Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/fac715d8-87e1-3a99-a7fb-a2b63a26ecac.roa
File:                     fac715d8-87e1-3a99-a7fb-a2b63a26ecac.roa (raw, json)
Hash identifier:          93hb/tdusYYLKed1ae23IQ7NdDBNQDGi3c09i6qJghM=
Subject key identifier:   A5:6B:C9:DE:DB:41:A7:24:CD:83:19:7A:AD:38:64:5B:A1:E8:E0:B4
Certificate issuer:       /CN=9f5524fb-427a-4258-864d-80d99ebf694c
Certificate serial:       010D0C9F4328584DFC6A034BCAC2067F52970880
Authority key identifier: C1:AB:39:ED:07:87:F0:26:DB:C6:59:90:B3:93:77:B7:25:E6:F5:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/fac715d8-87e1-3a99-a7fb-a2b63a26ecac.roa
Signing time:             Thu 28 May 2026 17:58:53 +0000
ROA not before:           Thu 28 May 2026 17:58:53 +0000
ROA not after:            Thu 30 Jul 2026 15:17:56 +0000
asID:                     14430
IP address blocks:        64.85.178.0/24 maxlen: 24
                          64.85.179.0/24 maxlen: 24
                          64.85.180.0/24 maxlen: 24
                          64.85.181.0/24 maxlen: 24
                          64.85.185.0/24 maxlen: 24
                          64.85.186.0/24 maxlen: 24
                          64.85.187.0/24 maxlen: 24
                          64.85.188.0/24 maxlen: 24
                          64.85.189.0/24 maxlen: 24
                          64.85.190.0/24 maxlen: 24
                          184.171.130.0/24 maxlen: 24
                          184.171.132.0/24 maxlen: 24
                          184.171.133.0/24 maxlen: 24
                          184.171.134.0/24 maxlen: 24
                          184.171.135.0/24 maxlen: 24
                          184.171.136.0/24 maxlen: 24
                          184.171.137.0/24 maxlen: 24
                          184.171.138.0/24 maxlen: 24
                          184.171.139.0/24 maxlen: 24
                          184.171.141.0/24 maxlen: 24
                          184.171.142.0/24 maxlen: 24
                          184.171.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:6a:03:4b:ca:c2:06:7f:52:97:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5524fb-427a-4258-864d-80d99ebf694c
        Validity
            Not Before: May 28 17:58:53 2026 GMT
            Not After : Jul 30 15:17:56 2026 GMT
        Subject: CN=69e2cd86-90e5-4ecb-b772-95eaa06a1a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8c:f1:59:b5:59:c9:cf:d4:10:0f:29:c6:9a:
                    a5:5d:c7:29:1e:b7:d2:91:8d:b5:c9:4d:40:1e:ef:
                    9d:31:5b:cb:e9:7c:d5:38:54:88:f8:0f:4d:c7:0b:
                    f4:78:aa:85:3e:10:26:1d:5c:77:e9:88:84:91:d4:
                    6f:c2:3a:6e:7d:3b:a7:cb:95:4c:39:6b:7a:63:f7:
                    aa:dd:58:d1:59:b3:69:29:e3:4c:c2:29:e5:30:7f:
                    c8:f8:83:b2:4e:50:47:b8:d6:12:a3:35:e6:24:af:
                    e9:83:6a:9e:24:d3:c2:01:6d:9d:a7:ce:f8:ac:0f:
                    ae:aa:52:21:e8:ae:34:a3:4f:3a:da:d6:df:08:76:
                    ab:2a:b7:22:5d:39:03:89:17:e6:51:54:0d:71:59:
                    e3:25:c8:10:3b:23:9e:8b:47:1d:c8:ac:38:74:85:
                    ad:c7:9b:72:dd:36:f0:84:71:5b:e8:7c:fb:14:de:
                    f9:ad:05:89:cc:c2:a1:d4:65:db:7e:7d:57:85:a4:
                    4f:74:6e:a9:15:b4:66:85:ce:b6:05:d0:86:3b:d8:
                    dc:af:8f:02:4f:f4:d0:44:1b:0f:e2:53:31:ec:0b:
                    7c:1b:2b:72:be:3e:22:ed:a1:e2:86:33:66:58:01:
                    4a:d7:8f:44:dd:0c:2a:7e:5b:ad:ca:3f:af:a0:5d:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6B:C9:DE:DB:41:A7:24:CD:83:19:7A:AD:38:64:5B:A1:E8:E0:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/fac715d8-87e1-3a99-a7fb-a2b63a26ecac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:AB:39:ED:07:87:F0:26:DB:C6:59:90:B3:93:77:B7:25:E6:F5:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.85.178.0-64.85.181.255
                  64.85.185.0-64.85.190.255
                  184.171.130.0/24
                  184.171.132.0-184.171.139.255
                  184.171.141.0-184.171.143.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:9a:6b:37:89:69:d4:72:0d:5e:f4:c9:f5:e6:d8:d5:11:4f:
         85:31:70:f9:ab:79:c3:0d:38:31:94:8d:14:dc:08:c2:d1:15:
         4c:bd:97:03:6a:cc:eb:2d:2f:cd:7b:10:78:05:b7:34:49:47:
         e8:29:bd:64:6d:50:2f:5f:42:a7:27:b2:16:43:25:0b:58:14:
         11:80:76:d7:50:00:cb:4c:4d:15:dd:a8:59:7a:89:b5:76:de:
         2e:6a:60:a1:b5:bb:36:7f:9d:7e:d1:f7:d6:1c:af:6f:36:7f:
         68:4b:09:8d:d3:cd:87:99:62:7b:b6:4b:8b:ab:bd:1e:f9:fe:
         c9:93:e2:44:f2:b7:4f:8c:40:54:d1:42:ef:1d:67:0b:db:6e:
         07:bf:77:1c:5b:3e:95:fa:88:11:54:9f:38:22:02:02:b9:7a:
         25:dc:b9:21:34:ed:ce:72:be:b5:00:f7:b2:cf:19:f1:ba:c6:
         54:89:1a:3f:8e:97:20:15:37:f9:41:6b:f6:4b:de:87:08:37:
         bd:7f:d5:b4:e9:a4:18:4f:80:06:47:0a:61:3f:b5:43:02:36:
         9b:62:9f:98:c4:4d:a2:6a:bb:86:a2:d8:1c:1a:f9:8b:38:2c:
         65:9b:68:b5:b9:73:4a:ef:0f:21:80:01:33:e5:2c:75:10:3e:
         87:27:0a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:29:15 2026 by rpki-client