Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa
File:                     07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa (raw, json)
Hash identifier:          9O1G3mC/V4NnY/IZnlbKYupQTjDDuIwtbPkjAjgkhuo=
Subject key identifier:   4D:C7:A5:DA:6D:30:6B:A3:64:60:A3:15:A0:B6:D3:CC:3E:D3:A0:14
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584CCD0CA4C88B861FF003E23EE0
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     20473
IP address blocks:        65.20.64.0/18 maxlen: 32
                          66.135.0.0/19 maxlen: 32
                          67.219.96.0/20 maxlen: 32
                          137.220.32.0/19 maxlen: 32
                          139.84.128.0/17 maxlen: 32
                          208.83.232.0/21 maxlen: 32
                          208.85.16.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:a4:c8:8b:86:1f:f0:03:e2:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=8ebb48a3-bcfe-4f65-ab95-6254a4285bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:ba:b8:b0:c4:d5:01:e4:5f:79:41:5d:35:
                    17:3e:17:31:02:89:0c:ff:9a:af:d3:8d:e4:d7:88:
                    63:a8:71:f6:2c:fd:cb:e3:a1:76:c5:bc:40:7a:69:
                    44:ee:25:0b:ea:ce:71:51:76:11:8a:b9:ce:ea:81:
                    a5:92:dd:e7:cc:29:7b:76:10:45:15:dc:16:ff:b0:
                    fb:4b:f5:6f:36:60:d3:88:5b:48:d4:3b:76:70:f1:
                    86:cf:75:8f:cf:42:d6:48:e5:1d:25:45:60:82:94:
                    0c:49:5d:3e:a2:ed:ed:fc:e4:38:fc:40:0b:41:ee:
                    c0:df:04:09:00:f6:34:57:9b:93:11:bd:bc:6a:37:
                    33:7e:92:0c:c0:29:0d:86:50:13:86:4e:08:76:b1:
                    80:c4:38:c0:81:75:39:43:54:3b:12:9c:e5:d2:93:
                    5a:3c:5e:5b:66:19:8e:ba:c3:36:52:9c:3c:a3:66:
                    3f:01:bf:98:cb:dc:8e:2f:2d:e1:1e:c7:d7:c8:e1:
                    cd:31:8e:d1:04:0f:a8:70:41:6c:7e:a8:25:f5:f9:
                    99:27:3f:b6:a7:c9:5a:56:11:de:3b:c4:77:91:b2:
                    77:8e:98:d3:fb:a1:eb:2b:ed:96:f3:b7:d2:b3:fe:
                    5d:b5:46:d3:fe:51:5a:11:a9:70:d5:76:a6:a6:b7:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C7:A5:DA:6D:30:6B:A3:64:60:A3:15:A0:B6:D3:CC:3E:D3:A0:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.20.64.0/18
                  66.135.0.0/19
                  67.219.96.0/20
                  137.220.32.0/19
                  139.84.128.0/17
                  208.83.232.0/21
                  208.85.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:38:fc:f6:24:a0:63:b5:fb:7d:06:db:f0:f9:5f:a1:9e:29:
         e2:75:3e:bc:37:ea:bf:d8:3f:4c:50:cd:a3:a8:bd:fb:4c:92:
         a1:1e:e3:08:9c:b0:df:18:c7:1e:56:2b:86:21:8c:ef:b6:8f:
         8d:c6:f3:c5:d3:c3:4f:14:55:08:14:f6:39:47:7a:20:6e:fd:
         d6:e4:40:72:7e:04:51:c6:cc:43:50:48:1d:98:b9:c0:79:80:
         1b:c1:03:41:62:24:80:40:e4:50:94:2e:85:6f:97:b3:00:22:
         12:2d:33:a0:25:22:7c:b8:4c:94:de:dd:0d:ec:0d:96:d7:d1:
         d0:b8:df:b1:1e:b1:b9:39:98:05:14:cd:d0:3f:fa:94:5f:5f:
         a9:5f:ef:fa:a3:7a:92:f2:03:e0:ee:3a:0c:79:f8:0d:8f:b0:
         20:f1:23:0c:04:ce:9b:9f:b8:7d:93:88:77:33:f6:07:0e:e3:
         9a:39:34:4f:8f:ad:98:c6:af:04:c1:98:ce:9d:49:de:66:f8:
         05:ba:2b:01:65:7c:38:d7:12:70:05:e1:a8:19:58:84:13:d4:
         79:0f:1a:48:07:a1:93:96:49:cf:1d:2d:76:2c:0c:d8:cc:9a:
         a7:c7:d1:4b:d6:cb:27:66:4a:e8:bc:7b:0e:e6:94:a1:25:29:
         ee:af:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:38 2026 by rpki-client