Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/70522c27-eece-3153-811b-bb032ea647fb.roa
File:                     70522c27-eece-3153-811b-bb032ea647fb.roa (raw, json)
Hash identifier:          PkVthlfbADGQee+FyK4DWcKRK7/vZC/BYl04bDVq1Wg=
Subject key identifier:   52:00:96:EA:FD:5C:B2:A4:D3:32:41:14:7E:DC:F8:46:D6:87:93:F3
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584EE65741A58D7A818B50D0C180
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/70522c27-eece-3153-811b-bb032ea647fb.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        64.40.129.0/24 maxlen: 24
                          64.40.132.0/24 maxlen: 24
                          64.40.133.0/24 maxlen: 24
                          64.40.136.0/24 maxlen: 24
                          64.40.137.0/24 maxlen: 24
                          64.40.139.0/24 maxlen: 24
                          153.57.0.0/24 maxlen: 24
                          153.57.1.0/24 maxlen: 24
                          2607:9240:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:41:a5:8d:7a:81:8b:50:d0:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=8de4fd76-71ee-4bf3-aa98-c1e8edb9c549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:08:02:0a:51:bb:46:7f:cd:f9:59:0e:f0:
                    e4:9d:9a:14:a7:98:ba:cb:71:93:3b:6a:9e:fd:6f:
                    b3:77:1b:f4:5e:79:46:c8:15:f7:d6:1e:81:59:cd:
                    a0:fa:1a:4e:d2:53:1e:8f:b6:64:cc:da:53:f9:20:
                    d4:ca:1c:72:45:f9:4a:a6:cc:52:a5:9c:7a:32:6f:
                    e7:d9:f8:d3:dd:30:b8:ce:52:1f:95:95:68:f8:b9:
                    ea:5d:1b:46:13:07:eb:39:4c:66:bb:a1:e0:59:f1:
                    a5:48:3d:f9:e5:b4:44:e3:5e:1c:46:bd:e3:c7:ce:
                    62:0f:8f:c5:bc:62:eb:e3:c4:28:86:76:4f:b7:bd:
                    46:3a:d9:92:f5:61:ea:e9:05:79:21:94:10:52:9d:
                    bb:e6:b7:84:1c:89:00:73:b9:2a:f5:5f:22:15:96:
                    97:04:4e:ca:a3:41:6c:a5:2b:e1:74:4e:3e:df:8b:
                    08:c4:79:5f:e3:b8:e3:9e:98:4d:dc:25:5a:0b:6c:
                    bc:e0:60:cf:ee:b4:32:c4:f4:23:dd:ea:a3:9e:41:
                    9b:20:e7:d8:4f:44:40:14:b9:b5:b9:2d:71:63:71:
                    ce:5c:f3:aa:11:bd:b5:44:27:33:38:a3:b0:97:0b:
                    f1:7b:ff:04:3d:d2:2e:9d:23:97:7e:61:d3:3d:f4:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:00:96:EA:FD:5C:B2:A4:D3:32:41:14:7E:DC:F8:46:D6:87:93:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/70522c27-eece-3153-811b-bb032ea647fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.129.0/24
                  64.40.132.0/23
                  64.40.136.0/23
                  64.40.139.0/24
                  153.57.0.0/23
                IPv6:
                  2607:9240:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:12:86:ee:b6:2d:6f:a5:21:54:ac:25:50:95:23:6c:d9:65:
         7f:da:20:5a:2d:e8:39:be:ca:de:80:58:31:9e:61:21:95:9a:
         02:ec:97:54:cb:58:48:b8:fd:d5:df:5d:64:26:b4:b9:ab:af:
         f6:35:99:36:d2:8e:57:9b:b3:d9:f7:a9:4b:9a:2d:a8:a0:5c:
         52:e9:9a:6f:f5:e0:ce:16:82:bd:14:00:d4:f5:69:f7:f9:03:
         62:16:33:34:10:71:6b:b5:0f:75:45:86:99:c0:e9:fc:04:bc:
         27:fc:11:71:16:3d:6d:4c:03:08:f8:c4:9c:c1:6f:9b:9f:cd:
         4a:24:87:fb:e0:66:0c:bb:6e:11:28:6b:cb:1b:17:1a:53:50:
         ef:97:0d:d5:68:94:9b:57:ab:fc:c8:9c:0b:24:0b:3b:c4:f1:
         de:69:df:03:11:47:07:22:c0:57:cb:30:ae:54:4d:4b:97:c8:
         c2:83:5c:10:4e:76:14:f7:69:19:9f:e5:51:12:04:1b:69:06:
         81:e5:83:c2:70:f5:d0:b0:97:d2:cf:c0:f9:0a:ae:f3:dd:50:
         98:15:44:05:c1:96:39:1a:b0:8c:a3:a1:ca:a7:10:36:d2:1e:
         b2:cf:c8:ed:c3:55:f4:c4:48:99:ec:3a:9e:cb:52:95:55:6c:
         09:49:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:50 2026 by rpki-client