Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa
File:                     f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa (raw, json)
Hash identifier:          1vv4lntROTeGEn8qfHXP82m/I5LU1xT46xtLBuZi2DQ=
Subject key identifier:   FB:F6:5C:63:42:BD:93:0E:11:EE:97:B4:93:A9:A5:74:B7:D2:96:46
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F498B73B486979C11752ECEC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7459
IP address blocks:        64.144.96.0/20 maxlen: 24
                          64.144.144.0/20 maxlen: 24
                          64.144.240.0/20 maxlen: 24
                          66.134.96.0/19 maxlen: 24
                          67.102.192.0/19 maxlen: 24
                          68.165.112.0/20 maxlen: 24
                          68.167.80.0/20 maxlen: 24
                          68.167.96.0/19 maxlen: 24
                          68.167.160.0/20 maxlen: 24
                          68.167.208.0/20 maxlen: 24
                          68.167.224.0/20 maxlen: 24
                          207.145.16.0/20 maxlen: 24
                          207.145.112.0/20 maxlen: 24
                          207.145.128.0/20 maxlen: 24
                          207.145.160.0/20 maxlen: 24
                          216.254.32.0/19 maxlen: 24
                          216.254.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:73:b4:86:97:9c:11:75:2e:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d1f8f670-8b74-4d1c-93db-0f3f4cb2438f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:23:f5:0d:74:96:af:c6:62:b5:2f:79:54:
                    80:cc:cb:96:4b:a5:59:c6:91:af:b7:16:3f:1c:a0:
                    5d:5b:87:f7:f5:1d:b0:d4:4f:7d:7f:f1:a7:1e:97:
                    a0:2f:1f:ac:1e:9f:99:4c:cf:19:90:aa:9e:7f:5f:
                    bd:ef:75:43:91:9e:8a:ea:b0:e1:14:f4:72:77:2b:
                    44:25:75:9d:97:f9:f6:fc:b0:ac:68:19:f8:4d:2e:
                    ca:29:e6:a7:2f:9a:a0:e9:96:4f:40:1d:f4:24:8f:
                    fe:49:c4:b5:20:c2:7f:69:29:a5:ed:01:16:07:0a:
                    16:6e:a5:30:9e:43:61:76:a6:54:38:ae:be:e9:aa:
                    68:e2:04:4f:36:56:3f:49:92:ba:c5:5d:06:32:72:
                    b9:a8:ae:1d:d9:57:94:c7:a9:5e:b7:de:a5:76:54:
                    d2:45:71:cc:ba:e5:24:90:d4:f8:03:ba:a8:7c:ce:
                    3a:c4:54:06:a4:58:ef:08:51:7b:eb:2e:bf:5b:58:
                    04:67:96:3c:9f:2d:ae:08:76:6b:75:c3:1b:4b:33:
                    21:91:ed:ea:4d:c7:f6:18:c7:a0:0e:64:6b:e1:fd:
                    5b:33:59:c3:8f:4e:2e:36:88:3a:18:e5:b0:15:7c:
                    c3:7b:ea:97:b3:5e:a4:21:4b:39:80:76:eb:93:5f:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F6:5C:63:42:BD:93:0E:11:EE:97:B4:93:A9:A5:74:B7:D2:96:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.144.96.0/20
                  64.144.144.0/20
                  64.144.240.0/20
                  66.134.96.0/19
                  67.102.192.0/19
                  68.165.112.0/20
                  68.167.80.0-68.167.127.255
                  68.167.160.0/20
                  68.167.208.0-68.167.239.255
                  207.145.16.0/20
                  207.145.112.0-207.145.143.255
                  207.145.160.0/20
                  216.254.32.0/19
                  216.254.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:9c:c0:4c:7a:51:70:05:c2:1b:95:9a:2e:27:f2:79:17:53:
         3f:69:a0:82:7f:ef:4c:09:1f:44:b7:8a:f7:03:f2:63:65:22:
         29:21:b2:bd:3b:47:2f:20:6d:49:f8:48:0b:ee:8f:bf:e6:a4:
         81:13:a9:e6:8d:72:61:1a:c2:32:63:b8:1d:e5:22:d1:5b:bb:
         70:11:9c:88:0a:e9:1d:f3:ff:29:3d:91:82:30:87:bf:9e:43:
         b9:b6:c4:b4:d7:2e:47:c0:e9:29:ad:be:f5:b4:4a:72:11:39:
         c8:6b:99:8c:13:a8:a2:81:32:3d:67:bb:12:8e:d7:21:5b:99:
         08:b1:17:b6:26:51:b8:65:be:d3:d3:1d:fe:70:e8:17:24:89:
         90:cb:81:7e:39:eb:3b:d7:3f:0e:c8:91:02:66:33:10:df:4e:
         0c:20:18:d7:5a:8b:dd:7b:87:3d:d8:eb:e8:6f:8d:15:e4:98:
         a7:8c:ed:92:fb:84:91:4e:6d:70:f4:30:46:3d:60:ef:db:e8:
         b5:71:34:5e:fb:92:21:c0:99:97:4f:2a:ec:8a:a6:58:a1:40:
         bf:c8:b0:2e:48:7e:c7:3b:1d:40:eb:55:3a:1f:cc:61:f4:b7:
         a0:e7:ae:11:a5:66:5a:95:d6:45:74:9f:bb:48:bf:16:f5:b4:
         7f:53:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:14:16 2026 by rpki-client