Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/b4614be1-dad5-3bc8-8bc4-00ba292267f6.roa
File:                     b4614be1-dad5-3bc8-8bc4-00ba292267f6.roa (raw, json)
Hash identifier:          VottSo3ERm3E/JRzgNskZDUtPf8SdWpaLVKTNUX3dZs=
Subject key identifier:   58:39:AA:A7:2E:DA:00:C0:4A:1C:03:14:2A:EE:5B:8D:FD:DB:A7:01
Certificate issuer:       /CN=2fdc8275-d744-466c-9984-83e7ed5d5ed5
Certificate serial:       010D0C9F4328584CB2647817B493A54DD4B97E80
Authority key identifier: 4A:50:3B:DE:3B:94:38:B1:17:BE:F7:0C:C3:25:62:93:D3:32:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/b4614be1-dad5-3bc8-8bc4-00ba292267f6.roa
Signing time:             Fri 30 Jan 2026 11:24:21 +0000
ROA not before:           Fri 30 Jan 2026 11:24:21 +0000
ROA not after:            Thu 30 Apr 2026 10:24:21 +0000
asID:                     8126
IP address blocks:        64.186.224.0/20 maxlen: 24
                          64.186.240.0/20 maxlen: 24
                          69.63.192.0/20 maxlen: 24
                          69.63.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/2fdc8275-d744-466c-9984-83e7ed5d5ed5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/2fdc8275-d744-466c-9984-83e7ed5d5ed5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:64:78:17:b4:93:a5:4d:d4:b9:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fdc8275-d744-466c-9984-83e7ed5d5ed5
        Validity
            Not Before: Jan 30 11:24:21 2026 GMT
            Not After : Apr 30 10:24:21 2026 GMT
        Subject: CN=ad3d2816-fe61-4f8f-a562-966a0f9ae7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:93:9a:39:30:6e:cb:a9:30:0e:d8:68:55:
                    e4:ec:93:46:54:3f:13:8f:f2:ed:4b:73:00:2c:4d:
                    e8:b8:0d:40:29:b8:97:83:f2:99:63:ce:df:89:f1:
                    ea:d5:a8:85:e6:1b:1c:d6:52:05:1b:7f:ad:b5:39:
                    09:ff:7c:6a:4b:a1:ae:16:db:94:3c:95:a0:4c:67:
                    54:6f:4b:df:c4:73:8b:9b:3d:26:90:89:21:56:ac:
                    d5:49:ea:e4:bd:65:05:de:4f:03:a5:d2:6a:e6:c5:
                    1c:34:ba:98:08:f7:b9:14:05:5c:c4:e6:10:3e:7b:
                    71:f2:e0:18:69:06:91:24:92:0d:5e:6a:2b:49:09:
                    33:86:85:f7:ed:c6:1f:3d:af:c3:56:7e:b4:f8:13:
                    d1:f5:e5:22:e2:70:8d:76:c9:3b:8a:f4:c5:5e:3b:
                    d4:23:6b:c6:08:f8:53:53:7c:2f:dd:be:cc:25:58:
                    5b:cf:68:20:2e:95:3c:c6:2e:4c:40:a6:33:96:8f:
                    02:89:3c:9b:6b:22:16:14:19:7b:20:fb:81:25:a0:
                    7e:65:9d:ec:96:4e:75:96:6d:b5:c5:01:8d:32:05:
                    fc:5d:b3:e2:76:19:17:b4:09:29:9b:30:6e:96:bd:
                    38:57:b4:cf:e2:8c:54:c7:d0:26:fd:8a:6a:fa:26:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:39:AA:A7:2E:DA:00:C0:4A:1C:03:14:2A:EE:5B:8D:FD:DB:A7:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/b4614be1-dad5-3bc8-8bc4-00ba292267f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/2fdc8275-d744-466c-9984-83e7ed5d5ed5.crl

            X509v3 Authority Key Identifier:
                keyid:4A:50:3B:DE:3B:94:38:B1:17:BE:F7:0C:C3:25:62:93:D3:32:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.224.0/19
                  69.63.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ce:c8:dc:55:14:bd:1d:b2:ad:ab:94:e3:e7:4a:66:d4:45:
         9e:e7:aa:f5:59:6f:8b:2e:34:55:f5:5d:7c:83:d5:e4:d1:b9:
         94:94:07:55:8f:61:a3:6c:c7:c9:06:f2:e7:d6:b1:a3:c2:62:
         b2:84:85:30:75:83:24:44:5e:1c:48:f8:73:be:79:99:7b:9a:
         5f:e5:fa:75:12:8a:35:9c:f1:88:1a:98:46:ab:be:98:aa:8b:
         90:1d:87:1e:e3:f5:c7:bb:27:4b:a1:fc:48:92:f3:cb:e8:82:
         c6:62:55:13:ff:f7:f2:72:8c:dc:52:bb:ed:79:8d:3f:eb:07:
         9c:72:7b:da:5b:ee:ef:40:6e:8c:26:33:40:59:b3:6d:1f:3a:
         4f:bf:34:3d:51:07:44:09:3c:8e:f4:e5:89:2e:53:4e:28:a8:
         1f:bc:c0:65:79:9c:9e:43:fa:9b:4c:c9:0f:24:f5:e9:c0:19:
         83:f4:95:3c:c0:5b:11:28:dd:22:41:3a:33:21:00:2a:57:1a:
         19:3a:77:e4:83:dd:aa:3d:06:fc:ee:11:0f:e6:96:cb:1c:df:
         ff:2f:ee:b7:04:65:0c:6f:10:3a:86:66:0f:8f:27:33:09:dc:
         10:a5:88:a6:45:be:90:d0:c5:f6:f7:b1:b9:65:71:d3:2e:58:
         27:cc:67:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:49:26 2026 by rpki-client