Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa
File:                     20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa (raw, json)
Hash identifier:          H9bapLfFLZITKMnRSm3kwn/lsurEoSOCnavKKCVPszg=
Subject key identifier:   72:8E:A9:B5:B1:F4:5D:74:63:8A:3F:B1:C9:B9:0C:59:B2:7C:4D:8B
Certificate issuer:       /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Certificate serial:       010D0C9F4328584CDB01FD65AF989A78DDB0D200
Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        64.57.8.0/21 maxlen: 21
                          64.57.8.0/24 maxlen: 24
                          64.57.9.0/24 maxlen: 24
                          64.57.10.0/24 maxlen: 24
                          64.57.11.0/24 maxlen: 24
                          64.57.12.0/24 maxlen: 24
                          64.57.13.0/24 maxlen: 24
                          64.57.14.0/24 maxlen: 24
                          64.57.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:fd:65:af:98:9a:78:dd:b0:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=dd62579e-008f-45fe-bbd1-b3a40f31372e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:3d:04:57:cc:c3:dd:08:29:45:c4:a9:8a:
                    e3:9b:6d:c7:b5:f7:68:1c:eb:a3:74:30:73:73:ae:
                    fa:2e:83:88:a5:73:98:4b:5c:45:ab:a6:1e:2f:64:
                    e6:7c:26:2d:79:3d:03:90:31:a0:f4:aa:c4:e0:13:
                    b4:15:73:ce:15:e4:bb:c4:06:7f:85:06:47:5f:f9:
                    82:72:8f:62:7f:0d:ae:ed:2a:7e:f9:ab:47:36:04:
                    38:b2:3f:9f:54:da:a2:90:fa:e3:b8:93:41:4c:04:
                    ea:c7:bc:a8:bd:09:13:25:26:48:cb:8c:37:95:02:
                    a8:50:da:8c:07:91:0e:bd:44:3b:44:b1:87:1c:40:
                    6c:f0:57:47:88:43:4a:c2:9a:5b:91:4a:b1:42:1f:
                    86:c1:19:e0:9c:13:57:f9:05:61:d3:54:3b:ab:f8:
                    25:4f:63:1d:cf:c7:4e:77:6a:88:7e:5b:4e:f0:49:
                    5c:c6:c4:ee:b8:25:fd:ab:c0:a5:d9:55:0b:58:6b:
                    6e:0f:6b:9f:ea:1c:93:95:21:08:b1:d0:aa:c3:d3:
                    57:18:bd:31:bd:a9:2b:3f:a5:8e:17:16:66:f9:15:
                    1f:cc:e0:2f:15:3e:f1:d7:5a:9e:4d:50:8d:25:82:
                    67:e3:71:53:08:d6:36:13:e6:5a:33:6d:05:7b:ce:
                    68:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8E:A9:B5:B1:F4:5D:74:63:8A:3F:B1:C9:B9:0C:59:B2:7C:4D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl

            X509v3 Authority Key Identifier:
                keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:25:08:ec:8d:52:25:71:b0:bb:b6:00:6c:ec:95:af:98:6f:
         2e:ad:49:1a:94:0c:7c:82:49:74:82:0d:a8:06:d5:fc:14:e6:
         b5:58:59:3a:33:7d:79:93:9c:88:68:41:93:7c:17:75:af:23:
         76:07:5d:be:ad:41:c1:12:e3:fc:18:3e:fe:f6:06:b7:9a:36:
         41:95:d5:61:df:5a:cd:73:05:32:ed:bd:e4:fb:c2:72:12:5c:
         d5:94:95:20:16:e9:bc:a3:3e:fb:e3:cf:42:ed:9b:3c:8a:28:
         61:55:59:e7:12:b4:2e:b3:fc:bd:b8:c6:86:53:0b:21:46:76:
         6f:39:53:b1:8c:e5:f4:32:00:ad:9f:a5:a9:71:18:3a:7c:02:
         23:1a:55:34:50:1f:50:29:3b:ed:01:60:87:fd:b1:81:db:ae:
         c0:bc:1a:83:b1:84:2e:d2:7e:96:ce:d3:7c:d1:2f:f8:c4:d1:
         23:5f:8a:4a:8d:53:f1:71:ba:8c:44:15:90:6c:8b:54:7f:af:
         16:8c:cf:60:27:9e:12:65:04:57:38:05:43:c2:f7:77:59:cd:
         f5:6a:d2:78:55:d9:b7:8d:ef:ce:16:88:14:e5:4c:c9:1e:be:
         54:98:88:8c:20:db:f9:a4:cd:a1:ba:18:40:01:c6:e7:dc:50:
         ab:58:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:48 2026 by rpki-client