Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa
File:                     b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa (raw, json)
Hash identifier:          6SyJdcaYrtFaMnouVpl6FHUdegXtTNGhQRQ7NflgXuM=
Subject key identifier:   9C:C7:9D:F0:6F:EF:25:59:B7:30:A7:15:F1:59:F6:F1:B8:2C:CD:8C
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584F8DD88F6C4EBEB0E263F52A80
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     20055
IP address blocks:        63.140.16.0/20 maxlen: 20
                          74.82.224.0/19 maxlen: 19
                          172.86.128.0/20 maxlen: 20
                          198.71.28.0/22 maxlen: 22
                          208.84.220.0/22 maxlen: 22
                          208.90.160.0/21 maxlen: 21
                          2604:4e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:8f:6c:4e:be:b0:e2:63:f5:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=824367ff-a966-4592-8b62-9e2cfa54168e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:39:cf:e2:b3:7d:99:78:b7:1c:c8:f6:0b:d1:
                    f9:6a:1d:22:df:01:e6:bc:81:dc:b6:08:cc:02:d7:
                    83:4b:f8:1f:07:19:24:89:79:ac:ac:9d:08:18:44:
                    81:d5:08:2a:9d:23:8e:d0:73:ad:e6:f5:be:1d:be:
                    14:ea:42:be:61:d2:2f:ce:f5:4d:fb:bf:dc:59:7d:
                    5b:9b:e5:e0:2d:4e:4a:13:16:53:c2:83:49:63:dc:
                    85:cf:35:a7:df:2a:02:cc:ee:67:55:07:64:fd:e1:
                    e9:ca:16:45:94:f8:db:b8:11:35:c2:b6:41:27:bd:
                    49:b7:63:03:d6:78:96:e2:4c:9f:9f:1a:a0:68:09:
                    79:2c:18:c1:cc:d4:ac:f8:c9:f8:6f:07:4f:23:aa:
                    d5:74:97:16:e6:0a:3b:38:2f:c1:97:96:86:7a:8f:
                    ef:a7:3f:0c:91:b2:cb:53:a3:b2:b3:0e:0c:fd:1f:
                    e8:b4:95:62:15:29:85:5c:54:23:18:e2:4c:90:77:
                    72:09:dd:b3:46:b4:0e:c6:1b:bf:22:b5:e3:f0:72:
                    9f:eb:08:e1:92:66:9d:7f:6f:ff:b2:df:f3:27:c7:
                    93:5e:1e:bf:e6:ed:45:9d:29:a5:8e:8b:bd:57:0c:
                    51:5d:01:02:19:a8:66:34:f5:63:f6:dd:29:0b:6e:
                    eb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C7:9D:F0:6F:EF:25:59:B7:30:A7:15:F1:59:F6:F1:B8:2C:CD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.16.0/20
                  74.82.224.0/19
                  172.86.128.0/20
                  198.71.28.0/22
                  208.84.220.0/22
                  208.90.160.0/21
                IPv6:
                  2604:4e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6d:8c:51:24:2c:a2:c0:11:90:ae:36:0f:37:99:93:b4:12:
         07:17:a9:45:e8:3e:92:1e:10:bf:df:c4:cd:b4:58:30:b2:10:
         e7:50:cc:12:b3:41:85:71:36:4a:54:88:fc:76:48:ad:07:16:
         01:86:59:12:fc:e4:53:70:37:f5:66:02:1c:f0:b4:73:66:5a:
         27:e1:17:dc:7a:6c:bd:f4:ac:eb:1b:31:db:86:a0:93:aa:e9:
         9a:68:e5:4f:ef:92:90:38:a5:7a:50:00:b9:78:3e:c4:b2:be:
         db:24:af:46:d8:e4:5e:cc:d4:30:31:6e:38:e0:b5:ef:6c:3c:
         5f:30:43:b6:47:25:3c:56:68:d9:95:32:e0:b0:13:90:66:d2:
         01:db:07:af:dd:f6:e5:01:b6:fb:6f:ff:b2:35:89:80:b1:b3:
         57:13:d5:ce:ba:00:a5:cf:7a:07:f7:be:c2:53:02:9f:04:10:
         18:03:ac:26:fc:dd:c1:84:14:25:d4:23:95:c6:d3:3a:cb:1d:
         25:be:de:2c:35:ba:12:95:3c:c6:c0:2a:0d:32:fe:90:e7:e4:
         3c:89:7a:bd:de:9e:fd:1c:f8:36:b5:98:8d:5e:01:f5:82:c7:
         77:0b:87:14:04:b8:5d:e9:c3:09:ad:89:ee:fc:fa:c0:1e:79:
         37:39:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:33:15 2026 by rpki-client