Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c/62f2841b-4fb1-3fda-ad31-b3596515151b.roa
File:                     62f2841b-4fb1-3fda-ad31-b3596515151b.roa (raw, json)
Hash identifier:          WVrRKZ05M+Wr2qPPPxmfpgaxbklltOx14cnETOQHikU=
Subject key identifier:   DF:07:86:24:3E:B2:11:CD:68:EA:6A:22:D9:AD:01:BF:82:A7:96:28
Certificate issuer:       /CN=cb3396f6-6f2c-415f-b416-f1f38b798b6c
Certificate serial:       010D0C9F4328584F3052918382DABE9800F4DC17
Authority key identifier: FC:22:23:B9:10:4C:8B:FC:C2:5A:89:0D:8C:DE:A6:79:A1:E5:72:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c/62f2841b-4fb1-3fda-ad31-b3596515151b.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     14103
IP address blocks:        69.2.16.0/20 maxlen: 24
                          69.63.224.0/20 maxlen: 24
                          69.89.96.0/19 maxlen: 24
                          75.75.192.0/19 maxlen: 24
                          207.179.64.0/18 maxlen: 24
                          208.77.128.0/22 maxlen: 24
                          216.163.32.0/19 maxlen: 24
                          2607:fd80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c/cb3396f6-6f2c-415f-b416-f1f38b798b6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c/cb3396f6-6f2c-415f-b416-f1f38b798b6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:91:83:82:da:be:98:00:f4:dc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3396f6-6f2c-415f-b416-f1f38b798b6c
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=7ec926f8-07d5-4830-9d8d-1f718931b0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:c0:7a:29:03:73:4e:bd:5b:fd:44:e0:9b:
                    d8:f0:e3:ec:42:5b:a0:d1:88:01:0c:31:38:9f:10:
                    07:55:a2:46:3a:ba:01:fc:86:10:12:11:3d:69:d9:
                    0e:1e:f4:3e:ae:cf:fb:06:51:f2:ef:a5:c7:8e:b2:
                    32:03:04:95:5c:9a:52:da:02:51:b6:a7:ab:bf:1f:
                    64:cc:9b:65:ba:ad:d0:f1:2c:c5:73:65:56:b3:1e:
                    82:46:8f:ec:7b:92:a0:7e:95:33:33:9c:83:7b:3b:
                    69:f9:27:72:f3:f9:27:a2:46:a7:5a:a0:7b:2f:75:
                    c8:ff:3f:42:70:cc:8e:67:ad:70:38:7f:9f:34:50:
                    71:10:36:29:2d:e9:6a:9a:2f:4e:28:ac:99:05:0c:
                    08:6c:f2:aa:9d:f2:2e:2f:7f:5d:6e:b2:31:2b:f9:
                    0c:14:81:35:3c:84:c6:72:24:fa:1d:6a:9c:1a:bd:
                    f9:10:00:cf:50:db:5a:31:90:b6:56:9f:ab:5d:62:
                    75:7c:18:b9:50:f2:fb:12:0b:cb:33:52:0f:92:d2:
                    e2:16:2a:13:82:f2:0d:fb:01:da:73:9e:82:2b:8d:
                    c8:21:95:ec:f8:2f:ca:10:0e:0c:0c:2a:b9:b2:40:
                    e7:86:39:d4:ba:24:f8:32:c9:50:30:61:a6:30:2e:
                    9d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:07:86:24:3E:B2:11:CD:68:EA:6A:22:D9:AD:01:BF:82:A7:96:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c/62f2841b-4fb1-3fda-ad31-b3596515151b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c/cb3396f6-6f2c-415f-b416-f1f38b798b6c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:22:23:B9:10:4C:8B:FC:C2:5A:89:0D:8C:DE:A6:79:A1:E5:72:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.2.16.0/20
                  69.63.224.0/20
                  69.89.96.0/19
                  75.75.192.0/19
                  207.179.64.0/18
                  208.77.128.0/22
                  216.163.32.0/19
                IPv6:
                  2607:fd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0c:8c:ec:d2:a2:b0:5f:b9:c1:bc:4a:f8:a9:ea:24:b3:77:
         2b:f0:d1:f2:79:5b:60:42:71:ed:f3:10:bc:8c:06:8f:a6:3a:
         13:d0:43:84:03:7b:cc:f7:fb:e4:2d:86:08:78:e1:ed:65:96:
         c7:0f:57:2f:45:67:4f:91:e7:85:5b:67:40:7a:58:64:76:5b:
         07:5c:c7:87:c1:1e:80:40:99:46:5f:09:28:ee:b2:25:5d:1c:
         52:49:e3:f6:9e:82:18:94:71:79:29:b7:48:77:b3:f1:2c:80:
         5c:55:f2:23:12:70:7c:40:33:7c:c2:ba:1e:a7:a4:ad:e3:4a:
         72:2b:7c:a4:08:3a:fb:da:09:57:a0:37:52:8c:07:a1:11:1e:
         dd:32:8c:58:22:bf:2d:b1:ea:c7:6f:5d:c7:6b:eb:39:fb:9d:
         41:d4:44:c1:cf:1a:84:d0:92:33:b5:f8:01:16:21:47:d2:c4:
         d8:f1:e3:b8:66:f7:4b:21:af:1d:7b:4b:95:ff:37:2d:70:cc:
         b7:5a:b5:71:e0:24:da:dc:30:f3:06:98:11:a1:ce:e2:0f:29:
         1b:a1:9a:2e:31:24:8a:61:8d:0e:33:41:93:e2:88:b2:10:a8:
         ea:b8:2b:6a:12:3a:9d:a5:ac:e0:4c:fd:9f:3d:68:7b:14:30:
         21:16:cd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:20:22 2026 by rpki-client