Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffdcda76-0de3-3fa7-8462-3e9429f9d46d.roa
File:                     ffdcda76-0de3-3fa7-8462-3e9429f9d46d.roa (raw, json)
Hash identifier:          LXJWJ9Hc2j8OZS/iSSS5WRK4e0pk31cK6HVJ3SfsDkA=
Subject key identifier:   94:84:EB:6D:07:52:18:A6:DC:89:BC:81:75:89:D6:84:F6:B8:8C:5D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F506D3E98F831E48E80DEE200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffdcda76-0de3-3fa7-8462-3e9429f9d46d.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     3257
IP address blocks:        64.81.16.0/22 maxlen: 24
                          64.81.40.0/22 maxlen: 24
                          64.81.46.0/23 maxlen: 24
                          64.81.64.0/21 maxlen: 24
                          64.81.76.0/23 maxlen: 24
                          64.81.120.0/22 maxlen: 24
                          64.81.124.0/23 maxlen: 24
                          64.81.128.0/20 maxlen: 24
                          64.81.144.0/21 maxlen: 24
                          64.81.152.0/22 maxlen: 24
                          64.81.156.0/23 maxlen: 24
                          64.81.161.0/24 maxlen: 24
                          64.81.163.0/24 maxlen: 24
                          64.81.165.0/24 maxlen: 24
                          64.81.166.0/23 maxlen: 24
                          64.81.169.0/24 maxlen: 24
                          64.81.186.0/24 maxlen: 24
                          66.167.15.0/24 maxlen: 24
                          66.167.90.0/24 maxlen: 24
                          66.167.147.0/24 maxlen: 24
                          66.167.166.0/24 maxlen: 24
                          66.167.169.0/24 maxlen: 24
                          66.167.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:3e:98:f8:31:e4:8e:80:de:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=ea36b886-f617-4aa0-8603-a4a3ee8d1263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:06:41:cd:5e:0f:b2:3a:c0:8c:8c:97:b0:
                    ef:92:a6:1b:a3:b6:57:8c:83:3d:0e:4b:16:6a:89:
                    3d:b7:ec:c4:dc:5e:85:ff:21:21:7a:9d:cf:30:53:
                    85:f1:d8:12:11:53:df:6b:0c:a7:12:2c:f3:74:c9:
                    c0:0a:52:c0:47:f5:3d:91:2e:27:ae:7c:1e:06:23:
                    c2:02:cb:52:3a:ad:3d:42:22:4f:af:3d:25:af:73:
                    84:37:51:11:12:34:9a:d3:11:4f:9e:03:4d:63:ed:
                    11:33:ae:a3:f4:06:d7:ae:f7:24:71:6a:4d:d3:19:
                    71:af:64:87:14:98:ba:01:9e:1b:ff:11:a7:57:4c:
                    34:40:af:50:a1:85:af:e9:75:c0:90:cc:0c:cc:b9:
                    8c:ea:94:40:d1:ea:b8:15:67:96:96:2e:b1:f7:62:
                    6e:2a:8f:de:1d:c0:1f:8e:17:55:bd:df:da:96:02:
                    03:af:d0:01:5b:d0:68:e2:ff:4f:ab:33:e2:7f:9d:
                    de:dd:b0:47:b3:8c:76:c5:9f:5d:7d:1d:ba:d8:80:
                    b1:4b:f7:6f:b8:39:10:76:4d:e5:b3:74:f6:0e:5b:
                    e1:ee:25:76:de:14:54:9b:18:34:ed:c8:68:40:b3:
                    d1:4f:1a:2f:3f:80:d9:7b:0f:b6:1d:34:6e:5d:ff:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:84:EB:6D:07:52:18:A6:DC:89:BC:81:75:89:D6:84:F6:B8:8C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffdcda76-0de3-3fa7-8462-3e9429f9d46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.81.16.0/22
                  64.81.40.0/22
                  64.81.46.0/23
                  64.81.64.0/21
                  64.81.76.0/23
                  64.81.120.0-64.81.125.255
                  64.81.128.0-64.81.157.255
                  64.81.161.0/24
                  64.81.163.0/24
                  64.81.165.0-64.81.167.255
                  64.81.169.0/24
                  64.81.186.0/24
                  66.167.15.0/24
                  66.167.90.0/24
                  66.167.147.0/24
                  66.167.166.0/24
                  66.167.169.0/24
                  66.167.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:1e:62:37:43:f1:da:76:44:49:62:d9:72:2f:2c:9c:7b:
         fe:48:b0:da:cc:83:da:22:f0:04:6d:1c:35:55:25:a0:e4:0d:
         3c:ce:2f:ae:05:1b:30:b7:22:c9:8f:26:70:17:ca:20:8a:95:
         16:db:20:bf:0b:4d:a9:10:84:ce:c9:23:3d:3a:68:15:02:77:
         7e:96:89:3d:6e:82:73:a8:4a:61:4c:7a:52:32:37:e3:51:80:
         96:0d:cd:a8:0d:d5:b1:c1:b3:24:9c:bd:42:51:c0:5e:e4:78:
         1d:cd:b9:01:22:e0:4c:9f:d6:cc:a4:73:ad:b1:1f:50:11:77:
         98:4d:21:9a:7b:e2:c9:2d:62:e6:53:d4:02:e9:9a:fb:2b:e4:
         46:b7:e1:b5:e1:7f:a5:d5:6a:7d:88:77:ef:44:98:f0:69:7f:
         21:96:a5:5e:eb:5c:5a:98:7a:77:79:cc:e8:36:36:71:71:09:
         45:6b:d6:f3:91:c3:7a:3b:d0:0f:97:8b:42:5e:24:4f:79:3a:
         70:6a:ba:60:28:61:60:89:03:52:ea:3c:ae:6d:c4:93:e5:4d:
         67:7e:41:b1:e9:80:77:f3:e2:04:bb:81:da:b7:d3:dc:1f:38:
         ae:e3:42:f5:6a:0a:25:67:a4:bf:5f:3e:c6:dd:79:d1:ef:48:
         53:a9:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:24:04 2026 by rpki-client