa:dd:f2:37:ae:a9:4b:8a:38:5d:e9:
         0a:b9:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:40 2026 by rpki-client