Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa
File:                     da2805f3-2f45-37d2-81ac-675892bd2fa3.roa (raw, json)
Hash identifier:          IQuzCMCOjwIEMiwRxoVGXyRxt7H/ad61Tg4w8t0Jmko=
Subject key identifier:   66:C0:9C:A9:B2:76:22:21:CD:A3:40:21:4B:C1:97:DA:7A:E8:A0:B6
Certificate issuer:       /CN=82d0f472-6865-4d16-9252-e75f7b91368a
Certificate serial:       010D0C9F4328584EA79790BA138F5F26E170D6E0
Authority key identifier: 91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401382
IP address blocks:        64.190.20.0/24 maxlen: 24
                          167.150.24.0/22 maxlen: 24
                          2602:f7e7::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:90:ba:13:8f:5f:26:e1:70:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d0f472-6865-4d16-9252-e75f7b91368a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b6e23b15-570a-4897-8540-775208780178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:e5:56:2e:30:4c:dc:69:0a:3f:16:75:a8:
                    5e:31:09:57:a4:a2:75:7d:7d:e6:22:dc:73:f3:64:
                    a3:01:71:94:a8:62:62:e2:44:95:bf:72:4a:f0:da:
                    f3:8d:9b:e7:d2:33:87:f4:5a:20:b6:61:1a:d0:ec:
                    df:cb:93:e0:26:c0:b6:40:de:60:ee:2e:25:86:1f:
                    d5:99:35:a9:fd:7e:90:02:32:7e:98:05:66:4d:c7:
                    78:29:e9:c7:c5:c6:89:3e:5b:6b:30:1e:11:d0:fe:
                    e9:08:1f:e8:6e:cf:96:71:57:62:07:59:47:f8:ed:
                    ab:a9:f3:5d:2c:30:ce:e5:dd:e5:a2:bf:58:4e:2d:
                    54:c7:9e:2c:c9:55:f2:27:82:a6:36:00:a0:df:df:
                    c9:7a:65:dd:a9:3e:f5:79:64:be:ad:dd:87:42:f8:
                    5b:2b:b1:f0:30:39:9e:52:6b:74:2b:ea:04:59:b5:
                    53:42:2f:2a:37:38:fb:aa:c8:16:4d:3b:29:8c:5d:
                    48:f0:ee:32:e8:ed:4a:29:62:f6:d9:ca:38:9f:77:
                    6e:50:2b:4a:7f:ef:68:82:51:a8:32:ab:c4:73:04:
                    c9:43:ed:7d:e3:66:ce:6d:e4:55:d9:47:cb:ae:0f:
                    00:94:d4:b1:92:ce:4d:32:d4:98:59:f9:48:5c:6e:
                    b7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C0:9C:A9:B2:76:22:21:CD:A3:40:21:4B:C1:97:DA:7A:E8:A0:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl

            X509v3 Authority Key Identifier:
                keyid:91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.20.0/24
                  167.150.24.0/22
                IPv6:
                  2602:f7e7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:7e:2b:34:19:9a:fa:7b:10:ea:5d:79:45:dc:57:4d:23:9b:
         95:78:b2:5d:3a:36:eb:53:5b:0f:c9:5a:9c:24:4a:6c:75:1f:
         fd:dd:4c:70:77:55:63:a5:74:d1:3a:98:88:e8:6c:d0:b2:b5:
         66:7f:c8:f8:a8:ef:e0:e9:62:a4:63:cc:b1:c3:21:83:aa:dc:
         38:63:3c:e5:22:67:d1:3a:23:c0:88:b7:02:98:59:94:90:50:
         ee:8d:1f:ad:80:41:17:ad:34:98:b7:86:8a:6b:20:f6:7d:10:
         2d:43:9f:c5:b1:8c:e6:85:da:ea:c2:ac:b0:9b:ae:ba:7e:03:
         8a:bd:50:83:f6:57:14:27:a7:d8:14:88:6a:6e:6b:ba:a8:1d:
         03:bb:01:3d:6a:9a:f9:6b:cb:d3:13:00:f2:58:5c:0b:83:a9:
         3b:76:ed:6a:42:c0:d4:e7:3c:c6:ee:d6:90:5b:b4:f3:6f:07:
         2f:e7:0f:f2:87:e9:1f:f7:72:1c:04:68:d3:8b:56:29:c7:74:
         86:ae:51:6f:f1:2e:78:82:e5:65:71:48:e4:87:53:cb:f2:cb:
         5d:6a:fd:55:dc:2c:5d:8c:7e:e0:1f:1f:6e:1b:2e:04:c8:61:
         51:cf:b1:99:87:ba:e1:12:16:35:7a:bc:dc:1a:9e:7d:d7:21:
         43:76:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:45 2026 by rpki-client