Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa
File:                     cea2d881-3d76-3a80-94b9-42e2473af64d.roa (raw, json)
Hash identifier:          /gwRNnbzV/AuHjrjT8XGbcwDf8GBE1OoxkkDCQE+B6s=
Subject key identifier:   67:78:01:38:65:82:04:EF:2B:D8:3F:C0:D9:8D:60:46:37:5A:4F:EC
Certificate issuer:       /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
Certificate serial:       010D0C9F4328584F63F81E87164A1B75F6440980
Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     33387
IP address blocks:        63.141.224.0/19 maxlen: 24
                          74.91.16.0/20 maxlen: 24
                          107.150.32.0/19 maxlen: 24
                          142.54.160.0/19 maxlen: 24
                          192.151.144.0/20 maxlen: 24
                          192.187.96.0/19 maxlen: 24
                          198.204.224.0/19 maxlen: 24
                          199.168.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:1e:87:16:4a:1b:75:f6:44:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=f9eaec99-aee2-47b1-b538-0b4798cd0bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:f0:c8:40:f6:48:db:72:96:18:89:55:d1:
                    5b:57:df:6d:2b:e1:db:d2:0e:40:19:3a:b6:5d:58:
                    eb:45:ec:12:82:4a:15:fb:d8:37:f0:44:8c:1c:88:
                    83:a9:80:50:05:38:74:9e:b3:77:c1:22:e7:42:74:
                    a1:d1:b6:37:0e:1d:bf:a6:33:1b:f8:76:83:4b:7f:
                    ec:c0:96:c2:df:5a:9d:ea:79:ed:f7:a6:f3:78:69:
                    81:ec:25:8d:a3:2a:8e:df:b6:8d:b1:6f:fc:1d:aa:
                    6c:a3:06:1a:55:a4:fc:cd:a8:59:6c:37:46:c9:e5:
                    b6:60:81:ff:86:71:4b:c5:0f:78:21:e9:c9:7a:55:
                    7c:d6:21:9e:50:f0:f5:e3:c5:f9:76:f1:64:11:10:
                    94:e2:dc:46:e9:18:0b:31:90:94:b1:df:81:46:8a:
                    54:c2:a1:7c:64:52:fb:07:1a:f8:c6:81:16:f4:cc:
                    30:02:ef:56:4d:41:d9:15:52:95:bb:5f:09:4c:f1:
                    e2:ff:44:1b:1a:30:39:86:46:4e:4d:33:ac:14:e7:
                    b0:4a:01:fa:7c:75:5a:68:44:d1:50:4f:8c:db:13:
                    ef:80:22:b0:c0:05:de:d0:3d:ef:6d:52:b2:4d:6b:
                    91:1f:c0:33:02:d2:29:ef:3e:04:48:97:1e:e3:02:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:78:01:38:65:82:04:EF:2B:D8:3F:C0:D9:8D:60:46:37:5A:4F:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl

            X509v3 Authority Key Identifier:
                keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.224.0/19
                  74.91.16.0/20
                  107.150.32.0/19
                  142.54.160.0/19
                  192.151.144.0/20
                  192.187.96.0/19
                  198.204.224.0/19
                  199.168.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:39:83:de:cb:ac:32:9a:57:0b:a5:d1:84:29:f4:ef:d0:58:
         96:83:b8:19:3d:47:76:05:bb:29:23:4d:29:9d:40:81:e9:0b:
         38:53:2f:f7:c0:38:85:b8:e8:3a:ba:b2:78:56:5a:d5:f7:34:
         76:b0:0d:22:86:71:17:b5:52:b1:6d:09:80:bf:d2:fc:46:00:
         bf:59:24:c8:99:02:ca:e6:34:39:69:77:35:ff:f6:95:40:38:
         b2:20:ec:4d:09:cd:7b:0f:01:c0:ee:a9:69:07:4a:78:a4:eb:
         96:37:98:5e:ef:ad:26:41:cb:0d:1e:2f:bf:23:d3:c1:63:6c:
         be:74:7e:14:31:c9:56:a9:34:be:fa:b9:e4:00:7b:09:ab:a1:
         d7:16:0f:2e:ab:1b:71:63:d7:d8:54:7b:4c:e3:04:fd:bd:50:
         65:1b:d4:69:2e:b2:53:9b:47:fa:fd:76:aa:37:a5:e4:b3:56:
         19:76:29:28:13:bd:45:c3:02:0d:3e:4f:11:41:47:22:16:f4:
         94:b9:8b:57:f4:a4:79:68:1f:f2:ee:3e:85:ca:52:2a:cb:a3:
         f1:c3:13:2d:73:d7:ab:47:af:0e:6c:f6:85:d2:19:c5:32:5c:
         48:79:d7:68:3d:c1:b0:ae:92:f3:2f:e9:1a:c4:08:8b:af:83:
         e9:07:89:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:47:08 2026 by rpki-client