Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa
File:                     1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa (raw, json)
Hash identifier:          eEUKMvS2KPOJO+JBty1T/K/a4sECRjhhisX0EWDwvGk=
Subject key identifier:   AD:49:D8:75:FF:14:D4:12:10:26:85:68:05:A5:DE:14:3F:E6:3D:17
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F4328584EA7870B0FBCC46C6FDDE6F500
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63414
IP address blocks:        64.21.228.0/22 maxlen: 24
                          64.255.144.0/21 maxlen: 24
                          66.163.144.0/21 maxlen: 24
                          66.163.152.0/24 maxlen: 24
                          66.163.155.0/24 maxlen: 24
                          66.163.156.0/22 maxlen: 24
                          69.178.192.0/22 maxlen: 24
                          69.178.196.0/23 maxlen: 24
                          69.178.200.0/22 maxlen: 24
                          76.10.124.0/22 maxlen: 24
                          209.243.0.0/21 maxlen: 24
                          209.243.8.0/22 maxlen: 24
                          209.243.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:0b:0f:bc:c4:6c:6f:dd:e6:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ea8f396e-f5f4-4d00-9d11-4b3dc96b331a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:ee:32:ee:d1:7e:2c:3a:13:0c:bf:51:96:
                    8b:a9:92:a6:31:bf:da:c8:8b:84:1e:67:ff:ec:80:
                    29:12:9c:53:52:6e:d8:da:60:48:4d:35:1b:c6:19:
                    df:49:fc:eb:32:75:4a:3c:52:e9:81:03:fe:69:78:
                    23:af:53:b4:cf:42:a9:f3:46:21:a6:47:cc:54:87:
                    89:74:27:f9:63:af:d2:79:6a:29:47:aa:10:19:b8:
                    57:b8:36:7b:ff:90:60:67:e9:83:af:e2:c8:8f:e7:
                    cc:4d:03:8f:ea:97:e8:a7:ae:5c:24:78:df:c8:d3:
                    c1:41:3e:7f:22:08:6f:64:82:9d:55:17:58:1e:39:
                    a0:09:42:98:3e:b6:83:44:5b:cb:a1:ec:5e:85:2b:
                    2f:ba:f8:b3:c5:14:fc:4a:43:00:80:da:45:9c:12:
                    b4:18:b4:4d:e0:cd:f5:fc:bc:81:e8:63:2c:51:ea:
                    e8:53:c8:ca:b2:a8:73:fb:3a:4e:0a:78:c5:62:a6:
                    b9:94:f2:54:42:da:a8:7d:bd:10:63:96:d9:34:e1:
                    2e:3d:24:d7:de:1d:26:f4:3f:18:11:96:95:11:20:
                    a3:38:89:6c:a1:a5:73:12:a3:f4:5e:86:ed:74:07:
                    20:48:57:da:e8:e6:4f:b1:76:8c:ca:25:ea:c5:d2:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:49:D8:75:FF:14:D4:12:10:26:85:68:05:A5:DE:14:3F:E6:3D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.21.228.0/22
                  64.255.144.0/21
                  66.163.144.0-66.163.152.255
                  66.163.155.0-66.163.159.255
                  69.178.192.0-69.178.197.255
                  69.178.200.0/22
                  76.10.124.0/22
                  209.243.0.0-209.243.11.255
                  209.243.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:78:07:cb:30:7d:bd:91:5f:f6:08:b7:39:79:3e:a0:82:46:
         14:c2:c4:46:17:5c:39:97:9c:fa:1f:45:f2:2b:ac:b2:51:75:
         e9:a9:6c:b5:f8:eb:84:18:0b:b1:1b:90:13:fb:bd:0c:4e:79:
         b8:51:45:46:d6:72:14:ed:86:d4:79:65:29:3a:86:22:ca:94:
         94:19:94:bf:11:5e:a0:03:b3:0f:17:eb:ac:4f:42:fb:b1:53:
         62:38:a4:21:92:62:f2:6c:39:41:46:9f:34:84:d0:fb:43:05:
         13:55:fb:d7:f7:9c:41:d9:eb:64:03:2d:62:49:4e:e3:1e:98:
         b6:ee:b0:5e:7c:22:fa:bc:27:d6:66:53:1d:ec:4e:e4:32:7c:
         b8:8f:c9:9c:09:7d:cc:40:d9:1e:af:91:af:dd:47:bf:4a:03:
         b5:f2:6e:2a:62:67:a4:42:4c:a4:d3:7d:d2:fd:e2:85:2b:f0:
         07:e9:16:78:d5:72:15:f3:77:1d:45:81:5b:03:31:a1:02:71:
         45:fd:e3:bb:2a:c1:c9:54:51:6e:e7:0c:3c:66:97:d7:75:2e:
         4f:17:f9:98:bc:e6:5d:3f:03:2b:08:20:af:02:3e:94:0b:b0:
         88:6c:09:f5:7e:23:59:91:99:96:ad:e2:f2:aa:04:b6:2f:d9:
         10:15:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:23:40 2026 by rpki-client