Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa
File:                     0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa (raw, json)
Hash identifier:          DCMXSN/IdFZBFuDk8MUpnKw+ZU+lqYT2jNmy1is6RRE=
Subject key identifier:   6A:9C:3A:DE:DA:67:84:14:16:99:31:61:4D:C3:70:E5:F1:F0:4C:75
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F4328584F549D6968222FB766A049A0C0
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     912
IP address blocks:        64.72.224.0/24 maxlen: 24
                          64.72.226.0/23 maxlen: 24
                          67.21.192.0/24 maxlen: 24
                          67.226.190.0/24 maxlen: 24
                          72.15.144.0/20 maxlen: 24
                          74.122.128.0/21 maxlen: 24
                          162.213.8.0/22 maxlen: 24
                          173.212.191.0/24 maxlen: 24
                          192.69.132.0/22 maxlen: 24
                          199.7.232.0/21 maxlen: 24
                          199.68.176.0/22 maxlen: 24
                          199.68.181.0/24 maxlen: 24
                          199.68.182.0/24 maxlen: 24
                          199.188.70.0/24 maxlen: 24
                          207.54.126.0/24 maxlen: 24
                          208.66.0.0/22 maxlen: 24
                          208.83.208.0/24 maxlen: 24
                          208.83.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:69:68:22:2f:b7:66:a0:49:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=4731a5b2-cec4-4ae3-a861-f45be55afd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:ab:ed:ad:15:8f:68:e2:1d:18:23:d2:82:
                    9d:bb:c2:5d:3e:96:44:07:04:69:65:1b:2f:b5:b5:
                    65:aa:67:a6:95:ec:b1:a8:6f:37:7d:0d:fb:95:d9:
                    d7:d3:79:a7:1a:86:6b:1f:6e:71:75:16:d7:f2:64:
                    a6:56:51:a9:de:9e:fd:18:66:0a:7f:9d:90:78:85:
                    d0:8a:6b:df:ff:65:ea:89:59:ae:aa:0d:21:20:dc:
                    23:b3:eb:4e:48:c5:b7:8a:7e:a2:d1:ae:84:0d:9e:
                    bf:a0:41:0c:d5:65:89:6d:bd:6c:4f:68:3d:e8:7f:
                    ea:9a:85:51:27:72:77:c3:88:94:ac:38:a8:77:b0:
                    3d:e2:b7:84:d8:5f:78:49:27:b7:b8:5c:82:24:ba:
                    15:0d:26:07:3f:d7:c9:41:19:1d:00:d1:b3:26:bc:
                    b1:8b:ab:0a:6c:5a:db:a4:b7:39:e4:5e:1d:f1:fe:
                    29:28:73:a8:24:64:38:dc:3c:ef:7c:0f:8a:8b:a4:
                    97:a3:40:39:3f:f2:f1:72:5c:47:7b:c5:25:d6:46:
                    36:d4:82:fd:6d:97:91:f8:18:d7:8b:ad:5f:f4:19:
                    28:d0:69:34:7f:55:93:43:22:29:42:dd:a7:0a:ec:
                    15:64:36:82:1b:46:ce:e2:5c:3a:e4:0b:12:31:51:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:3A:DE:DA:67:84:14:16:99:31:61:4D:C3:70:E5:F1:F0:4C:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.224.0/24
                  64.72.226.0/23
                  67.21.192.0/24
                  67.226.190.0/24
                  72.15.144.0/20
                  74.122.128.0/21
                  162.213.8.0/22
                  173.212.191.0/24
                  192.69.132.0/22
                  199.7.232.0/21
                  199.68.176.0/22
                  199.68.181.0-199.68.182.255
                  199.188.70.0/24
                  207.54.126.0/24
                  208.66.0.0/22
                  208.83.208.0/24
                  208.83.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:91:b8:28:4d:30:87:81:56:a0:92:fc:f8:28:4a:96:0f:a0:
         20:45:24:c3:c2:d1:de:ea:14:d8:c8:a5:4d:48:6e:46:a8:cb:
         ad:76:1d:dd:c1:a7:8d:1f:cf:f4:a3:eb:9a:ee:f2:16:b3:aa:
         72:47:c5:66:29:d8:91:64:80:3e:53:bd:1f:ec:ca:94:cf:b7:
         bf:a9:ee:6a:a7:e5:ab:1f:83:c8:3f:33:cb:6c:14:bd:99:59:
         02:c3:19:4a:9b:1d:d5:bf:c2:ad:5b:65:be:ee:37:7c:bf:4c:
         57:d9:d4:f8:4a:6a:08:d1:bb:d1:73:d8:81:54:5c:d4:f7:c4:
         1f:57:ae:34:6e:68:c8:e0:fa:76:f4:2d:1e:25:88:d9:ee:36:
         36:cd:e7:d6:35:66:64:26:92:e8:97:08:4e:24:3a:63:a5:9e:
         e1:fa:93:52:ab:f3:4f:79:2b:ab:97:73:37:47:cc:ce:36:68:
         79:d9:62:e4:07:73:ad:ff:42:6f:9c:08:e4:94:3c:74:c9:91:
         79:d3:df:3b:c1:85:d2:90:93:b0:40:27:8b:0f:26:65:f1:95:
         84:01:31:91:43:57:62:fb:c3:17:c9:b3:7c:b7:44:87:f4:7b:
         e0:25:2a:42:3a:fb:15:2b:be:90:fe:8c:cf:cb:19:67:62:6a:
         b6:65:f1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:31:18 2026 by rpki-client