Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/9b57eb15-85bd-3c11-b0be-cda98acd7ec0.roa
File:                     9b57eb15-85bd-3c11-b0be-cda98acd7ec0.roa (raw, json)
Hash identifier:          HT/gZ+9fiurq6whCJF154XWD7NsT6sWuspTN09d5DKs=
Subject key identifier:   15:F0:A5:14:4C:2E:8E:74:71:23:06:F6:D3:77:98:48:39:02:47:EF
Certificate issuer:       /CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3
Certificate serial:       010D0C9F4328584F06722ECC2FEEBC7BA41CDE10
Authority key identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/9b57eb15-85bd-3c11-b0be-cda98acd7ec0.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     19504
IP address blocks:        64.6.112.0/20 maxlen: 24
                          66.109.112.0/21 maxlen: 24
                          68.171.176.0/20 maxlen: 24
                          104.200.208.0/21 maxlen: 24
                          216.122.152.0/21 maxlen: 24
                          216.147.224.0/20 maxlen: 24
                          2604:1c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:2e:cc:2f:ee:bc:7b:a4:1c:de:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=037dd17f-ddcc-4f1f-bfac-3f2a917f2420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:03:78:f6:8a:73:6d:b5:14:a1:fe:d5:6d:
                    e2:76:82:15:15:fd:d3:39:ef:9f:6b:e6:d2:8e:4d:
                    3c:88:bd:41:08:ec:10:ce:a9:32:17:88:06:ad:9f:
                    bf:b7:90:c0:93:80:9b:66:3d:0e:a6:e8:93:0c:f7:
                    97:a3:08:90:e8:9f:fc:ca:5e:c0:fe:ce:bb:a3:e5:
                    87:78:35:26:88:00:94:95:97:79:9a:9b:ae:a6:7a:
                    25:4e:d6:12:03:cb:ed:4c:6a:c4:2e:40:f0:bf:71:
                    2a:a1:55:70:f1:2e:3a:54:70:93:c6:e5:d8:5b:8e:
                    d4:f1:13:62:04:52:03:d1:5b:b3:c4:d3:b3:1a:d1:
                    4c:21:69:49:c8:1d:d1:74:ae:46:a3:be:c5:ea:02:
                    b3:32:7d:97:1b:90:5f:59:f0:f3:ca:6e:43:f5:18:
                    4f:dc:f7:ba:6b:5f:5a:73:d8:23:74:02:14:52:9b:
                    88:0e:39:ce:70:a5:ed:df:a9:39:53:12:67:61:71:
                    ce:a2:9c:21:90:ef:0b:3c:33:74:3d:69:01:d9:f9:
                    ab:99:0d:7a:ae:83:0a:29:63:e1:0b:47:ac:ca:86:
                    03:80:73:dd:3a:21:c9:16:6b:3b:a3:b4:f7:49:c6:
                    0a:13:e7:49:51:1e:ad:ce:5c:55:4e:16:cd:4c:3c:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F0:A5:14:4C:2E:8E:74:71:23:06:F6:D3:77:98:48:39:02:47:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/9b57eb15-85bd-3c11-b0be-cda98acd7ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl

            X509v3 Authority Key Identifier:
                keyid:33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.112.0/20
                  66.109.112.0/21
                  68.171.176.0/20
                  104.200.208.0/21
                  216.122.152.0/21
                  216.147.224.0/20
                IPv6:
                  2604:1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:10:2c:04:af:fe:56:95:66:8c:3e:7b:48:52:bb:a7:f6:2a:
         d8:d5:18:3d:05:27:86:03:cf:28:90:6d:cf:6d:93:f5:aa:7f:
         3c:85:24:18:94:2e:18:35:75:64:19:6a:2b:7d:0b:2d:1b:fd:
         89:3c:6f:1e:82:a9:1e:94:83:c6:53:5f:5b:21:2f:18:0d:b3:
         e1:db:85:4e:67:e8:96:f1:7f:21:55:03:c6:29:82:ab:b4:30:
         fb:78:1e:d9:12:90:0a:6d:b9:ee:ec:ca:9d:84:24:b8:07:65:
         dc:73:87:be:7e:bd:a0:99:46:52:42:22:20:9d:49:3f:67:7d:
         e2:cc:9f:27:05:05:76:b9:09:34:01:c2:e0:13:9e:94:7f:0e:
         7a:26:4b:16:79:97:0c:74:9a:7c:d9:9d:78:33:d8:bd:f7:27:
         95:0b:0c:22:65:50:dd:22:bb:03:87:42:72:ce:60:da:e5:f3:
         da:ad:d8:f2:d6:64:d6:e8:b5:8f:eb:46:99:e6:e9:e9:b6:83:
         c6:3b:bc:d3:17:21:c1:1e:b5:c6:7a:94:15:c0:04:92:a7:ef:
         60:28:77:a0:83:48:c9:48:b4:75:17:87:c9:08:20:5d:22:92:
         e6:25:bb:24:34:6a:1b:d8:7c:7c:c6:9c:ab:54:ab:1d:f1:82:
         1d:b1:0f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:15:10 2026 by rpki-client