Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa
File:                     63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa (raw, json)
Hash identifier:          yYIzi3vLpvh4JS1z9G1Gxn62Zg0u+T8S0ZobQxSw1+w=
Subject key identifier:   41:63:35:05:A1:6A:6F:8B:04:2F:9B:B1:62:7D:5D:FB:DF:C3:EB:3F
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F4328584F02421E5184B52AC3996CF200
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     20299
IP address blocks:        65.182.8.0/24 maxlen: 24
                          65.182.31.0/24 maxlen: 24
                          200.12.224.0/24 maxlen: 24
                          200.12.225.0/24 maxlen: 24
                          200.12.227.0/24 maxlen: 24
                          200.12.231.0/24 maxlen: 24
                          205.211.192.0/22 maxlen: 24
                          205.211.196.0/22 maxlen: 24
                          205.211.200.0/22 maxlen: 24
                          205.211.204.0/22 maxlen: 24
                          205.211.218.0/23 maxlen: 24
                          205.211.220.0/24 maxlen: 24
                          205.211.221.0/24 maxlen: 24
                          205.211.224.0/24 maxlen: 24
                          205.211.233.0/24 maxlen: 24
                          205.211.234.0/24 maxlen: 24
                          205.211.244.0/22 maxlen: 24
                          205.211.248.0/21 maxlen: 24
                          208.96.140.0/24 maxlen: 24
                          208.96.141.0/24 maxlen: 24
                          208.96.143.0/24 maxlen: 24
                          209.124.96.0/24 maxlen: 24
                          209.124.97.0/24 maxlen: 24
                          209.124.110.0/24 maxlen: 24
                          209.124.112.0/24 maxlen: 24
                          209.124.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:1e:51:84:b5:2a:c3:99:6c:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=52c7e041-941a-49ab-8fca-4642db013254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:39:c6:94:db:85:80:65:b0:87:e9:1c:10:
                    ff:1b:4a:12:6e:43:62:f6:73:78:c9:c0:22:f6:fc:
                    d5:28:60:80:68:56:8c:be:c2:7f:79:c7:0c:fb:8a:
                    bf:1d:e5:cb:fa:c2:e9:a7:d7:f4:9a:ee:7b:7d:cb:
                    f3:fd:4e:90:39:52:c2:c8:81:16:6e:61:2c:97:fe:
                    b7:8c:71:1d:b3:80:ed:85:fd:ba:be:85:83:02:25:
                    e2:97:2a:57:08:ff:eb:5e:76:f2:9d:b3:56:02:94:
                    0c:4d:76:d0:61:c9:a5:4a:88:9a:0b:25:86:16:36:
                    97:49:5c:d2:86:94:d1:31:ea:19:b7:2b:af:27:2b:
                    3b:80:54:f9:94:21:b0:37:b9:f3:09:13:ed:70:c8:
                    1e:57:f9:10:ad:21:8e:b0:e8:79:ce:5e:c4:b8:eb:
                    9e:e8:da:28:74:f6:67:46:38:a4:e7:24:67:b6:be:
                    a4:91:ec:6a:ad:89:e0:a9:ab:c4:81:db:4d:2b:c7:
                    bf:f2:06:2b:df:89:a7:48:fb:0c:4e:ed:d6:b9:a6:
                    2d:99:b0:ad:44:c3:aa:9f:98:dd:39:e5:f7:e1:1b:
                    dd:30:bd:66:62:2f:14:37:f3:f8:e0:05:ca:d9:d7:
                    ef:c7:08:4c:4b:a5:97:a5:86:98:24:8f:c4:8f:e6:
                    c7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:63:35:05:A1:6A:6F:8B:04:2F:9B:B1:62:7D:5D:FB:DF:C3:EB:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.182.8.0/24
                  65.182.31.0/24
                  200.12.224.0/23
                  200.12.227.0/24
                  200.12.231.0/24
                  205.211.192.0/20
                  205.211.218.0-205.211.221.255
                  205.211.224.0/24
                  205.211.233.0-205.211.234.255
                  205.211.244.0-205.211.255.255
                  208.96.140.0/23
                  208.96.143.0/24
                  209.124.96.0/23
                  209.124.110.0/24
                  209.124.112.0/24
                  209.124.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:7b:49:89:db:08:87:38:00:77:d1:71:c9:27:94:6c:2d:87:
         f7:cd:77:91:d9:b9:eb:9f:70:03:d0:88:11:4f:a6:9a:aa:e2:
         f5:fa:6d:49:91:29:00:c3:2f:a7:fd:ff:e3:a5:1f:33:5e:85:
         9f:5d:38:53:8d:c7:9f:ff:2c:59:33:7d:d6:dd:0d:df:a9:22:
         4b:54:33:4e:b5:d8:de:ee:1a:c4:ca:4b:dc:2f:18:d1:a4:00:
         f7:e3:0f:90:3c:00:5e:1c:40:b9:bd:bd:70:b6:ee:7f:1f:2f:
         6e:29:6c:24:1a:72:c2:20:51:c9:93:2a:eb:a3:52:7f:c7:46:
         74:42:ef:13:da:bc:2a:3d:39:c6:36:fe:34:21:c7:16:60:ba:
         a1:15:c8:5e:82:6c:86:59:e0:2e:50:51:77:29:5f:ee:01:f8:
         3e:42:10:cc:ac:82:bf:1b:4a:15:b5:82:95:0b:34:df:d2:14:
         80:8b:fd:5e:d3:be:48:d3:e9:dd:b3:25:14:a7:71:65:b3:d1:
         9d:7d:ff:93:68:57:25:e9:4c:19:46:d2:41:7f:2e:ee:89:c3:
         fc:41:d3:77:5c:81:6c:f0:aa:23:f8:ba:a9:15:e2:33:55:92:
         b5:0e:fe:f6:6d:a4:8e:40:7a:31:da:2d:b2:02:5d:57:45:17:
         46:a2:1e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 18:02:03 2026 by rpki-client