Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/675882b1-e8a9-35fd-acaa-e4f4c19fcd35.roa
File:                     675882b1-e8a9-35fd-acaa-e4f4c19fcd35.roa (raw, json)
Hash identifier:          1zX21IFsaW2JvHDaBfJFtfM8Y9l/Mc2t1D9aM6OrvBU=
Subject key identifier:   31:CF:CC:51:3C:C0:6C:2A:9A:BB:39:93:4B:5B:63:F4:D2:00:CA:FF
Certificate issuer:       /CN=c2c2b205-cbf7-456f-b185-0afd263c5276
Certificate serial:       010D0C9F4328584EDC9212D2D4A0E8DDD01FC8C0
Authority key identifier: D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/675882b1-e8a9-35fd-acaa-e4f4c19fcd35.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     11620
IP address blocks:        64.57.96.0/20 maxlen: 20
                          66.255.224.0/20 maxlen: 20
                          74.116.200.0/21 maxlen: 21
                          147.124.32.0/20 maxlen: 20
                          2605:8740::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:12:d2:d4:a0:e8:dd:d0:1f:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c2b205-cbf7-456f-b185-0afd263c5276
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=ac086a4d-0af6-4e29-bc5b-310b3996b1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:73:f2:86:24:70:74:af:6c:de:51:6e:f3:
                    71:0f:d3:6e:c8:c8:24:16:1a:00:70:31:0c:73:9f:
                    14:2a:55:55:90:fb:14:3d:45:6e:e2:bd:75:19:0a:
                    21:15:f4:b8:9c:3c:f1:de:09:bc:a4:92:a5:f7:24:
                    97:e1:88:a2:8b:59:23:af:70:c9:4e:08:b7:ea:e8:
                    bb:fe:45:81:45:cc:fe:27:79:96:59:56:05:71:9d:
                    97:94:ee:69:a6:c7:1b:8c:e4:68:99:9d:b0:c1:a0:
                    bf:5a:32:c1:cc:93:35:7d:b8:4f:e7:fa:37:e7:63:
                    ae:eb:13:40:69:fe:d8:94:9a:4d:27:8f:23:5d:ee:
                    03:5e:2f:8d:9d:6d:f8:27:74:c1:7f:0d:2d:6b:3a:
                    13:6a:0c:eb:b5:a6:47:be:78:1a:1c:d9:ac:2f:2d:
                    71:09:04:15:d9:b4:d4:ba:fa:64:59:2e:8c:f7:ce:
                    7c:82:0a:98:10:73:8d:1e:ee:cf:8b:2f:73:45:05:
                    e7:df:a4:5a:a0:64:5a:bf:0b:12:2c:2e:06:e1:65:
                    5a:c9:a6:76:a8:24:e1:dd:ed:8d:08:4b:1d:35:74:
                    c0:7a:73:ff:8d:50:f2:9b:2f:1a:24:3d:2d:c2:90:
                    b8:52:df:e9:15:08:48:ae:fd:4f:af:9a:28:e9:1c:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CF:CC:51:3C:C0:6C:2A:9A:BB:39:93:4B:5B:63:F4:D2:00:CA:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/675882b1-e8a9-35fd-acaa-e4f4c19fcd35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl

            X509v3 Authority Key Identifier:
                keyid:D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.96.0/20
                  66.255.224.0/20
                  74.116.200.0/21
                  147.124.32.0/20
                IPv6:
                  2605:8740::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ae:95:86:e0:f6:26:22:2e:2e:f1:92:a9:ba:37:28:d3:e7:
         f2:af:70:32:24:e4:21:94:55:fb:fb:bb:85:19:71:2a:29:6a:
         0c:e7:60:cb:62:46:21:a0:70:7c:d6:97:57:01:59:ed:05:5d:
         e5:d2:5c:58:0f:7a:86:f9:1a:0c:fd:c1:58:c7:6f:df:22:f3:
         61:68:d7:7a:74:ec:a8:c4:ae:2f:99:81:29:6a:f6:54:47:b9:
         b4:f3:b3:ad:7c:f1:d2:13:96:99:78:45:50:60:dd:ca:1d:61:
         eb:25:87:e0:34:8a:18:46:6c:8b:94:43:37:cb:b1:a8:99:3d:
         12:0b:ad:8a:df:54:15:d1:b3:c4:d1:73:87:ff:3e:74:56:9a:
         62:96:d0:83:d7:55:23:9d:e7:e8:64:c1:7b:63:35:0e:b9:a0:
         68:28:e8:17:24:09:6a:72:63:7a:96:99:82:dc:0d:24:a8:0c:
         b3:4f:5a:0d:44:1f:ee:eb:9b:f0:5c:b8:0b:d9:b8:83:3d:1e:
         71:c1:d8:34:05:f2:08:73:f1:02:76:e7:56:e3:be:76:b7:0f:
         28:34:55:75:e4:ea:30:58:c8:30:c1:4b:50:55:31:a3:a5:ae:
         06:78:36:5b:1f:f5:f1:34:81:5c:1d:4b:ff:f8:0f:2f:09:61:
         eb:2b:29:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:45 2026 by rpki-client