Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
File:                     82188834-19d0-34be-9f3c-13ee797db6fa.roa (raw, json)
Hash identifier:          4dsOL1tosO3FgeS2YumENe2T2eq0f5nrPzG73HwRPuk=
Subject key identifier:   2A:27:23:5C:25:FA:AE:5F:F1:37:35:BB:75:8F:8E:8F:E2:90:94:2D
Certificate issuer:       /CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
Certificate serial:       010D0C9F4328584E640F71C37CBF18437672BA00
Authority key identifier: A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     54665
IP address blocks:        66.128.128.0/20 maxlen: 20
                          162.220.84.0/22 maxlen: 22
                          192.190.88.0/22 maxlen: 22
                          198.177.52.0/22 maxlen: 22
                          199.59.112.0/22 maxlen: 22
                          2605:4680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:71:c3:7c:bf:18:43:76:72:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=f1e251e8-4f2c-452d-95d2-2c57a571e66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:da:c1:f0:40:e7:c1:24:88:b1:c1:8d:29:
                    b1:3b:e3:c7:30:30:e3:47:22:ba:3f:c9:bc:43:d8:
                    fa:9b:33:f5:a7:0c:e1:1e:37:d5:e0:40:ed:f1:15:
                    57:a8:17:38:2e:51:5a:28:81:3b:a3:68:2c:e3:20:
                    b3:f9:95:9b:1a:2d:ba:83:ab:d0:62:cd:1d:02:18:
                    dc:cc:0e:1b:58:0c:8b:91:84:31:bc:60:3d:b4:3c:
                    6b:68:42:25:56:cd:01:53:38:86:25:ea:89:3c:e8:
                    c5:c3:5a:a6:8b:cc:dc:f6:e0:b7:e3:9e:b9:6c:97:
                    0d:cd:c5:01:d1:99:45:1b:9d:0b:4f:83:e3:70:26:
                    98:28:a2:70:75:54:3b:5c:20:45:84:00:25:29:46:
                    a4:0a:b1:18:f2:bb:6e:82:d0:2c:57:05:ab:85:5c:
                    6d:30:fe:b8:ce:d9:63:92:d9:0d:86:c7:bf:6e:5c:
                    d9:db:ab:be:59:2d:d8:4e:ae:23:bd:f2:ad:ef:62:
                    89:f8:3c:e4:1c:8e:b3:01:db:62:75:09:39:4c:b4:
                    7d:7b:06:d8:bb:33:ab:a1:75:60:45:92:d5:b5:08:
                    bf:ea:8b:52:d1:aa:47:0e:e0:13:9f:ca:b2:c9:26:
                    34:b8:ae:43:de:2f:0a:41:e2:d0:4e:e9:1e:f0:10:
                    d5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:27:23:5C:25:FA:AE:5F:F1:37:35:BB:75:8F:8E:8F:E2:90:94:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl

            X509v3 Authority Key Identifier:
                keyid:A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.128.0/20
                  162.220.84.0/22
                  192.190.88.0/22
                  198.177.52.0/22
                  199.59.112.0/22
                IPv6:
                  2605:4680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d0:09:73:0c:4e:a6:11:61:4d:e6:f5:f8:21:f5:05:a8:4f:
         bc:f5:e5:37:a0:8d:d9:db:3c:03:0d:0d:5b:2e:11:cf:97:05:
         b0:cd:94:b6:78:93:42:bc:5f:0a:86:85:0a:91:10:0b:6f:5d:
         b8:97:49:db:a3:b3:2f:06:f1:c1:f2:bc:61:16:08:a4:15:77:
         17:e9:c4:9c:82:f0:fb:97:f8:42:ef:2f:07:8d:31:04:d4:dd:
         fb:7d:81:19:7e:15:fe:57:70:f2:89:46:72:56:da:01:20:55:
         dc:16:83:47:a1:6a:3f:c0:ab:36:44:83:be:06:9f:cc:96:f2:
         e6:15:bd:98:cc:e1:e9:62:3f:7c:6d:b3:84:69:8c:82:48:48:
         c2:83:2a:6a:c9:1d:38:2c:19:c4:81:54:26:31:f3:2a:93:69:
         90:6e:a4:a5:27:a2:75:29:27:d4:0c:00:1c:32:ec:36:ca:3b:
         d2:91:72:3e:66:df:a4:e1:7a:d5:e9:bb:16:a5:fe:3e:1b:27:
         c7:2d:6d:87:1a:48:41:d1:76:b3:66:75:19:ec:ae:75:49:4c:
         49:4a:cc:4d:28:ef:00:87:88:41:2a:61:2d:fb:35:b5:db:55:
         26:27:5d:71:3a:f1:2a:9d:d6:09:b9:86:b8:7f:ec:d9:eb:4b:
         b4:f6:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:50:04 2026 by rpki-client