Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa
File:                     07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa (raw, json)
Hash identifier:          V/j4WQ5pqIVfrWFjPIGnebaGC8nAScu6W+mP6yoxl7Y=
Subject key identifier:   D0:A8:22:0C:6D:7C:E6:49:76:AF:66:2D:50:C5:BB:F8:A0:89:0E:DF
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584F3052820C8D9A520D6CC8BAD0
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     20473
IP address blocks:        65.20.64.0/18 maxlen: 32
                          66.135.0.0/19 maxlen: 32
                          67.219.96.0/20 maxlen: 32
                          137.220.32.0/19 maxlen: 32
                          139.84.128.0/17 maxlen: 32
                          208.83.232.0/21 maxlen: 32
                          208.85.16.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:82:0c:8d:9a:52:0d:6c:c8:ba:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=d772ef63-a024-48c0-be1e-a2910e4b3971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:3b:7e:91:5d:2c:0e:ff:87:1f:b2:e3:37:
                    e6:dd:bb:4f:b2:a3:68:e3:3b:54:bc:b5:17:63:01:
                    cc:0b:15:36:1c:95:3f:cc:d1:4b:a4:a4:31:ef:23:
                    f5:74:53:ee:ab:e9:60:7c:e8:9b:8b:a3:ee:3f:08:
                    31:a2:61:94:3b:40:b1:34:b8:1f:f2:a2:57:71:f1:
                    e7:65:b8:98:68:15:8b:95:a7:df:81:da:b5:54:37:
                    f5:15:e1:89:83:47:b8:73:f8:31:d3:1c:e7:34:59:
                    8c:b9:70:e3:b4:6e:f8:43:60:c7:db:8b:bd:61:53:
                    80:d0:7d:cc:95:17:66:b7:0a:2d:81:d0:c6:5a:54:
                    f4:ca:dd:b3:10:bf:cc:21:da:03:af:5b:82:9d:7f:
                    a1:70:77:b2:3c:4d:91:16:c8:57:3d:f5:a3:94:1e:
                    a6:95:a3:31:f6:03:e7:07:0f:a7:9f:a0:5d:64:7a:
                    44:75:c1:86:ae:5d:2c:59:2d:a5:d2:54:5f:d5:1e:
                    46:e1:bd:b7:b1:9f:11:ff:28:8b:22:d3:d0:75:44:
                    98:0a:3e:0f:7a:73:e3:e8:17:ea:1d:14:bb:90:05:
                    03:01:d6:dd:35:91:cd:c7:e5:24:f7:c0:a8:5b:98:
                    3b:ee:99:1f:18:04:d0:8d:c3:97:83:fa:f5:10:65:
                    43:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A8:22:0C:6D:7C:E6:49:76:AF:66:2D:50:C5:BB:F8:A0:89:0E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.20.64.0/18
                  66.135.0.0/19
                  67.219.96.0/20
                  137.220.32.0/19
                  139.84.128.0/17
                  208.83.232.0/21
                  208.85.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:9c:9f:1f:0f:0b:c6:0b:ee:f0:cc:04:a1:02:59:a3:b1:f6:
         12:77:04:1a:c9:7a:67:8a:82:f2:a5:ef:ea:e9:1a:b4:30:c8:
         0e:36:6e:aa:a4:ac:16:85:3f:48:f9:79:23:30:22:60:8a:4b:
         f5:c1:2c:f2:b0:92:c0:82:68:d3:c3:97:bf:b6:19:72:44:6a:
         6c:e6:a9:35:e5:ce:06:71:3c:75:27:c5:d0:8d:cb:72:fc:16:
         b5:5d:c0:e5:6b:e0:5e:58:b3:07:de:50:76:22:61:62:43:60:
         25:87:54:ca:c6:50:4a:5c:7f:4e:81:29:92:a5:df:33:27:1c:
         63:0e:8e:62:cb:fc:56:f8:1b:38:e0:d6:01:49:af:f6:e9:82:
         7e:05:08:3f:44:bf:4b:dc:2d:12:66:7c:b6:42:f5:f8:61:fa:
         05:e6:29:fb:22:92:c7:84:bb:01:57:63:ca:b6:40:cd:3a:33:
         52:20:32:40:f6:e2:23:d2:d0:e8:d3:b8:84:8c:70:6d:14:d3:
         fd:b2:c6:ca:e1:39:f4:27:97:08:60:65:5b:54:d0:df:50:83:
         84:f5:cb:47:55:41:f4:d7:64:9e:7e:69:64:7f:17:17:56:02:
         dc:a2:61:9e:ae:50:1e:c6:dd:d9:4c:d3:20:7b:df:f0:d3:59:
         46:98:f1:8a
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE8wUoIMjZpSDWzIutAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdm
MDhkMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
ZDc3MmVmNjMtYTAyNC00OGMwLWJlMWUtYTI5MTBlNGIzOTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4I7fpFdLA7/hx+y4zfm3btPsqNo4ztUvLUX
YwHMCxU2HJU/zNFLpKQx7yP1dFPuq+lgfOibi6PuPwgxomGUO0CxNLgf8qJXcfHn
ZbiYaBWLlaffgdq1VDf1FeGJg0e4c/gx0xznNFmMuXDjtG74Q2DH24u9YVOA0H3M
lRdmtwotgdDGWlT0yt2zEL/MIdoDr1uCnX+hcHeyPE2RFshXPfWjlB6mlaMx9gPn
Bw+nn6BdZHpEdcGGrl0sWS2l0lRf1R5G4b23sZ8R/yiLItPQdUSYCj4PenPj6Bfq
HRS7kAUDAdbdNZHNx+Uk98CoW5g77pkfGATQjcOXg/r1EGVDFwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFNCoIgxtfOZJdq9mLVDFu/igiQ7fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mzgx
NzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2YwOGQvMDdmMmVhYTMtODlmZi0z
MmEyLTkxOWEtODY0N2UxYjFlY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThl
ZTEtYWM2ZjIzMTdmMDhkLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3
ZjA4ZC5jcmwwHwYDVR0jBBgwFoAUtfT/gcvgoCb1EjWns0Rz0IlP/HcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZm
MjMxN2YwOGQuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQGQRRAAwQF
QocAAwQEQ9tgAwQFidwgAwQHi1SAAwQD0FPoAwQD0FUQMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIWcnx8P
C8YL7vDMBKECWaOx9hJ3BBrJemeKgvKl7+rpGrQwyA42bqqkrBaFP0j5eSMwImCK
S/XBLPKwksCCaNPDl7+2GXJEamzmqTXlzgZxPHUnxdCNy3L8FrVdwOVr4F5Yswfe
UHYiYWJDYCWHVMrGUEpcf06BKZKl3zMnHGMOjmLL/Fb4Gzjg1gFJr/bpgn4FCD9E
v0vcLRJmfLZC9fhh+gXmKfsikseEuwFXY8q2QM06M1IgMkD24iPS0OjTuISMcG0U
0/2yxsrhOfQnlwhgZVtU0N9Qg4T1y0dVQfTXZJ5+aWR/FxdWAtyiYZ6uUB7G3dlM
0yB73/DTWUaY8Yo=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:44:41 2026 by rpki-client