Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa
File:                     28f9e361-2a40-3533-ae86-3037006c7eda.roa (raw, json)
Hash identifier:          fC2CIxGjpTbPg6wucqXIjsy3SuEMVuhxYljCKLDU4FY=
Subject key identifier:   C3:4F:2A:75:B5:87:92:0D:EA:05:5C:33:D5:04:AA:F2:DB:58:F2:18
Certificate issuer:       /CN=6ca4d9b1-5397-4654-94da-7840371f5226
Certificate serial:       010D0C9F4328584F1897A4F1015868AC143B4D80
Authority key identifier: 9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     25914
IP address blocks:        65.49.152.0/21 maxlen: 21
                          65.49.152.0/22 maxlen: 22
                          65.49.156.0/22 maxlen: 22
                          108.160.80.0/24 maxlen: 24
                          108.160.84.0/22 maxlen: 22
                          108.160.88.0/24 maxlen: 24
                          132.147.240.0/20 maxlen: 20
                          2607:2900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a4:f1:01:58:68:ac:14:3b:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca4d9b1-5397-4654-94da-7840371f5226
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=b28919a6-8633-4ca8-bd65-f6a6050ece1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2e:f5:32:98:f6:1b:86:86:af:6c:e9:83:58:
                    bc:42:31:00:0d:14:74:3f:03:b6:54:34:26:41:b3:
                    62:8e:6c:c0:9c:da:e9:aa:d0:5e:fa:0f:78:e0:8b:
                    6a:b9:c2:bc:42:42:cb:7f:f1:68:94:c9:80:c0:35:
                    21:ac:e2:73:98:09:12:0e:54:76:e4:7e:fb:64:89:
                    26:c4:7a:d9:e8:c1:7c:1f:44:20:7f:8c:9b:1e:97:
                    09:13:14:88:c9:2e:46:d5:fb:6c:cf:d3:e0:0f:9f:
                    98:ca:a9:29:f2:65:af:52:29:73:4f:16:49:1a:5c:
                    c1:af:ac:28:4a:8e:55:fd:6c:58:f7:63:97:5d:4b:
                    1d:4f:7a:70:33:21:86:27:48:d1:cd:23:88:d0:81:
                    db:48:98:38:bc:7e:f5:43:23:bc:5d:2b:24:46:cb:
                    b8:c2:78:da:ff:f6:b7:97:a4:3b:e1:63:ff:fe:bb:
                    ab:81:e8:b1:ca:66:52:29:eb:55:a8:99:4a:96:18:
                    74:89:f2:96:d0:97:4a:cb:7b:d4:42:5e:7d:ab:38:
                    b2:65:39:d3:9a:3d:9f:e8:f4:c1:bf:9d:ea:9f:2f:
                    6b:02:20:18:8a:b2:cb:ce:3a:12:69:99:25:04:44:
                    93:43:b4:5d:cd:15:c6:2b:cc:8f:ef:54:52:5d:50:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4F:2A:75:B5:87:92:0D:EA:05:5C:33:D5:04:AA:F2:DB:58:F2:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.152.0/21
                  108.160.80.0/24
                  108.160.84.0-108.160.88.255
                  132.147.240.0/20
                IPv6:
                  2607:2900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fb:ad:d3:78:10:f9:9c:40:11:9c:20:7e:76:9a:a1:e4:3c:
         83:95:b4:a4:d5:1d:93:08:b0:07:c0:a2:ae:15:db:b8:1f:50:
         d7:e1:a3:f8:51:96:0c:6f:91:78:f9:8a:bc:6d:ce:ba:84:25:
         2f:a1:5c:fc:3c:f0:bb:39:dc:75:d4:5e:a8:8d:05:49:1a:99:
         33:20:ca:77:dc:f7:77:c3:62:e2:90:0b:db:23:21:37:e8:9a:
         5e:00:de:b9:4c:9f:a9:4e:23:68:1a:fd:36:6d:90:61:4c:d1:
         5b:48:60:3e:90:c4:44:e9:4d:ee:2a:45:e9:d5:d6:76:e4:82:
         b5:cc:62:14:f9:ee:c7:d3:31:16:bd:10:cd:ac:84:9a:6c:0b:
         5a:3e:60:52:ac:d6:74:b6:96:44:d2:0e:64:a0:2d:2f:fc:75:
         ea:54:1c:69:34:fd:de:5d:4e:e3:26:88:72:b2:f1:cc:d5:93:
         7c:84:a6:8d:fd:a0:00:8d:e9:3a:2e:89:ff:fd:ae:66:b2:ca:
         9d:2b:5e:08:91:a1:91:77:f6:ac:38:0c:d3:26:f0:00:64:fb:
         1e:65:ae:23:96:a1:e3:0d:70:a6:e6:67:12:08:eb:f2:f0:73:
         54:07:23:c8:4b:d9:65:83:17:a5:df:fd:d6:84:b7:19:45:c4:
         a7:14:59:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:34:48 2026 by rpki-client