Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/fac715d8-87e1-3a99-a7fb-a2b63a26ecac.roa
File:                     fac715d8-87e1-3a99-a7fb-a2b63a26ecac.roa (raw, json)
Hash identifier:          55j3JK3BPZFOwdW4CNjQ58SQy1zhUUu8lWdTOf5rvk0=
Subject key identifier:   CD:F3:DE:B8:F8:03:5E:1D:83:0C:F3:A0:06:95:AE:09:F5:01:FD:C1
Certificate issuer:       /CN=9f5524fb-427a-4258-864d-80d99ebf694c
Certificate serial:       010D0C9F4328584E90BA572790E1F622EA056DC0
Authority key identifier: C1:AB:39:ED:07:87:F0:26:DB:C6:59:90:B3:93:77:B7:25:E6:F5:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/fac715d8-87e1-3a99-a7fb-a2b63a26ecac.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     14430
IP address blocks:        64.85.178.0/24 maxlen: 24
                          64.85.179.0/24 maxlen: 24
                          64.85.180.0/24 maxlen: 24
                          64.85.181.0/24 maxlen: 24
                          64.85.185.0/24 maxlen: 24
                          64.85.186.0/24 maxlen: 24
                          64.85.187.0/24 maxlen: 24
                          64.85.188.0/24 maxlen: 24
                          64.85.189.0/24 maxlen: 24
                          64.85.190.0/24 maxlen: 24
                          184.171.130.0/24 maxlen: 24
                          184.171.132.0/24 maxlen: 24
                          184.171.133.0/24 maxlen: 24
                          184.171.134.0/24 maxlen: 24
                          184.171.135.0/24 maxlen: 24
                          184.171.136.0/24 maxlen: 24
                          184.171.137.0/24 maxlen: 24
                          184.171.138.0/24 maxlen: 24
                          184.171.139.0/24 maxlen: 24
                          184.171.141.0/24 maxlen: 24
                          184.171.142.0/24 maxlen: 24
                          184.171.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:57:27:90:e1:f6:22:ea:05:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5524fb-427a-4258-864d-80d99ebf694c
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=5505bca4-85f5-4b88-bd4b-c4aef32c577f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:19:63:81:1e:3f:17:bd:8f:ad:db:33:91:
                    39:dc:5e:ed:f1:36:05:f4:76:98:72:7e:17:f4:27:
                    30:02:1a:c1:99:ad:6f:39:ad:23:80:c0:58:19:6e:
                    ce:a3:5b:48:30:b7:8e:63:07:f1:af:35:31:91:d0:
                    8a:51:2d:6a:51:53:a6:1c:bb:4d:40:9a:56:d5:8d:
                    fc:5b:9f:30:4f:69:0f:ea:ad:d9:06:8d:3d:1a:84:
                    24:52:f0:cf:47:9b:ff:e5:1c:ad:74:18:3f:b3:5b:
                    1c:f4:fc:91:82:1c:72:ce:b3:37:fd:8f:be:8a:ab:
                    a4:cb:c0:a6:1e:07:8a:7b:94:0c:c3:ac:0c:19:fe:
                    cf:98:b7:e8:94:6c:15:e0:8d:75:8f:23:96:2a:4b:
                    09:7b:3f:d9:54:e8:b9:74:44:6d:ae:6b:4b:4b:81:
                    99:8b:77:6c:c4:fd:e7:55:dd:4c:2d:c0:41:77:02:
                    dd:10:05:5d:00:76:f3:62:df:ea:a8:63:8d:01:6c:
                    ba:15:67:33:91:95:ea:43:59:76:38:34:e4:ff:5e:
                    55:23:e9:65:17:87:9c:eb:56:0c:e2:40:7b:49:3c:
                    d8:70:d0:54:0c:07:f5:e8:a5:bd:86:b8:8d:ee:65:
                    f1:1a:c2:22:86:80:f0:56:d1:53:61:e1:3e:0c:4c:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F3:DE:B8:F8:03:5E:1D:83:0C:F3:A0:06:95:AE:09:F5:01:FD:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/fac715d8-87e1-3a99-a7fb-a2b63a26ecac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:AB:39:ED:07:87:F0:26:DB:C6:59:90:B3:93:77:B7:25:E6:F5:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.85.178.0-64.85.181.255
                  64.85.185.0-64.85.190.255
                  184.171.130.0/24
                  184.171.132.0-184.171.139.255
                  184.171.141.0-184.171.143.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:80:d5:37:b3:8d:79:95:2e:ea:b5:e9:8c:af:85:3f:71:bf:
         25:11:78:9c:2d:98:d6:85:48:1f:f5:f3:54:33:1e:a2:2d:10:
         59:55:f0:c4:3c:41:7b:69:55:6c:64:11:79:27:6d:b9:64:3a:
         a1:50:f6:dd:1a:53:d4:c3:7e:b1:6e:80:09:37:d8:5c:67:bc:
         e3:f9:b2:1e:8f:ab:ff:62:00:37:be:63:d7:94:5b:c8:0c:8b:
         cc:95:98:d9:c0:0d:ca:de:45:bb:f9:d2:ee:ea:0e:e5:20:f2:
         1c:d4:5b:80:71:fc:4e:4c:8b:51:02:15:17:7e:e2:c9:19:5a:
         47:00:3a:97:8c:69:9f:39:40:0d:af:16:cd:85:18:c8:38:3e:
         ce:92:fa:a8:22:1b:dd:15:6f:b1:b9:e7:9f:8e:a0:05:e0:6c:
         4e:a7:81:81:27:76:c4:20:9b:c6:0d:2f:9f:cd:3c:30:11:ee:
         ff:53:d0:18:e5:54:ca:77:c0:00:26:af:fd:09:9f:03:79:2d:
         47:83:be:0d:1d:b9:52:21:94:c4:51:74:e0:d4:78:9f:36:cc:
         1f:ce:8f:96:13:d2:83:a3:64:16:e8:f3:28:40:db:dd:f6:35:
         4f:47:8b:85:2a:ff:32:1e:28:cd:ab:45:9c:23:c2:0e:64:3c:
         d7:02:17:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:13:15 2026 by rpki-client