Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/19295046-27cc-35b2-983e-bbc10b4f697f.roa
File:                     19295046-27cc-35b2-983e-bbc10b4f697f.roa (raw, json)
Hash identifier:          23XzhPnhwkYlJmfW+YyTJGTso5sVVq1/VxZ+FNWNTsc=
Subject key identifier:   D3:01:E8:61:16:92:C5:56:4A:9E:09:70:06:34:99:3D:6A:C2:E7:99
Certificate issuer:       /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial:       010D0C9F4328584D6E6A1C28D196541FE56944A0
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/19295046-27cc-35b2-983e-bbc10b4f697f.roa
Signing time:             Tue 07 Apr 2026 21:14:18 +0000
ROA not before:           Tue 07 Apr 2026 21:14:18 +0000
ROA not after:            Mon 06 Jul 2026 21:14:18 +0000
asID:                     55201
IP address blocks:        64.74.117.0/24 maxlen: 24
                          64.74.120.0/24 maxlen: 24
                          64.74.123.0/24 maxlen: 24
                          64.74.124.0/23 maxlen: 24
                          64.95.62.0/23 maxlen: 24
                          64.95.64.0/23 maxlen: 24
                          69.25.90.0/23 maxlen: 24
                          209.191.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:6a:1c:28:d1:96:54:1f:e5:69:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
        Validity
            Not Before: Apr  7 21:14:18 2026 GMT
            Not After : Jul  6 21:14:18 2026 GMT
        Subject: CN=75e8492e-53d7-4979-923f-4f579a4d68fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:71:4e:ce:19:12:63:5d:66:d0:52:55:69:10:
                    e1:31:b8:69:f0:bd:08:17:e6:8b:ab:4c:6c:16:a1:
                    56:14:05:ec:2d:5d:4b:59:72:42:8b:9d:8e:56:fd:
                    c1:9c:74:7b:05:6f:75:d8:a5:5b:7d:75:8c:b0:91:
                    a0:b3:eb:cd:11:7e:3f:63:9c:92:32:db:61:0d:95:
                    91:f6:72:00:55:1b:6a:f2:db:9c:f4:5b:9d:c5:42:
                    63:94:b0:55:6c:48:79:f1:b8:90:8a:89:a1:c6:91:
                    f5:dc:9a:d0:c5:44:5c:35:45:24:c5:99:65:34:9e:
                    59:4d:72:a2:dd:02:2c:43:52:0a:b0:c4:80:15:c0:
                    8c:9b:5e:ae:04:cd:c5:0d:7c:b3:24:d5:a8:2e:3d:
                    fc:39:0c:9b:a2:32:a5:68:a1:57:42:92:c1:4c:3a:
                    2e:2b:1b:df:85:38:f9:d0:09:0d:96:24:3b:ee:65:
                    9a:23:cb:79:5a:43:a5:05:3d:ad:cd:09:57:97:1b:
                    11:6b:59:0a:3e:6a:55:3e:6c:ca:19:6f:87:eb:47:
                    f8:6c:bb:af:3e:19:d1:25:ec:9e:81:1e:fb:b6:27:
                    37:b7:3f:6c:a9:1a:19:5a:58:ac:9f:d2:a2:e5:7b:
                    44:43:77:91:7d:39:8c:9b:d7:d5:53:57:48:63:fc:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:E8:61:16:92:C5:56:4A:9E:09:70:06:34:99:3D:6A:C2:E7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/19295046-27cc-35b2-983e-bbc10b4f697f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl

            X509v3 Authority Key Identifier:
                keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.74.117.0/24
                  64.74.120.0/24
                  64.74.123.0-64.74.125.255
                  64.95.62.0-64.95.65.255
                  69.25.90.0/23
                  209.191.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:d8:aa:2a:7b:d8:1e:34:cc:34:51:54:8c:ad:5f:9e:79:
         6b:c2:41:31:4d:4d:d3:f3:11:ef:30:8d:85:8f:ef:54:49:6d:
         9c:9a:7e:b3:95:9a:c6:c2:54:d0:8f:33:e1:b7:a3:bf:91:e6:
         19:a4:95:e9:4a:82:89:56:69:0e:f7:83:5f:7f:9f:50:b8:8b:
         32:c3:d0:86:c6:dd:56:f7:35:18:37:ae:25:8c:37:0f:88:f4:
         3a:62:f5:56:a3:ad:1d:42:03:3c:88:66:d8:c3:43:34:62:33:
         49:03:b9:1c:2c:a5:0e:84:5e:05:d3:29:af:44:7b:35:af:75:
         e2:2a:c2:43:b4:6e:db:d0:8f:4f:60:ce:db:70:0d:4a:74:83:
         2b:4b:b4:b1:fa:a8:72:46:61:57:18:6e:82:cb:0b:48:09:99:
         27:8f:ad:a5:5c:ad:93:3a:e2:f7:d5:3d:94:36:82:36:5b:7d:
         f7:d3:b4:b2:fc:0f:8c:68:56:4d:ef:58:73:54:b6:9c:22:48:
         ed:68:f2:a0:ef:7b:92:2d:e3:b6:48:bf:41:fe:19:94:96:07:
         ed:9b:ae:42:1c:22:6d:e2:3f:71:09:ba:14:29:17:85:09:f5:
         0a:18:50:26:0e:1a:bd:03:fc:b1:49:e9:d1:85:39:18:e0:d1:
         f1:16:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:34:06 2026 by rpki-client