Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/62e4b008-d5da-379d-9cb5-594763f7bf60.roa
File:                     62e4b008-d5da-379d-9cb5-594763f7bf60.roa (raw, json)
Hash identifier:          P7Fn18tQ4yAaBD7VdzwcBxFYIKXcDwgDnbzV3993IQw=
Subject key identifier:   5C:DD:3B:65:DB:FC:30:5A:DE:F9:3F:36:06:CB:3E:74:A5:C5:AB:46
Certificate issuer:       /CN=86344825-5da6-48ae-b81f-d48fcd164530
Certificate serial:       010D0C9F4328584E3E5F4E56833BC2EBA778DFC0
Authority key identifier: 39:3A:49:A7:FD:F4:63:75:AD:51:EF:D5:B1:AD:8E:1C:DF:C5:DF:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/62e4b008-d5da-379d-9cb5-594763f7bf60.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     62893
IP address blocks:        64.112.107.0/24 maxlen: 24
                          139.64.148.0/24 maxlen: 24
                          139.64.149.0/24 maxlen: 24
                          192.81.180.0/23 maxlen: 23
                          192.84.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/86344825-5da6-48ae-b81f-d48fcd164530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/86344825-5da6-48ae-b81f-d48fcd164530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:4e:56:83:3b:c2:eb:a7:78:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86344825-5da6-48ae-b81f-d48fcd164530
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=0c00030b-1c2f-4198-80ed-c27847a224dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:d4:04:7c:fb:6b:0f:c1:50:85:f7:4e:fa:
                    26:54:27:1c:79:69:46:89:aa:76:e2:f6:b8:d7:b9:
                    35:ad:af:ff:0e:f5:da:82:fa:72:eb:a7:4e:de:ca:
                    25:1d:cf:c4:7d:8e:ce:ac:f3:a6:ba:44:65:e5:b1:
                    09:b3:33:18:ef:14:33:9d:69:c0:ec:53:c8:fb:68:
                    ff:51:2f:52:7d:d0:4c:03:20:43:0d:d6:40:23:c2:
                    b0:73:69:88:13:ef:d7:e1:fc:52:0b:b4:82:1d:03:
                    5d:c5:29:aa:b4:48:28:2e:39:fe:dc:b5:f9:26:aa:
                    67:d3:f4:fd:93:4c:5f:7b:e6:50:16:3e:35:ff:8a:
                    5c:92:92:b4:0d:ee:f0:ff:12:5b:87:a9:e9:fa:f2:
                    ca:1c:ec:3b:0d:3b:99:52:6e:3c:70:c1:01:82:02:
                    47:01:89:94:eb:b1:12:2d:e6:20:07:62:f2:75:53:
                    66:5d:1c:bf:70:03:5f:31:f5:0d:d5:5d:5e:35:dd:
                    2c:d8:f1:6e:62:61:aa:ae:9b:e1:7a:ea:33:51:d0:
                    dc:48:10:1d:2c:87:4f:9f:25:cc:20:3a:2a:53:2b:
                    40:5b:27:33:59:ff:0b:b7:86:11:0a:e9:2f:8b:3e:
                    7d:e6:bf:96:8b:03:76:2c:c5:7c:cf:fd:fc:f9:a5:
                    34:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DD:3B:65:DB:FC:30:5A:DE:F9:3F:36:06:CB:3E:74:A5:C5:AB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/62e4b008-d5da-379d-9cb5-594763f7bf60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/86344825-5da6-48ae-b81f-d48fcd164530.crl

            X509v3 Authority Key Identifier:
                keyid:39:3A:49:A7:FD:F4:63:75:AD:51:EF:D5:B1:AD:8E:1C:DF:C5:DF:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.107.0/24
                  139.64.148.0/23
                  192.81.180.0/23
                  192.84.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:68:9d:91:a5:dd:69:98:57:7b:b8:32:bd:22:5b:3f:30:86:
         ff:90:b6:da:e5:a5:3e:f4:29:63:66:33:ff:49:db:29:a9:b1:
         c7:ba:a4:31:a2:3a:15:a4:c7:58:fd:0f:eb:78:36:a0:ae:b5:
         a8:f9:a8:ad:2d:31:6f:40:33:f0:b3:52:fa:bc:87:ea:b2:f7:
         e7:5d:a7:38:45:f2:b3:33:34:ae:0a:31:0f:a5:a8:a6:80:94:
         65:c9:dc:8e:ba:93:a6:39:45:a3:e6:cc:e8:67:49:10:79:5d:
         36:2f:ca:b8:c9:82:86:61:64:3d:0f:93:58:98:8d:40:bd:0b:
         4e:17:da:b1:27:db:f3:6a:c6:9f:46:1b:42:3f:25:99:aa:61:
         a0:4c:0e:8f:4a:e5:3d:a4:c2:7f:ff:9f:92:d7:b0:82:96:e3:
         22:74:c4:cc:a2:b0:01:82:be:7b:74:57:87:8e:e3:b7:a2:bd:
         e6:55:22:76:2b:5b:14:83:a0:d8:84:5d:25:36:9a:ea:6c:2f:
         1d:be:0e:35:2e:f1:00:49:c2:78:ea:6c:e6:b2:61:7d:ab:a2:
         3f:de:d5:99:5e:62:d4:33:e2:05:b7:02:fe:c6:06:19:b6:1e:
         7a:69:ad:ab:a5:9c:66:a7:c8:e8:d9:92:56:e4:70:13:2c:55:
         64:0a:d1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:05:28 2026 by rpki-client