Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa
File:                     4e6253b3-d831-3192-8372-3f91ef10aa0f.roa (raw, json)
Hash identifier:          uuIhdnDEDIn0yK39epB1Smal95nsbGDKflMDJq0JGGQ=
Subject key identifier:   93:E7:D7:F8:91:78:3A:FA:5D:05:3C:4C:D0:F8:F2:12:CC:72:0A:A9
Certificate issuer:       /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Certificate serial:       010D0C9F4328584EC371C2141523C5B8BC810680
Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     15213
IP address blocks:        64.57.0.0/20 maxlen: 20
                          64.57.0.0/21 maxlen: 21
                          64.57.0.0/24 maxlen: 24
                          64.57.1.0/24 maxlen: 24
                          64.57.2.0/24 maxlen: 24
                          64.57.3.0/24 maxlen: 24
                          64.57.4.0/24 maxlen: 24
                          64.57.5.0/24 maxlen: 24
                          64.57.6.0/24 maxlen: 24
                          64.57.8.0/21 maxlen: 21
                          64.57.8.0/24 maxlen: 24
                          64.57.9.0/24 maxlen: 24
                          64.57.10.0/24 maxlen: 24
                          64.57.11.0/24 maxlen: 24
                          64.57.12.0/24 maxlen: 24
                          64.57.13.0/24 maxlen: 24
                          64.57.14.0/24 maxlen: 24
                          64.57.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c2:14:15:23:c5:b8:bc:81:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=8bf3c796-8918-477a-9c48-f668c12a18ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:94:12:64:dc:07:18:fc:e2:db:76:16:3d:
                    66:5d:1d:29:39:df:ad:58:be:64:71:f4:ed:bc:b6:
                    80:74:db:e6:63:d0:4f:ed:f4:42:0c:d4:22:c3:a8:
                    f7:3e:d5:97:f2:59:f5:25:df:c1:74:24:fb:d6:d6:
                    a2:bf:c5:b2:de:e2:1b:b1:d0:a4:c7:7d:62:9c:dd:
                    16:e2:28:ec:d5:ac:62:17:f4:8b:e3:3a:08:9f:66:
                    3f:18:3a:0c:9c:fa:4f:75:02:35:a2:c1:5c:c3:47:
                    90:de:e2:f1:a9:a9:48:2d:f3:c3:8d:de:e2:26:89:
                    ae:6f:09:22:57:33:19:11:e0:b9:74:ed:9c:ef:60:
                    e4:cc:89:94:73:7f:b4:d0:52:fb:8a:f9:bd:92:85:
                    79:fd:6d:a1:e7:ac:ca:50:b9:3b:42:34:ec:1f:11:
                    8e:6c:32:d3:d7:29:0d:6c:09:d5:e7:6b:89:b7:77:
                    b2:81:53:a0:7a:54:3a:f0:c1:aa:75:91:4f:d0:3b:
                    c0:b1:21:0d:9c:c9:a2:1d:b2:15:9a:3d:a3:56:97:
                    b1:b3:3b:81:36:af:a4:b9:55:43:b5:2c:9a:62:9d:
                    91:5a:be:49:86:32:2a:d6:9d:e0:14:9c:5e:e8:f3:
                    92:23:7b:ff:a7:6d:60:cd:06:7f:df:79:5b:56:cb:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E7:D7:F8:91:78:3A:FA:5D:05:3C:4C:D0:F8:F2:12:CC:72:0A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl

            X509v3 Authority Key Identifier:
                keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:c5:e4:d6:56:c3:8b:56:44:07:e1:5b:a9:b1:e6:2f:01:
         49:21:02:79:99:c9:cb:c2:46:83:ad:c6:06:b4:cf:27:81:04:
         3c:ad:23:27:f2:13:7e:42:60:d4:ff:60:5b:bc:3b:28:5d:33:
         dd:a1:0c:0f:77:e5:05:c9:70:24:dd:08:34:3c:ef:e2:68:8e:
         f0:20:71:1c:f3:e9:a2:ed:30:ba:69:51:9c:bc:73:26:9e:e2:
         f0:d9:36:7b:a4:68:48:9b:8d:1f:55:84:cd:6d:7a:b4:d1:3e:
         25:b9:47:a5:ab:ab:bf:f4:d2:32:b5:da:c9:15:34:01:9e:ba:
         59:1a:78:d5:16:a2:2a:9c:12:d7:db:f2:2d:52:87:6a:f6:88:
         e0:60:56:af:8f:e5:a7:bf:d2:a8:e3:92:c7:eb:f9:8c:7b:89:
         b0:a2:47:12:6e:9c:23:75:7a:e9:84:d0:96:ff:30:15:f9:e0:
         4b:39:79:9a:cf:d4:1e:2c:a4:26:ee:43:87:af:e6:18:c1:c4:
         44:d1:9b:16:41:49:94:f3:b7:28:68:c3:99:c4:b2:db:c3:9f:
         0e:1a:14:c1:c8:fa:aa:4a:5d:7a:de:50:fc:f0:b2:35:3f:d0:
         03:fd:f1:8a:1e:44:1e:92:fc:6e:7c:3f:0a:bd:19:f6:7c:52:
         49:0b:6e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:02 2026 by rpki-client