Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa
File:                     da2805f3-2f45-37d2-81ac-675892bd2fa3.roa (raw, json)
Hash identifier:          VGh6U186f0REkF8nR7DtD665alVt159oMPeRjRR3fuc=
Subject key identifier:   F9:73:C7:D9:A4:19:7D:5F:79:B5:C9:E4:C7:62:3A:CD:54:FD:93:0D
Certificate issuer:       /CN=82d0f472-6865-4d16-9252-e75f7b91368a
Certificate serial:       010D0C9F4328584DF7A5D985338F4E914FCBA640
Authority key identifier: 91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     401382
IP address blocks:        64.190.20.0/24 maxlen: 24
                          167.150.24.0/22 maxlen: 24
                          2602:f7e7::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d9:85:33:8f:4e:91:4f:cb:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d0f472-6865-4d16-9252-e75f7b91368a
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=7772724c-f50d-4b00-9071-41f0d533c4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:10:78:55:63:e0:c9:67:14:7b:89:2b:d1:
                    24:8b:72:63:fd:06:44:d5:d1:6e:8d:d2:c3:1c:7e:
                    c7:df:da:23:2c:1d:4c:86:5a:1c:fb:63:3c:72:96:
                    04:79:6a:f0:5d:c3:99:5d:de:58:49:4b:49:01:2b:
                    74:5c:ab:bf:f7:fa:04:63:6c:ca:a2:34:ea:cb:be:
                    59:74:f7:e8:1f:c4:69:f4:ef:5c:13:7f:85:df:72:
                    14:ef:db:98:d3:82:05:bb:25:0e:86:a4:b0:8d:e8:
                    3a:7f:b6:2f:50:46:92:ee:f6:76:c9:60:a6:2e:a7:
                    43:81:9c:84:f2:d9:6f:80:e5:1d:d3:9d:06:20:42:
                    e5:10:55:c1:75:dc:e4:16:6b:d4:42:6e:76:71:fa:
                    37:b9:57:e1:ec:18:ed:4f:17:c9:41:80:1b:65:fa:
                    75:da:a4:76:d6:8b:bc:b3:35:ee:97:b0:08:14:d2:
                    77:3d:c7:73:d2:e3:c9:70:d1:2a:84:63:32:1d:b6:
                    b4:b6:ee:77:71:bc:0b:8b:fa:58:3f:2a:1d:1d:77:
                    3f:62:fe:c3:6c:13:a8:c7:c0:7f:0c:67:86:10:f0:
                    d0:da:94:63:bd:f1:f6:27:e0:f3:f9:c5:09:c8:1a:
                    fe:72:37:d9:c7:b7:cb:07:b6:37:98:e2:75:4f:fb:
                    56:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:73:C7:D9:A4:19:7D:5F:79:B5:C9:E4:C7:62:3A:CD:54:FD:93:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl

            X509v3 Authority Key Identifier:
                keyid:91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.20.0/24
                  167.150.24.0/22
                IPv6:
                  2602:f7e7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d5:a6:06:ce:d1:6c:d0:9e:c6:95:f7:97:b9:32:c4:a0:81:
         95:15:9d:e1:6b:7c:13:0f:b7:2b:4d:d2:38:52:da:40:da:24:
         47:8a:e3:9a:22:6a:1d:a7:73:9c:16:5d:11:43:07:38:ad:58:
         26:da:bc:32:99:10:1e:57:f2:99:84:ae:1e:b3:28:20:e7:09:
         11:05:17:f3:75:7d:25:8a:09:3b:3e:f4:80:12:9f:4c:7b:75:
         a6:90:ba:9b:0c:9c:d3:c8:78:f8:bb:cb:f9:c3:30:2d:67:b3:
         81:b9:e6:30:d3:59:14:ab:ba:88:1e:71:13:a5:3b:45:e3:96:
         8f:d3:2e:0b:9e:6b:1a:9e:42:5b:db:b8:91:cb:58:47:93:cf:
         13:37:da:55:8e:68:d3:bc:3c:28:1b:64:ca:ba:0c:b2:f6:64:
         c2:e1:a5:44:6c:08:79:45:06:2d:9e:d0:9b:35:e8:04:f4:80:
         bc:68:6a:64:66:d0:55:62:d2:56:12:05:3e:fa:1b:10:71:57:
         bc:d1:c8:93:1c:b3:13:14:ac:23:d5:98:d0:e9:93:f6:41:6f:
         e4:41:99:37:2f:81:66:88:fe:7d:fc:f3:9e:b8:ba:4e:11:5f:
         1a:27:26:8f:ff:0c:32:60:54:1b:2e:ef:df:8c:4e:d9:5b:25:
         c9:42:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:00 2026 by rpki-client