Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/5772613c-107e-3d66-a260-5c28ad608118.roa
File:                     5772613c-107e-3d66-a260-5c28ad608118.roa (raw, json)
Hash identifier:          VUhccyGBncUZcGFKKl1YXpHx3hyxzSgkqK0Eau8D2Eg=
Subject key identifier:   76:14:78:E7:1F:F1:44:F9:F8:A2:08:D9:97:CF:37:CD:08:AF:C2:AE
Certificate issuer:       /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial:       010D0C9F4328584D6E6A934C84B0E15E32180F40
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/5772613c-107e-3d66-a260-5c28ad608118.roa
Signing time:             Tue 07 Apr 2026 21:15:14 +0000
ROA not before:           Tue 07 Apr 2026 21:15:14 +0000
ROA not after:            Mon 06 Jul 2026 21:15:14 +0000
asID:                     197537
IP address blocks:        64.74.117.0/24 maxlen: 24
                          64.74.120.0/24 maxlen: 24
                          64.74.123.0/24 maxlen: 24
                          64.74.124.0/23 maxlen: 24
                          64.95.62.0/23 maxlen: 24
                          64.95.64.0/23 maxlen: 24
                          69.25.90.0/23 maxlen: 24
                          209.191.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:6a:93:4c:84:b0:e1:5e:32:18:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
        Validity
            Not Before: Apr  7 21:15:14 2026 GMT
            Not After : Jul  6 21:15:14 2026 GMT
        Subject: CN=e019e64b-5d19-415d-8648-03807a02c36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9f:c8:05:b4:3d:4a:1e:4b:2c:b7:62:ae:a2:
                    7f:45:40:74:02:fe:bd:29:13:eb:82:25:91:db:87:
                    ee:30:25:3d:b1:2d:a0:7b:7f:b9:d3:a0:b2:5f:47:
                    93:9f:9d:18:20:cd:f1:33:c2:4a:37:0c:b6:41:fa:
                    31:ce:1c:17:c2:80:5b:87:22:2a:d3:b9:a7:14:1b:
                    9b:e7:51:6c:ff:ca:b8:02:fa:e1:95:71:15:f1:ef:
                    30:e9:24:b6:e2:85:d4:e5:6a:4a:b8:11:a7:6d:ee:
                    0c:d7:c1:a1:88:24:5a:1e:0d:31:e4:d5:b9:f1:9f:
                    5c:a8:16:33:09:e8:c0:e8:9f:e6:fe:34:70:fc:6a:
                    bc:f8:4b:72:24:cd:93:9a:cc:22:e7:70:e7:4f:ab:
                    ce:8f:bd:cb:3f:3f:ff:07:99:7a:6e:51:74:8c:57:
                    eb:d2:d1:2f:30:ca:d4:12:56:9f:d9:35:ff:42:11:
                    30:6f:da:f3:53:21:fe:f9:0f:5c:37:16:31:f0:36:
                    d5:b1:8c:a3:18:be:95:ee:17:72:93:c3:0b:21:a7:
                    cd:fb:bf:39:8c:90:53:c1:12:3c:f6:0e:18:7f:6c:
                    51:41:40:53:4b:c7:85:4d:19:dc:0c:17:41:4f:ac:
                    e5:f0:b6:75:d8:48:2d:ad:0b:55:a9:d5:40:82:0b:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:14:78:E7:1F:F1:44:F9:F8:A2:08:D9:97:CF:37:CD:08:AF:C2:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/5772613c-107e-3d66-a260-5c28ad608118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl

            X509v3 Authority Key Identifier:
                keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.74.117.0/24
                  64.74.120.0/24
                  64.74.123.0-64.74.125.255
                  64.95.62.0-64.95.65.255
                  69.25.90.0/23
                  209.191.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c3:57:f1:c9:d7:cd:42:ff:5d:f4:42:ce:30:f7:85:67:79:
         94:94:14:8b:ef:b9:00:61:d4:ac:c5:ff:24:cd:37:31:38:59:
         13:8f:d5:bb:71:3e:f7:2f:1f:95:36:fe:3a:89:b0:0b:aa:5e:
         e7:7f:68:2b:83:06:49:36:6e:28:43:7b:ce:f2:2f:f8:f3:17:
         39:d8:fd:8e:83:6c:33:93:19:1f:be:ad:6a:c4:44:99:74:d2:
         bf:ad:f4:8c:71:73:d8:55:e2:97:48:94:b0:cd:8d:f5:1b:49:
         8c:1e:bd:3a:00:0b:01:ff:5c:9e:8a:47:0e:02:bb:13:2b:5f:
         78:06:01:bd:c2:da:6d:60:2b:e8:a3:ad:6f:25:7d:1e:69:56:
         8f:3c:01:86:b6:eb:09:d1:6b:79:ef:ec:a4:37:e6:85:70:97:
         da:5b:64:b4:97:b8:06:29:25:2b:a9:09:c7:89:ea:40:fd:0c:
         e9:dc:51:e0:dd:a9:19:e5:7d:0c:eb:d5:84:ea:c9:48:cf:da:
         53:17:05:b8:69:1a:ca:42:fb:1c:1e:0b:62:53:5b:50:3f:88:
         77:55:7c:d2:2e:0b:d8:74:1f:c5:96:43:c6:81:fb:34:10:7e:
         bf:6a:9f:42:40:55:6d:de:cf:28:29:97:ce:9f:ac:0e:1f:ca:
         96:7c:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:34:06 2026 by rpki-client