Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa
File:                     5e890693-6aca-3d03-a030-fd3266100d15.roa (raw, json)
Hash identifier:          1SImchoIgZVQIPlI7+3YLRv+ZRNlS6I9r7PJxwCpEds=
Subject key identifier:   BC:D3:95:61:8E:45:75:90:91:53:31:BE:3A:68:98:6C:50:16:2C:1B
Certificate issuer:       /CN=06bf1e4f-42a6-423f-8cc1-b96d41424679
Certificate serial:       010D0C9F4328584EC7A1C94A8DFEC2B65DEC9300
Authority key identifier: D6:19:A9:4B:85:78:DD:AA:32:4C:72:65:44:61:07:20:7C:21:AE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     19515
IP address blocks:        64.18.160.0/19 maxlen: 19
                          69.67.0.0/20 maxlen: 20
                          69.173.128.0/20 maxlen: 20
                          108.59.64.0/20 maxlen: 20
                          192.247.12.0/22 maxlen: 22
                          199.253.10.0/23 maxlen: 23
                          205.237.20.0/24 maxlen: 24
                          206.108.60.0/24 maxlen: 24
                          208.111.64.0/19 maxlen: 19
                          2605:c500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c9:4a:8d:fe:c2:b6:5d:ec:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06bf1e4f-42a6-423f-8cc1-b96d41424679
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=f808a2ef-d4b1-4d59-b74e-62427e5b322d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:db:d8:e5:83:6e:c1:aa:f9:00:00:a0:d6:4c:
                    f4:2a:26:6a:c7:66:2b:0f:e7:7f:22:ff:33:a2:aa:
                    93:28:b1:4a:e0:0e:35:a1:40:68:ea:3b:40:33:a7:
                    60:b3:87:4e:19:af:f6:10:2c:6a:f3:5f:59:e5:bf:
                    0d:4a:99:84:9a:e8:a3:5b:21:d2:60:0e:10:c1:91:
                    f3:a0:42:e9:e6:bb:46:e8:3f:69:2e:5e:26:ea:c0:
                    22:ac:c2:94:f2:d1:39:68:90:32:49:24:3f:17:8f:
                    b2:dd:fc:aa:10:8d:47:a9:fd:a1:d9:62:ec:47:22:
                    ed:2a:b9:72:32:12:05:c4:e9:66:c4:de:ce:d6:db:
                    83:2d:01:5e:c7:0d:26:31:80:4a:0c:50:95:8f:cf:
                    af:cb:7d:11:9a:a1:eb:e4:fb:28:16:94:08:8e:8d:
                    33:6c:42:9d:98:2c:35:b8:af:95:9b:6b:a1:e0:36:
                    e8:a0:76:e1:bd:f3:36:fa:98:f0:1c:8f:f9:74:b1:
                    f6:b6:68:a2:aa:98:d4:c8:ab:91:a6:8d:4c:49:a6:
                    fd:46:44:73:35:86:32:e0:2d:a4:e6:98:30:37:0c:
                    d2:fa:77:1e:71:30:b2:4e:38:1e:9e:17:ee:da:cb:
                    0c:d7:92:be:11:87:d2:99:f7:be:2c:42:bd:19:85:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D3:95:61:8E:45:75:90:91:53:31:BE:3A:68:98:6C:50:16:2C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.crl

            X509v3 Authority Key Identifier:
                keyid:D6:19:A9:4B:85:78:DD:AA:32:4C:72:65:44:61:07:20:7C:21:AE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.160.0/19
                  69.67.0.0/20
                  69.173.128.0/20
                  108.59.64.0/20
                  192.247.12.0/22
                  199.253.10.0/23
                  205.237.20.0/24
                  206.108.60.0/24
                  208.111.64.0/19
                IPv6:
                  2605:c500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0f:67:cb:c3:dc:ee:3f:7d:47:42:b0:76:7a:a4:48:9e:43:
         ec:37:26:ef:ec:f6:28:5a:6e:e9:1c:2f:c8:5e:ec:61:7c:5c:
         3c:f2:25:28:f7:bd:86:73:a4:e6:f5:14:30:d2:b4:81:51:98:
         44:36:4d:0c:24:dd:24:29:b1:db:cf:1d:83:f7:ae:11:c4:59:
         51:94:98:b3:13:08:ab:92:39:a5:b6:ed:4d:df:b0:a8:7b:9c:
         6f:0b:20:c7:e7:25:77:d0:53:fb:5c:9e:67:bf:63:ca:91:46:
         b2:ca:7f:b3:63:d6:7c:23:60:f9:40:6d:a9:6a:24:43:d2:f5:
         10:d6:f0:9b:ca:2c:7d:58:d6:33:87:cd:9f:c0:f7:f6:f1:84:
         22:f2:f9:fa:6e:52:1f:df:d4:8f:c2:04:8e:28:1d:4f:bd:89:
         89:5d:bc:e2:3c:c2:63:0b:79:32:99:dd:b2:63:63:7f:c1:5c:
         32:d6:6d:1e:df:73:99:e0:c5:52:20:e8:5f:49:e9:97:46:ab:
         3f:3f:fe:08:b9:aa:a9:e9:4f:b0:29:57:41:12:c5:12:cc:8e:
         ef:b2:6d:b8:82:09:d7:f5:d6:12:52:99:a6:d0:dd:be:be:d7:
         db:8a:cf:64:b2:74:2e:c0:2e:1f:8a:b5:eb:32:b6:39:20:a1:
         b6:72:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:42:48 2026 by rpki-client