Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
File:                     9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa (raw, json)
Hash identifier:          06m/yFljGbOt2F7WSHgEad0qTwgWADhJY/kXxD5hJrg=
Subject key identifier:   EC:93:63:94:EB:02:99:48:5D:4C:A4:18:EE:EB:EF:12:BF:02:26:7D
Certificate issuer:       /CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Certificate serial:       010D0C9F4328584D80FFF9A2681881947B5EE099
Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     21565
IP address blocks:        64.138.192.0/18 maxlen: 24
                          64.150.128.0/19 maxlen: 24
                          66.153.128.0/17 maxlen: 24
                          66.220.64.0/20 maxlen: 24
                          67.212.32.0/19 maxlen: 24
                          107.190.144.0/20 maxlen: 24
                          108.175.176.0/20 maxlen: 24
                          152.44.112.0/20 maxlen: 24
                          159.117.160.0/19 maxlen: 24
                          162.221.104.0/21 maxlen: 24
                          162.252.0.0/21 maxlen: 24
                          198.29.48.0/20 maxlen: 24
                          198.52.224.0/20 maxlen: 24
                          198.232.104.0/21 maxlen: 24
                          206.195.64.0/19 maxlen: 24
                          216.16.160.0/19 maxlen: 24
                          216.223.192.0/19 maxlen: 24
                          2606:8400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f9:a2:68:18:81:94:7b:5e:e0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=03734607-c0d8-4cc5-b840-7280c6579bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:4e:e9:12:32:5c:f3:60:ec:f8:cf:0e:6d:
                    91:17:ed:01:84:56:a7:13:08:c9:6f:0e:b7:ba:fb:
                    36:22:56:13:47:7f:fc:09:f6:6b:af:b2:ee:0d:14:
                    ad:65:0b:68:29:6d:6b:29:80:ec:94:f6:a2:d0:66:
                    10:25:df:f0:a0:13:82:c6:9d:c9:2e:ef:21:d2:54:
                    90:ef:af:b9:5b:15:7e:e4:5c:be:89:10:a0:d3:29:
                    a1:b4:93:e6:ec:1e:19:21:ab:27:b1:eb:88:7b:e2:
                    94:21:7e:c7:fc:a7:85:d5:38:25:bc:ac:0e:aa:2e:
                    5d:d8:5a:6a:a6:8a:72:26:74:7a:16:f2:83:80:d5:
                    7c:e1:1a:8e:a0:fb:b4:48:dd:80:4a:b0:d2:05:62:
                    b4:34:2c:75:db:24:7c:01:c3:d8:6f:c3:65:18:54:
                    0d:4e:98:aa:ae:18:40:1b:46:54:7a:ff:41:bd:c4:
                    f0:7b:5d:a1:c0:2b:58:cc:05:76:43:78:be:ac:53:
                    2a:e5:b5:da:98:d0:c7:b8:2c:63:75:cc:ba:0c:8e:
                    85:ce:fa:76:a8:39:3d:d0:fc:9a:08:06:24:0b:fc:
                    c5:72:e7:83:c8:84:d6:96:63:cd:bd:fe:97:35:df:
                    fe:4b:35:27:bc:0a:48:09:f1:fd:b5:28:cd:03:5c:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:93:63:94:EB:02:99:48:5D:4C:A4:18:EE:EB:EF:12:BF:02:26:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl

            X509v3 Authority Key Identifier:
                keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.138.192.0/18
                  64.150.128.0/19
                  66.153.128.0/17
                  66.220.64.0/20
                  67.212.32.0/19
                  107.190.144.0/20
                  108.175.176.0/20
                  152.44.112.0/20
                  159.117.160.0/19
                  162.221.104.0/21
                  162.252.0.0/21
                  198.29.48.0/20
                  198.52.224.0/20
                  198.232.104.0/21
                  206.195.64.0/19
                  216.16.160.0/19
                  216.223.192.0/19
                IPv6:
                  2606:8400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:85:d9:b7:4f:0f:32:93:1a:67:00:86:f7:52:0b:43:48:
         67:cb:83:ec:2a:9f:79:15:2f:f6:55:b7:ac:0f:4f:3f:16:f4:
         3d:88:57:54:e8:b8:63:b5:6f:30:95:aa:29:9c:66:86:c0:c0:
         dd:71:11:cb:76:63:13:21:cd:78:7e:df:5f:bd:df:33:2b:f1:
         0c:2a:b6:8f:19:16:87:d0:fd:7b:ca:6d:c7:7e:f7:10:4e:f2:
         4c:88:25:9e:71:14:e4:0f:01:ca:a7:7f:4e:37:03:51:2c:3b:
         3c:2b:c5:2c:b5:52:98:6a:2a:b3:ea:0e:07:7d:40:4f:78:54:
         75:28:34:02:88:7e:11:2f:9c:dd:0b:a6:05:16:ad:50:86:04:
         e2:46:1e:95:04:2f:89:74:fd:f9:4b:2c:10:84:e4:b4:b7:38:
         af:d5:c9:31:50:24:4f:99:b2:6d:92:13:67:f2:90:6f:e3:05:
         7d:e8:c0:e8:67:b4:3d:d0:d4:f8:92:2b:9a:f2:a0:1e:1c:8a:
         c6:ad:08:fd:71:8a:3e:34:98:e1:78:f9:ef:16:4f:44:44:c7:
         2e:78:9a:f7:33:d6:00:f9:36:0c:7f:d3:91:88:2e:cf:59:43:
         1a:d2:1a:27:0a:03:b1:7d:29:3e:5d:09:c0:ff:7e:16:49:e1:
         93:b1:6f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:56 2026 by rpki-client