Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/565af2d5-4ca0-39e1-98e4-015e2f774ec6.roa
File:                     565af2d5-4ca0-39e1-98e4-015e2f774ec6.roa (raw, json)
Hash identifier:          zZ/rksV8Bi2Q2hvyGu0B2sAXnAz4GBtDCP/YPGkQ+cE=
Subject key identifier:   D9:4A:C4:DD:27:F7:78:0B:43:1F:29:A5:1E:15:17:4E:D3:F2:B7:87
Certificate issuer:       /CN=8d59c36c-1718-4a42-a5c1-e3e6274d943a
Certificate serial:       010D0C9F4328584F104A0622809D404391F3E400
Authority key identifier: 0D:E2:9E:64:27:D2:B0:67:38:D1:20:0D:79:A5:67:9E:AD:D0:A2:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/565af2d5-4ca0-39e1-98e4-015e2f774ec6.roa
Signing time:             Fri 04 Sep 2026 13:37:32 +0000
ROA not before:           Fri 04 Sep 2026 13:37:32 +0000
ROA not after:            Thu 03 Dec 2026 14:37:32 +0000
asID:                     25653
IP address blocks:        65.98.0.0/22 maxlen: 22
                          65.98.4.0/24 maxlen: 24
                          65.98.6.0/23 maxlen: 23
                          65.98.8.0/22 maxlen: 22
                          65.98.13.0/24 maxlen: 24
                          65.98.14.0/23 maxlen: 23
                          65.98.16.0/23 maxlen: 23
                          65.98.18.0/24 maxlen: 24
                          65.98.20.0/22 maxlen: 22
                          65.98.24.0/22 maxlen: 22
                          65.98.28.0/24 maxlen: 24
                          65.98.30.0/23 maxlen: 23
                          65.98.33.0/24 maxlen: 24
                          65.98.35.0/24 maxlen: 24
                          65.98.36.0/22 maxlen: 22
                          65.98.40.0/21 maxlen: 21
                          65.98.49.0/24 maxlen: 24
                          65.98.50.0/24 maxlen: 24
                          65.98.52.0/22 maxlen: 22
                          65.98.56.0/21 maxlen: 21
                          65.98.64.0/21 maxlen: 24
                          65.98.72.0/22 maxlen: 22
                          65.98.77.0/24 maxlen: 24
                          65.98.78.0/23 maxlen: 23
                          65.98.80.0/21 maxlen: 21
                          65.98.88.0/24 maxlen: 24
                          65.98.91.0/24 maxlen: 24
                          65.98.92.0/22 maxlen: 22
                          65.98.96.0/22 maxlen: 22
                          65.98.100.0/23 maxlen: 23
                          65.98.102.0/24 maxlen: 24
                          65.98.104.0/22 maxlen: 22
                          65.98.109.0/24 maxlen: 24
                          65.98.110.0/23 maxlen: 23
                          65.98.112.0/21 maxlen: 21
                          65.98.120.0/24 maxlen: 24
                          65.98.122.0/23 maxlen: 23
                          65.98.124.0/24 maxlen: 24
                          65.98.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:4a:06:22:80:9d:40:43:91:f3:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d59c36c-1718-4a42-a5c1-e3e6274d943a
        Validity
            Not Before: Sep  4 13:37:32 2026 GMT
            Not After : Dec  3 14:37:32 2026 GMT
        Subject: CN=6ceebad9-f1d6-49fd-9361-b6dfc8c84b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:47:eb:ab:16:32:5d:46:e5:39:b5:82:84:
                    9e:3c:12:1d:dc:44:25:25:43:a8:75:83:92:5e:3e:
                    ac:09:fe:bc:f4:59:0e:fd:8d:63:55:72:f3:35:2f:
                    96:bf:ed:b3:67:36:2d:05:09:4c:8a:37:6a:14:d7:
                    bb:53:13:41:76:86:a2:dc:58:c2:2f:34:9b:52:6c:
                    5c:1c:a7:f1:3a:ed:f4:68:24:0f:16:43:f6:9a:3f:
                    3b:92:2b:31:54:ed:49:4f:37:cd:b3:e3:79:0f:19:
                    8a:16:8d:9f:40:b5:4c:6f:cc:c9:5d:44:f8:17:e4:
                    b3:ae:90:ff:7b:ef:d2:e8:ff:e4:97:46:29:9b:8a:
                    d0:51:b8:32:bc:f4:18:ff:48:9c:21:54:6c:28:09:
                    1b:2b:99:96:fd:24:28:c5:86:87:8e:bd:40:0c:4c:
                    bc:68:6b:2e:07:d0:46:2f:c2:5c:1a:71:b1:97:3f:
                    fd:90:2c:6e:be:c3:33:30:6a:56:98:9d:d3:3a:30:
                    38:ff:04:9c:1e:37:6b:8c:bd:ff:c9:f7:b2:76:06:
                    42:7c:e3:1c:af:f3:a1:75:16:5e:94:03:25:ee:a0:
                    b0:17:fe:8c:48:d6:76:1f:e6:11:58:b8:91:1c:1c:
                    e1:35:55:78:7c:8a:96:b6:9d:e0:a2:e5:6c:29:28:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4A:C4:DD:27:F7:78:0B:43:1F:29:A5:1E:15:17:4E:D3:F2:B7:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/565af2d5-4ca0-39e1-98e4-015e2f774ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.crl

            X509v3 Authority Key Identifier:
                keyid:0D:E2:9E:64:27:D2:B0:67:38:D1:20:0D:79:A5:67:9E:AD:D0:A2:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.98.0.0-65.98.4.255
                  65.98.6.0-65.98.11.255
                  65.98.13.0-65.98.18.255
                  65.98.20.0-65.98.28.255
                  65.98.30.0/23
                  65.98.33.0/24
                  65.98.35.0-65.98.47.255
                  65.98.49.0-65.98.50.255
                  65.98.52.0-65.98.75.255
                  65.98.77.0-65.98.88.255
                  65.98.91.0-65.98.102.255
                  65.98.104.0/22
                  65.98.109.0-65.98.120.255
                  65.98.122.0-65.98.124.255
                  65.98.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:82:e3:eb:10:a6:38:6d:01:e4:5a:5f:7c:20:56:e6:ff:20:
         81:45:24:b2:6e:00:d2:76:15:60:e1:76:d5:1f:a6:3f:0d:af:
         a6:77:68:7e:e8:4c:ac:97:fb:54:31:22:34:b2:d1:9d:02:06:
         85:c3:22:04:60:51:06:77:e9:93:47:f4:67:ac:4f:2e:51:e1:
         e4:cd:9f:c8:91:85:01:d1:82:17:2a:3a:0e:86:5f:d0:6c:39:
         14:c2:c0:27:b2:f8:46:87:b5:79:e2:6b:8f:0f:4a:4c:9e:d2:
         91:f1:ce:83:64:4e:19:fe:f1:55:ea:92:cc:aa:c9:3f:bf:96:
         0d:2a:f6:72:30:ce:df:49:13:5f:80:98:80:69:c1:33:85:4a:
         16:90:d1:11:9c:b9:bb:25:84:0e:63:e6:97:93:80:9c:df:6f:
         6e:01:87:95:41:e6:2b:5d:e6:e2:a3:56:d2:c3:6c:79:40:c8:
         69:5f:05:c3:ce:1e:49:23:86:d3:06:ae:9f:7a:59:61:af:36:
         a0:53:39:c8:9c:c6:c5:5a:48:19:df:74:68:5d:6f:e0:00:55:
         99:71:b2:b1:e6:dd:68:e6:a9:4c:ce:1c:0b:67:ed:02:7e:53:
         7d:f1:dc:94:8f:62:ab:65:9c:a7:10:0a:22:3c:39:73:72:4c:
         cf:12:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:27:13 2026 by rpki-client