Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa
File:                     4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa (raw, json)
Hash identifier:          6NxInfI2HPcVROchlidNkbBH8wZm8YdVSRr74o8uCYE=
Subject key identifier:   DB:D0:63:15:4C:F7:44:DE:16:81:3D:4D:AA:3C:94:CA:10:A0:1A:C2
Certificate issuer:       /CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e
Certificate serial:       010D0C9F4328584EED5216EA839D9C3EF0CBD400
Authority key identifier: B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     46719
IP address blocks:        140.106.208.0/20 maxlen: 24
                          199.167.132.0/22 maxlen: 24
                          199.188.240.0/22 maxlen: 24
                          204.154.240.0/21 maxlen: 24
                          206.190.228.0/22 maxlen: 24
                          216.213.112.0/20 maxlen: 24
                          2600:d000::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:16:ea:83:9d:9c:3e:f0:cb:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=dc4a938d-9e1a-4b93-bf1e-452497a068c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:20:44:4e:01:6e:bf:fa:ef:46:45:11:1a:a1:
                    fa:1d:8a:d0:8d:e4:1d:83:59:ee:9c:b0:a2:4e:de:
                    82:41:75:bc:01:bc:ce:e5:ba:3d:96:4b:d9:4a:67:
                    5b:8e:d5:a5:79:51:c1:aa:af:3a:45:21:1e:ad:9d:
                    e6:24:52:b0:2a:3e:9b:f7:71:7e:e1:37:41:92:d6:
                    cf:83:ba:7b:90:a9:b1:67:d7:ff:a5:57:9d:de:14:
                    4d:e5:b3:8e:6c:81:72:ae:b2:16:a0:9f:ce:93:92:
                    e1:1d:8a:37:0e:20:78:e4:96:e4:ba:00:f7:9b:09:
                    fa:79:b8:77:84:a1:1d:b4:9e:60:45:a3:57:af:72:
                    54:27:f2:39:45:94:34:d6:a8:7b:f6:46:69:bf:d9:
                    7d:3c:39:0e:ff:cf:be:18:bb:cd:85:7f:d1:9c:29:
                    92:98:36:f7:44:7d:f3:30:4b:07:af:63:9f:4f:59:
                    44:c3:eb:1d:3f:73:0c:ca:32:71:1f:df:52:6d:28:
                    0c:ee:d6:ac:04:76:86:53:15:1d:c9:9d:e6:cb:57:
                    f4:28:d0:66:6a:63:c7:85:b9:3a:b7:88:ff:8f:b3:
                    e5:c3:90:57:a2:5f:ec:0f:47:49:52:bd:e2:d4:4f:
                    7a:4b:cc:e6:52:bc:7d:6c:8b:b9:10:34:62:81:e4:
                    f7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:63:15:4C:F7:44:DE:16:81:3D:4D:AA:3C:94:CA:10:A0:1A:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl

            X509v3 Authority Key Identifier:
                keyid:B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.208.0/20
                  199.167.132.0/22
                  199.188.240.0/22
                  204.154.240.0/21
                  206.190.228.0/22
                  216.213.112.0/20
                IPv6:
                  2600:d000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:8c:9a:43:db:ca:dc:ae:01:71:1d:55:98:10:cc:94:eb:ab:
         85:ca:e0:55:eb:79:f2:a9:03:db:c5:dd:f7:7e:e5:fb:3f:87:
         c7:ce:e6:64:fc:d6:49:d1:83:05:0b:55:a4:33:bc:91:0d:52:
         26:04:73:4c:0f:d6:bc:42:8d:bb:ae:72:58:b1:62:e1:4a:d3:
         d3:91:0c:af:e0:62:c0:59:ba:d8:39:3b:36:1f:db:3b:dd:2a:
         30:01:9a:3c:a2:e8:80:1d:99:fd:f9:30:46:1a:f6:fa:25:3c:
         8b:44:07:d4:6e:06:21:77:0e:2b:3e:6c:a7:fd:fd:df:bd:75:
         5a:c7:63:db:24:0d:9c:9e:f5:92:6a:08:47:64:18:0d:b4:c0:
         99:ae:65:ee:87:0e:f1:e4:6e:79:c4:05:df:50:5e:ee:3d:6c:
         1c:8c:6e:19:0d:87:6f:bb:5f:5d:c8:7b:c3:f1:bd:6c:7a:5d:
         87:7c:8e:f1:02:da:92:b2:6f:2c:c9:c3:0d:bd:26:d6:41:a5:
         3c:cc:da:07:f3:da:e8:6f:cd:b7:46:86:40:2e:72:8d:ef:8d:
         fd:60:51:78:2a:9a:e2:92:bb:cf:f0:bd:01:15:dd:7a:34:c4:
         23:fe:f0:97:df:bd:a4:37:b5:9a:6d:59:07:96:c0:8d:e4:3a:
         90:6c:c9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 11:06:25 2026 by rpki-client