Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0506839b-7bd0-317e-9d0b-2962f87aa814.roa
File:                     0506839b-7bd0-317e-9d0b-2962f87aa814.roa (raw, json)
Hash identifier:          c4zGS1BLC4Z8EGvJDm249HgmtCnDGarWqVNWGZ8ETFg=
Subject key identifier:   BB:77:43:08:E9:BC:7C:7B:B5:30:CA:BA:4D:18:CB:64:83:16:8C:85
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4972C671451DC3DE97EFF400
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0506839b-7bd0-317e-9d0b-2962f87aa814.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7459
IP address blocks:        64.8.192.0/19 maxlen: 24
                          64.32.128.0/20 maxlen: 24
                          64.32.192.0/18 maxlen: 24
                          64.105.64.0/21 maxlen: 24
                          64.105.76.0/22 maxlen: 24
                          64.139.16.0/20 maxlen: 24
                          66.80.8.0/21 maxlen: 24
                          66.80.48.0/21 maxlen: 24
                          66.80.104.0/21 maxlen: 24
                          66.80.136.0/21 maxlen: 24
                          66.80.144.0/20 maxlen: 24
                          66.80.160.0/21 maxlen: 24
                          66.80.176.0/20 maxlen: 24
                          67.102.224.0/20 maxlen: 24
                          69.3.192.0/20 maxlen: 24
                          207.145.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:c6:71:45:1d:c3:de:97:ef:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=03e2334a-b8ad-4d1e-b7ca-4591a4ccf632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:1b:5d:02:e4:b1:90:3c:45:a8:5b:89:39:
                    81:30:0d:f7:fa:89:53:93:0f:68:72:6d:54:bf:62:
                    09:3e:92:3e:4a:05:b9:27:00:6c:f1:1e:3d:9e:e9:
                    b1:4a:6a:cb:74:de:ca:d0:ac:f1:04:fc:26:b3:96:
                    ce:be:32:ab:4c:02:cb:52:dd:38:33:c9:26:61:11:
                    dc:d9:e4:13:e0:f9:b2:e4:b6:05:34:ab:a8:d2:07:
                    66:78:cf:29:4b:90:d9:07:94:e3:f0:bc:52:9d:1d:
                    b4:b6:4e:59:9a:8f:6c:70:34:f1:97:57:66:f8:ed:
                    9d:64:7d:f3:24:a5:da:c7:f0:99:54:d7:17:8b:cf:
                    00:f1:63:a0:cb:9a:7a:41:99:66:cd:9a:b3:b7:74:
                    34:6d:4d:0b:5b:33:07:f6:8e:12:42:5d:20:8a:5c:
                    85:72:c7:dd:68:95:62:82:f0:93:10:52:cb:3f:64:
                    72:aa:42:40:07:02:7f:d5:99:32:57:77:20:2f:bf:
                    08:f7:ed:92:43:38:d3:47:25:a2:44:25:63:8e:da:
                    ff:e0:9e:e0:d8:19:d0:5e:13:1f:0b:2c:2a:46:01:
                    98:01:ee:2d:28:ec:51:8f:cd:f0:43:12:f3:b3:75:
                    f1:cd:7b:d8:98:6d:63:6c:15:fa:46:88:d5:22:52:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:43:08:E9:BC:7C:7B:B5:30:CA:BA:4D:18:CB:64:83:16:8C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0506839b-7bd0-317e-9d0b-2962f87aa814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.8.192.0/19
                  64.32.128.0/20
                  64.32.192.0/18
                  64.105.64.0/21
                  64.105.76.0/22
                  64.139.16.0/20
                  66.80.8.0/21
                  66.80.48.0/21
                  66.80.104.0/21
                  66.80.136.0-66.80.167.255
                  66.80.176.0/20
                  67.102.224.0/20
                  69.3.192.0/20
                  207.145.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:bc:f8:a2:96:8a:96:12:de:0a:5d:66:ea:02:d4:a9:a4:
         82:c7:f0:cb:0e:44:f6:03:0f:5c:13:87:ba:a8:b3:c0:ac:c4:
         69:aa:a1:ed:3f:83:50:5b:17:9d:ac:af:46:72:21:22:19:44:
         2e:75:b8:d2:de:04:a3:c1:00:57:69:fe:32:36:4d:18:d3:25:
         9a:cf:98:de:9e:4a:ad:18:fc:ad:79:34:23:37:89:c5:a4:e5:
         f4:6a:80:6e:18:97:39:fd:b8:62:99:79:f9:ed:06:e7:6e:de:
         d0:fc:a2:66:ee:66:8e:17:c1:18:ed:e7:42:b6:cc:97:c9:fa:
         f8:fd:55:2d:d6:e0:86:9d:53:13:0d:4c:d2:f1:38:76:c7:5b:
         81:e9:5f:9a:de:02:22:fe:17:97:5d:a9:c3:ab:86:05:60:fa:
         7a:00:c8:f6:15:77:48:90:d1:c4:54:35:a9:68:21:5d:73:59:
         01:7c:66:f0:eb:93:fc:1a:af:55:c9:2c:e3:6c:58:7f:52:b9:
         85:b3:8d:1d:23:9b:f1:d6:b1:2f:26:3a:2f:d3:57:98:6c:99:
         97:f2:08:27:02:ad:40:4b:34:c7:9c:5b:4d:7f:45:ab:39:48:
         cc:b3:8e:99:44:f2:08:26:99:15:24:ee:7c:ac:e0:83:63:b5:
         35:33:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:45:06 2026 by rpki-client