Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa
File:                     5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa (raw, json)
Hash identifier:          HSKHYdaoHfQ9R76GObAsJbGs7+xix9ngb/hiMxWWDfg=
Subject key identifier:   97:F8:9E:CC:77:E2:A2:BF:58:13:91:4C:40:51:D1:D9:A1:00:40:65
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584F4C3D47784765BB020FEFFE80
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     32035
IP address blocks:        66.43.92.0/24 maxlen: 24
                          66.43.96.0/23 maxlen: 24
                          66.43.98.0/24 maxlen: 24
                          66.43.101.0/24 maxlen: 24
                          66.43.105.0/24 maxlen: 24
                          66.43.106.0/24 maxlen: 24
                          66.43.108.0/24 maxlen: 24
                          66.43.110.0/24 maxlen: 24
                          66.43.112.0/21 maxlen: 24
                          69.28.96.0/19 maxlen: 24
                          69.168.192.0/19 maxlen: 24
                          69.170.160.0/19 maxlen: 24
                          74.85.0.0/19 maxlen: 24
                          207.232.80.0/20 maxlen: 24
                          209.141.64.0/19 maxlen: 24
                          209.141.96.0/20 maxlen: 24
                          2607:f778::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:47:78:47:65:bb:02:0f:ef:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=d2594d0d-734c-4411-9a84-91fb6babfafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:66:ec:09:4f:f8:57:59:ab:6e:c0:ba:67:6a:
                    5d:21:54:63:64:95:ed:cd:56:2d:77:a6:c6:a2:46:
                    1b:40:60:59:e1:5f:25:eb:47:c6:d2:9c:05:e7:32:
                    7b:a3:79:29:57:6e:e0:1a:0a:95:bf:3c:26:8a:e3:
                    e7:88:1e:35:74:4c:98:bf:bc:a4:06:06:2f:a0:c4:
                    68:7d:86:38:6f:51:69:b3:23:45:4a:7c:f3:85:b9:
                    a4:68:1a:f2:aa:a0:fc:99:16:ba:2b:1f:e3:51:f9:
                    6b:55:7d:ed:0a:f5:fe:75:b3:cc:6e:53:18:25:a7:
                    04:eb:3a:e4:60:49:a6:a5:2b:43:c2:fa:0c:08:1e:
                    2c:a6:44:10:68:e5:2f:f8:e1:73:87:13:f0:56:4f:
                    c7:2e:e4:01:85:5d:55:28:e5:0a:10:63:99:3f:34:
                    57:f7:ee:bf:6f:74:0e:7e:d1:29:f9:7e:45:9d:66:
                    02:af:86:56:73:a0:76:23:79:81:57:33:34:c5:75:
                    a0:86:16:35:fb:d0:e0:94:df:e5:11:e8:b5:99:82:
                    e3:cd:4a:6e:44:72:52:56:47:99:99:11:22:44:b8:
                    e7:12:fe:b4:85:d9:a4:62:48:e9:da:ca:ad:3f:80:
                    53:68:9f:55:cd:a6:a7:5f:d9:49:32:96:d4:df:a9:
                    1c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F8:9E:CC:77:E2:A2:BF:58:13:91:4C:40:51:D1:D9:A1:00:40:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.92.0/24
                  66.43.96.0-66.43.98.255
                  66.43.101.0/24
                  66.43.105.0-66.43.106.255
                  66.43.108.0/24
                  66.43.110.0/24
                  66.43.112.0/21
                  69.28.96.0/19
                  69.168.192.0/19
                  69.170.160.0/19
                  74.85.0.0/19
                  207.232.80.0/20
                  209.141.64.0-209.141.111.255
                IPv6:
                  2607:f778::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9a:ec:cf:a7:13:c2:d2:0d:fd:78:71:40:a8:d9:1d:00:2a:
         c8:e2:f3:e4:5a:8a:0f:c4:95:ac:09:09:7e:88:87:83:21:e6:
         92:b2:00:9e:40:cf:25:cf:18:31:a4:40:9c:32:1c:af:d9:d9:
         9e:8e:3a:04:61:b5:b5:0f:16:a2:1d:a1:21:f9:ff:05:07:ca:
         7c:83:7e:72:aa:a5:24:44:44:a3:6d:49:7f:18:19:3d:67:ef:
         91:fe:32:f3:b6:3e:6a:fd:b8:97:93:ab:ec:59:42:43:ea:15:
         7b:99:6c:74:ab:3b:84:6b:56:f3:10:df:f4:8a:6f:2e:3b:5e:
         98:98:64:f4:60:a7:f8:84:b8:dc:f9:41:37:e0:29:76:06:83:
         a0:e8:c2:cd:70:ea:86:85:56:31:e0:85:af:f7:63:49:74:df:
         e1:ec:b8:44:95:5b:36:03:48:c0:d6:35:3b:a6:08:82:fd:98:
         13:7c:1b:8a:d5:fa:06:de:57:e2:20:ce:d3:2a:26:33:21:e2:
         1b:f9:1c:3f:d8:ec:d4:c5:94:9f:6a:05:fc:ef:d8:5a:5e:d2:
         30:e1:f0:41:8b:4a:78:48:a1:01:56:23:2f:1f:f9:d3:c4:23:
         aa:9b:da:e3:45:12:e2:63:08:e0:52:ed:45:07:9e:09:4e:2b:
         85:1a:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:35:41 2026 by rpki-client