Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa
File:                     63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa (raw, json)
Hash identifier:          hYiiVxQXXs7eEwuiEmP5AJNJ2FnvDtxdj0PIDvf3wlo=
Subject key identifier:   7A:B4:60:1D:61:6D:F7:6B:2D:FC:BD:32:20:D6:E1:0F:0C:0A:0C:3C
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F4328584DE61C7C409675AF46E5AE21C0
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa
Signing time:             Wed 20 May 2026 18:14:53 +0000
ROA not before:           Wed 20 May 2026 18:14:53 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     20299
IP address blocks:        65.182.8.0/24 maxlen: 24
                          65.182.31.0/24 maxlen: 24
                          200.12.224.0/24 maxlen: 24
                          200.12.225.0/24 maxlen: 24
                          200.12.227.0/24 maxlen: 24
                          200.12.231.0/24 maxlen: 24
                          205.211.192.0/22 maxlen: 24
                          205.211.196.0/22 maxlen: 24
                          205.211.200.0/22 maxlen: 24
                          205.211.204.0/22 maxlen: 24
                          205.211.218.0/23 maxlen: 24
                          205.211.220.0/24 maxlen: 24
                          205.211.221.0/24 maxlen: 24
                          205.211.224.0/24 maxlen: 24
                          205.211.233.0/24 maxlen: 24
                          205.211.234.0/24 maxlen: 24
                          205.211.244.0/22 maxlen: 24
                          205.211.248.0/21 maxlen: 24
                          208.96.140.0/24 maxlen: 24
                          208.96.141.0/24 maxlen: 24
                          208.96.143.0/24 maxlen: 24
                          209.124.96.0/24 maxlen: 24
                          209.124.97.0/24 maxlen: 24
                          209.124.110.0/24 maxlen: 24
                          209.124.112.0/24 maxlen: 24
                          209.124.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:1c:7c:40:96:75:af:46:e5:ae:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: May 20 18:14:53 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=26dad39a-25e9-4fb6-bb9a-bc19d789eb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:c0:73:20:fe:4c:80:cd:cd:5f:dd:b8:18:
                    10:7c:cf:7b:ea:f3:2b:ea:1f:3c:f4:9e:5c:e2:5a:
                    25:4d:9b:de:65:4e:65:92:9f:c7:6a:73:50:ba:c7:
                    a4:96:94:88:fb:00:a3:4d:37:dd:1c:5f:d0:30:df:
                    b0:36:ca:0d:50:8e:bd:4b:65:dc:50:ac:89:cc:fb:
                    2a:8d:2c:be:fa:86:28:21:ed:96:e6:84:83:6e:5b:
                    fc:4a:ee:5c:c9:0e:c4:94:8e:e4:f7:d7:3b:4d:aa:
                    60:27:7b:1a:8a:93:90:97:cd:89:d9:92:72:66:65:
                    53:1c:bc:88:fa:9e:f3:82:9b:1f:c0:c4:07:6a:02:
                    e1:a9:9b:fd:b7:23:5f:6c:94:f1:8f:96:31:1d:f9:
                    3c:7a:f7:c3:63:6f:fb:7b:bc:e9:33:82:24:97:85:
                    20:b3:9d:72:08:1b:0a:5b:f0:18:3e:7e:be:48:c2:
                    79:29:92:40:84:47:c0:fa:01:e7:f8:5a:4e:d3:fb:
                    8d:17:35:24:f2:01:73:e7:e4:8f:cc:99:84:2a:37:
                    bf:03:5c:ce:46:9b:d6:01:ae:64:bc:1e:eb:d5:03:
                    70:04:71:97:fe:9a:03:7e:a4:92:16:1b:48:fa:95:
                    32:c2:4e:68:a4:ac:01:ef:1e:ac:70:8a:cf:5a:f8:
                    c9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B4:60:1D:61:6D:F7:6B:2D:FC:BD:32:20:D6:E1:0F:0C:0A:0C:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.182.8.0/24
                  65.182.31.0/24
                  200.12.224.0/23
                  200.12.227.0/24
                  200.12.231.0/24
                  205.211.192.0/20
                  205.211.218.0-205.211.221.255
                  205.211.224.0/24
                  205.211.233.0-205.211.234.255
                  205.211.244.0-205.211.255.255
                  208.96.140.0/23
                  208.96.143.0/24
                  209.124.96.0/23
                  209.124.110.0/24
                  209.124.112.0/24
                  209.124.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:da:23:45:e1:04:64:71:3c:b5:74:45:a5:ef:1a:c5:30:9b:
         e3:76:c3:27:f3:d1:db:0c:88:58:35:f5:38:9c:15:c4:65:8a:
         30:46:48:ee:aa:57:f6:9c:ea:e6:fe:13:bf:23:ed:dc:4d:cd:
         4c:f8:bc:8e:b6:93:0a:91:7f:f0:d4:8c:83:02:28:53:2a:27:
         62:4e:b2:c4:ad:d1:23:30:d0:83:43:90:86:38:25:9d:30:82:
         cf:16:a4:94:41:de:01:0c:d3:ad:3a:f4:fe:57:e7:63:ed:23:
         68:9d:31:40:b3:7f:5a:ca:3f:99:5d:b1:34:c3:ce:a7:c1:7d:
         b7:6d:36:ce:fd:b5:97:22:09:17:fb:74:ec:65:fb:86:30:30:
         bc:34:de:3b:f8:43:d3:76:e2:02:a8:25:a9:56:3a:5b:c4:92:
         0f:40:c9:df:57:ee:2d:09:41:4c:24:71:0f:ff:d8:db:e9:a8:
         87:ea:76:e1:2f:02:44:08:49:cb:25:21:d8:02:b2:02:ea:ec:
         cd:e5:36:ac:80:c7:a9:9a:99:84:c2:fb:25:bb:b9:2c:df:fb:
         e5:ac:a5:05:a1:12:a1:e8:39:6e:dc:3e:1d:75:c8:5e:56:db:
         6f:e3:fc:56:4e:6f:98:ec:21:94:32:6d:ef:e4:65:a0:9c:ec:
         2f:0a:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 09:54:08 2026 by rpki-client