Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b890a995-0406-39dc-9066-51457fabcd0d.roa
File:                     b890a995-0406-39dc-9066-51457fabcd0d.roa (raw, json)
Hash identifier:          9mpbyheUNJvN75i4cZmXMvF4lSnHk5jl/Z4bGx/Ugv8=
Subject key identifier:   84:EA:0F:6A:AF:73:6E:C4:55:A0:CF:A6:0B:F3:7B:7E:DD:45:D3:B4
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584CDB020B224A74FCFB05D0B700
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b890a995-0406-39dc-9066-51457fabcd0d.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     398101
IP address blocks:        64.13.192.0/18 maxlen: 24
                          64.207.128.0/18 maxlen: 24
                          70.32.64.0/18 maxlen: 24
                          72.10.32.0/19 maxlen: 24
                          72.47.192.0/18 maxlen: 24
                          205.186.128.0/18 maxlen: 24
                          216.70.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:0b:22:4a:74:fc:fb:05:d0:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=c4bcea8a-de82-478e-b5a2-1b35d14f1fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:ed:b9:c0:15:0f:60:48:cb:79:27:a5:b1:
                    35:37:1c:70:fc:1d:6b:34:a4:18:ed:0d:fd:02:df:
                    74:45:4b:86:31:49:8c:d9:d7:61:a8:c3:54:da:cb:
                    77:17:cd:00:20:7e:16:d3:41:79:9e:8f:84:36:f4:
                    d5:bf:d8:18:a8:c8:91:ba:6f:9f:36:fc:b4:87:d4:
                    45:ff:d3:33:84:02:d0:28:f5:80:41:64:27:9d:1c:
                    f7:97:90:9c:be:dd:03:d7:30:40:f6:d1:30:16:b6:
                    70:fd:3d:22:3f:dd:0e:d7:72:da:6b:03:e7:0d:64:
                    e3:70:b5:7f:de:ec:18:6c:09:ed:a4:0f:c2:44:a4:
                    e7:62:42:d1:64:97:ca:16:58:54:b2:d1:2d:aa:91:
                    6f:2b:3a:c3:0d:12:f8:a8:f4:c5:ce:51:51:81:eb:
                    db:c7:c0:76:86:ad:3c:47:4d:56:9f:b2:f9:2e:ae:
                    aa:c9:2a:b8:52:e2:23:b3:8c:d4:d5:e6:a8:d0:64:
                    e4:e6:f0:87:11:d2:27:fb:e2:d3:ed:51:a3:31:06:
                    29:95:77:bc:b5:07:f9:4a:d4:9b:18:68:bf:f0:78:
                    a4:ef:81:25:f7:76:57:7b:89:45:48:c9:1d:31:29:
                    24:f5:7e:eb:43:87:51:f9:36:65:6e:b7:8e:c0:24:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EA:0F:6A:AF:73:6E:C4:55:A0:CF:A6:0B:F3:7B:7E:DD:45:D3:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b890a995-0406-39dc-9066-51457fabcd0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.192.0/18
                  64.207.128.0/18
                  70.32.64.0/18
                  72.10.32.0/19
                  72.47.192.0/18
                  205.186.128.0/18
                  216.70.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:79:01:ec:77:17:49:96:c6:34:44:ef:f4:a9:3e:5b:45:f1:
         ed:f1:b1:d8:3c:85:70:a7:a1:24:46:ef:da:ac:2c:85:72:61:
         55:9c:73:a2:75:45:2e:86:9f:0c:49:42:db:b1:7e:1a:92:65:
         c5:16:4a:e3:38:3c:1f:e1:47:e9:9f:42:52:7e:ec:85:e3:46:
         98:d2:92:ad:d5:f8:cf:4c:14:ca:d0:4e:42:e7:f4:de:96:48:
         9c:43:a5:fc:51:31:87:89:81:ea:cd:5a:d9:de:51:af:3d:ad:
         82:d0:ee:eb:7b:48:65:7c:a3:e0:2b:fc:0c:0f:1b:b0:f9:ad:
         f4:d0:d1:0b:63:74:1f:16:bb:4e:99:08:c9:9e:70:41:6d:a4:
         5f:bd:45:c9:85:5b:fe:da:0d:89:f9:47:55:ec:a2:8d:74:b9:
         07:95:4c:43:2a:16:df:99:0c:57:02:84:63:e5:f8:23:fb:65:
         f9:04:db:47:20:b1:01:43:69:ce:0a:43:4c:62:85:9d:71:34:
         f4:58:b9:4a:a7:0f:13:15:89:94:f4:05:bd:8b:f5:d7:60:a8:
         22:61:0d:8d:93:70:0e:b4:a6:34:72:ac:88:ed:f3:e5:60:83:
         29:e4:ca:6f:7f:f9:fb:1a:30:92:bd:81:30:2e:c4:78:ec:ff:
         cc:5f:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:04 2026 by rpki-client