Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa979736-7331-39ff-ae6e-dd5f9eef2328.roa
File:                     aa979736-7331-39ff-ae6e-dd5f9eef2328.roa (raw, json)
Hash identifier:          hTsKTTxnB7bjoZdLTFGHrHjqqm5CAUMDftKmaR7WGrc=
Subject key identifier:   C3:18:CB:43:B9:E6:CA:66:0D:D0:79:16:9A:49:06:AF:20:59:44:56
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DFA7079AC057A99B7B92D4780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa979736-7331-39ff-ae6e-dd5f9eef2328.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     6079
IP address blocks:        64.8.192.0/19 maxlen: 24
                          64.32.128.0/20 maxlen: 24
                          64.32.192.0/18 maxlen: 24
                          64.105.64.0/21 maxlen: 24
                          64.105.76.0/22 maxlen: 24
                          64.139.16.0/20 maxlen: 24
                          66.80.8.0/21 maxlen: 24
                          66.80.48.0/21 maxlen: 24
                          66.80.104.0/21 maxlen: 24
                          66.80.136.0/21 maxlen: 24
                          66.80.144.0/20 maxlen: 24
                          66.80.160.0/21 maxlen: 24
                          66.80.176.0/20 maxlen: 24
                          67.102.224.0/20 maxlen: 24
                          69.3.192.0/20 maxlen: 24
                          155.229.200.0/21 maxlen: 24
                          155.229.216.0/21 maxlen: 24
                          155.229.248.0/21 maxlen: 24
                          207.145.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:79:ac:05:7a:99:b7:b9:2d:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=110a60e6-ddf1-4660-8502-70c4a64465d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:f5:e2:fa:8e:b6:62:2d:35:3a:f5:67:aa:
                    72:24:b1:32:53:14:42:ea:b6:1a:b4:dc:c9:d4:9c:
                    7c:14:a9:4a:0e:f9:58:92:35:0f:61:b9:33:99:b1:
                    d5:87:08:ce:ed:22:27:14:5e:64:e9:1c:46:8a:a2:
                    ad:91:17:de:d2:4b:12:9a:6a:a7:50:c7:2a:a8:f4:
                    32:74:ad:e5:a8:e4:ce:3a:9e:2c:9e:77:1e:54:30:
                    20:f7:68:44:16:5a:ff:49:0e:8b:ac:9a:57:dd:0c:
                    63:73:10:bc:8b:8a:b7:ba:95:d1:9e:c8:c7:90:32:
                    da:e7:64:08:e9:af:82:28:9b:67:b6:8d:a7:5b:84:
                    c9:42:5c:00:53:ab:70:ac:19:c5:09:27:44:55:6d:
                    9a:62:09:58:3e:7e:85:a6:2e:51:9f:c5:81:65:2b:
                    48:28:d1:86:58:68:88:c8:d6:6c:46:c3:17:bb:17:
                    81:43:aa:14:71:7b:53:69:21:6e:1c:05:55:cd:e7:
                    58:ca:58:9d:af:4c:8b:fc:f5:9a:20:82:c1:35:19:
                    9e:10:09:23:33:41:f3:b5:e8:ca:3a:e4:5d:e6:cf:
                    e0:d4:a3:a0:50:b5:77:80:75:44:92:15:4b:e8:43:
                    bf:5b:33:8f:6a:0c:e4:e5:17:13:93:ec:12:68:ca:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:18:CB:43:B9:E6:CA:66:0D:D0:79:16:9A:49:06:AF:20:59:44:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa979736-7331-39ff-ae6e-dd5f9eef2328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.8.192.0/19
                  64.32.128.0/20
                  64.32.192.0/18
                  64.105.64.0/21
                  64.105.76.0/22
                  64.139.16.0/20
                  66.80.8.0/21
                  66.80.48.0/21
                  66.80.104.0/21
                  66.80.136.0-66.80.167.255
                  66.80.176.0/20
                  67.102.224.0/20
                  69.3.192.0/20
                  155.229.200.0/21
                  155.229.216.0/21
                  155.229.248.0/21
                  207.145.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:d6:eb:4f:4b:74:b0:ad:0c:53:b5:f8:d5:4a:0b:65:20:fc:
         77:dc:06:f9:6f:68:ba:01:25:32:34:a7:41:0d:18:5a:51:4c:
         da:af:ec:18:a1:23:df:45:43:33:85:53:c1:ea:2c:0e:8f:db:
         99:a4:c6:0a:5f:6c:ed:17:91:ee:94:c7:65:f1:d8:ae:0b:bc:
         1f:88:65:e0:cf:c0:20:48:ba:84:76:7b:fa:24:bf:f2:a2:80:
         98:be:b3:99:80:30:25:b2:7b:84:7b:c4:97:02:11:26:ca:98:
         f5:94:c4:2f:97:ec:45:50:92:d3:9a:14:d4:d6:cc:ca:71:54:
         23:e6:3e:09:e9:0b:a3:c6:09:dc:c0:dc:d2:f5:52:42:a2:3b:
         d0:2c:c8:87:48:67:b6:80:65:95:b9:27:fc:f3:16:20:0d:34:
         60:8f:4e:63:0a:da:aa:12:42:ad:0a:5e:b8:de:af:fe:22:20:
         ed:8e:ec:a6:46:b4:a6:d9:66:ee:b1:14:12:49:16:a8:c5:b5:
         d1:f0:f4:fb:f0:6b:79:67:c2:63:95:f1:c8:50:87:9f:bc:6a:
         39:b6:e1:24:d4:ed:0a:82:5b:eb:36:4c:ee:42:19:84:4e:d7:
         4d:ac:e1:44:f5:a1:07:6f:52:73:fa:c0:e7:e3:ef:7e:52:34:
         20:b5:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:09 2026 by rpki-client