Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/3187e434-5c46-3ae9-9c9c-daddb1b7a1d6.roa
File:                     3187e434-5c46-3ae9-9c9c-daddb1b7a1d6.roa (raw, json)
Hash identifier:          bHAGsYwj8vgGkamydFXGA+Mb990uSY86pUipouXtZwg=
Subject key identifier:   1B:A3:63:13:76:98:E5:86:16:98:9C:D7:70:8C:21:F4:95:8A:A8:3E
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584EB57C5642AE4731E1C09EA400
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/3187e434-5c46-3ae9-9c9c-daddb1b7a1d6.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     11404
IP address blocks:        67.214.178.0/24 maxlen: 24
                          74.80.157.0/24 maxlen: 24
                          74.80.165.0/24 maxlen: 24
                          74.80.174.0/24 maxlen: 24
                          74.80.177.0/24 maxlen: 24
                          74.80.178.0/24 maxlen: 24
                          206.212.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:56:42:ae:47:31:e1:c0:9e:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=09563773-6193-45c2-830c-541d772840bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7f:f6:41:c0:ee:bd:b4:2a:81:93:4c:e1:2b:
                    d1:af:b6:df:38:ed:18:09:f4:48:44:3a:7c:ad:77:
                    01:76:6c:7f:7a:b8:c0:b1:c9:a2:e6:0a:fe:44:52:
                    5c:90:b1:a2:3a:26:bf:19:a2:b1:c4:c4:dc:68:67:
                    2f:5f:a6:b0:04:e5:15:63:e4:d1:c7:6b:b9:48:1c:
                    ec:a2:80:98:a8:29:6e:87:04:23:b4:8d:d7:d3:9d:
                    b8:17:c0:96:a1:2d:9f:20:da:4a:b2:d8:3c:75:e8:
                    cb:bc:7b:03:c6:13:67:ac:4d:85:6c:34:f0:f0:c4:
                    88:eb:6a:0b:ec:b0:9a:17:da:58:11:d8:c9:9b:ba:
                    bb:0e:82:64:4e:60:cb:25:fc:bd:b9:f0:24:5c:02:
                    62:62:37:1f:3e:34:a0:1e:f7:3b:30:f3:6c:51:d1:
                    b5:b9:60:41:79:27:f7:77:14:38:b6:17:09:0d:57:
                    21:ac:00:41:1e:af:41:fc:a4:b7:cd:4f:f7:45:10:
                    b9:5d:1e:da:8f:e3:51:e8:72:e6:29:9f:4d:fe:38:
                    5d:b7:95:e2:bc:2c:30:48:8f:94:0d:54:0b:04:17:
                    11:a6:6a:e7:d4:d8:7f:89:f5:00:55:ff:07:28:a8:
                    ae:b5:21:b7:bf:da:5a:fd:bc:85:85:6a:68:8c:57:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A3:63:13:76:98:E5:86:16:98:9C:D7:70:8C:21:F4:95:8A:A8:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/3187e434-5c46-3ae9-9c9c-daddb1b7a1d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.178.0/24
                  74.80.157.0/24
                  74.80.165.0/24
                  74.80.174.0/24
                  74.80.177.0-74.80.178.255
                  206.212.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:77:50:94:10:b8:35:ee:31:57:e1:ab:cd:d7:d4:f6:97:9a:
         04:be:a7:ce:94:5f:b8:d7:c3:a9:13:8d:f2:d4:37:72:ee:c9:
         95:bd:cb:47:5d:e3:95:e2:9e:52:ed:1d:1a:5a:dd:5f:04:3b:
         84:39:b9:45:55:dd:2b:59:0f:22:b4:87:9a:92:a6:49:4a:74:
         0b:17:92:cc:1b:0f:ab:00:13:fd:56:dc:74:1d:74:45:3f:9d:
         a5:e7:4b:4c:52:57:bf:d3:cc:da:96:6c:b1:9e:b0:db:a8:33:
         51:48:fc:ec:1f:1e:ce:87:fc:9d:af:d9:e8:e8:d5:84:f2:00:
         45:3a:f0:d7:7e:19:52:8a:fb:78:43:49:4c:f3:64:17:43:4b:
         31:7e:d7:9f:06:3e:6b:60:c7:fc:be:63:84:0e:b5:8b:a2:db:
         59:d8:16:57:5a:59:62:d4:f3:af:53:43:d3:32:65:21:19:db:
         7d:ae:44:9e:71:5a:86:20:a3:3e:bf:8d:20:5e:15:19:a2:98:
         19:0f:2c:d5:61:c9:ef:29:65:48:38:c6:36:fb:c2:22:f3:db:
         5f:aa:99:3f:a9:b5:56:c3:f2:78:3f:64:79:80:7c:d1:b5:f6:
         97:fe:83:e4:08:f0:e1:69:cd:9e:1b:8b:e7:34:5b:55:78:28:
         46:f8:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:18:04 2026 by rpki-client