Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/675882b1-e8a9-35fd-acaa-e4f4c19fcd35.roa
File:                     675882b1-e8a9-35fd-acaa-e4f4c19fcd35.roa (raw, json)
Hash identifier:          vnQD2mBEvbSxDzA9dQT9rOMB1AvmeSGRIXgKopHCPXI=
Subject key identifier:   1B:FE:94:06:3B:64:6E:3F:A9:85:C0:14:EC:B1:1A:65:69:A1:09:F9
Certificate issuer:       /CN=c2c2b205-cbf7-456f-b185-0afd263c5276
Certificate serial:       010D0C9F4328584F7E7DD2D2AE7404022B8C1B00
Authority key identifier: D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/675882b1-e8a9-35fd-acaa-e4f4c19fcd35.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     11620
IP address blocks:        64.57.96.0/20 maxlen: 20
                          66.255.224.0/20 maxlen: 20
                          74.116.200.0/21 maxlen: 21
                          147.124.32.0/20 maxlen: 20
                          2605:8740::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:d2:d2:ae:74:04:02:2b:8c:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c2b205-cbf7-456f-b185-0afd263c5276
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=f18146a7-1d18-434e-814f-102e7bc440cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9a:5b:59:21:b4:8d:13:6d:c1:16:9a:2d:34:
                    c3:ee:b3:12:e1:8c:43:b1:a1:51:c1:cc:fd:0f:80:
                    61:d3:48:7b:75:57:ed:42:f7:67:d2:b5:ba:bd:f8:
                    45:ff:7b:8c:78:f6:59:6a:04:48:44:2b:f4:33:9c:
                    25:62:53:50:6d:1c:fb:bc:6d:08:bf:3c:45:0f:2c:
                    c5:38:7c:a4:8e:cc:86:04:55:01:e2:dc:2f:24:b5:
                    a9:90:8b:87:c8:c5:7e:4b:9c:93:4e:89:0b:d6:3a:
                    d2:88:09:3e:d8:0c:9f:09:a7:be:50:1b:6c:59:a7:
                    d1:f2:42:5e:63:1c:0a:ba:b6:ff:db:07:9a:97:53:
                    59:27:af:19:83:c7:01:d9:e9:3e:d3:5c:fb:df:c6:
                    0a:1a:b0:f1:8f:5f:f8:68:49:4c:8e:b0:7a:96:67:
                    32:d3:bb:f0:5a:14:c5:c4:83:73:1a:d0:f6:01:76:
                    f4:51:a2:dc:14:c0:c1:09:aa:a8:b4:54:70:c1:3e:
                    96:75:18:38:4b:2e:56:1c:2c:78:0a:17:32:cd:6b:
                    1a:2d:9b:98:e7:a1:0b:83:6a:5e:fd:30:c4:68:18:
                    5b:34:72:43:9d:a8:13:a0:20:a3:ed:f2:30:3c:b5:
                    d3:39:6d:30:98:eb:8d:cd:65:bd:53:e2:7d:53:2c:
                    56:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FE:94:06:3B:64:6E:3F:A9:85:C0:14:EC:B1:1A:65:69:A1:09:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/675882b1-e8a9-35fd-acaa-e4f4c19fcd35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl

            X509v3 Authority Key Identifier:
                keyid:D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.96.0/20
                  66.255.224.0/20
                  74.116.200.0/21
                  147.124.32.0/20
                IPv6:
                  2605:8740::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:03:c9:84:bd:72:a7:64:e4:cb:40:09:ef:0e:34:13:fe:e5:
         69:cf:0f:53:56:c7:da:18:50:f6:26:05:64:c0:6f:59:b4:7c:
         e0:fc:ae:45:cb:60:f0:cc:81:fe:35:c0:26:a8:c4:3d:b4:3a:
         d9:1e:5c:ee:c5:a9:08:b1:ee:5d:0a:eb:e1:3a:96:6a:bb:b7:
         ff:cc:55:bd:de:99:5e:12:b5:42:e5:b2:1b:45:16:ee:0f:22:
         90:aa:3a:39:19:95:e7:4d:34:1b:21:df:1f:68:d7:07:4e:62:
         e3:0d:20:77:61:8c:07:c1:2a:bc:5f:da:1e:34:eb:b0:6c:21:
         cc:2b:2e:4a:c0:40:c3:87:b8:c9:8a:f3:e7:32:3a:3c:86:22:
         7f:16:e0:b1:22:2c:a6:e0:f0:26:50:2a:4f:51:f7:22:78:e1:
         ed:e3:6b:c6:4a:4f:ae:32:af:a7:2b:82:e8:ab:80:ac:e4:67:
         0f:22:ef:d1:27:45:a3:1b:bb:c9:1d:36:27:6e:20:36:57:3e:
         20:e8:3f:39:b2:9e:2c:e2:82:b3:58:b2:5f:d5:2e:6f:78:ad:
         33:b2:f5:26:01:40:af:3d:c1:51:30:d7:b9:49:92:25:0f:0b:
         32:87:95:ae:e8:6e:5d:b1:93:88:f1:27:58:4f:bc:27:ef:11:
         be:e0:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:35:16 2026 by rpki-client