Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ad074b3-1ef3-3eda-98c9-f9561f0b6a33.roa
File:                     1ad074b3-1ef3-3eda-98c9-f9561f0b6a33.roa (raw, json)
Hash identifier:          fxuoPIgnLwbbO7aGzzCe+Cs2Yq0vF5yEwWFwzfDRosU=
Subject key identifier:   9B:FA:08:C1:7E:8C:44:84:0B:7A:81:E4:DB:8B:68:7F:19:80:92:DA
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E9BE5340FF1AC6BF1B882E720
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ad074b3-1ef3-3eda-98c9-f9561f0b6a33.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     6762
IP address blocks:        64.32.152.0/21 maxlen: 21
                          64.50.136.0/21 maxlen: 21
                          64.145.128.0/18 maxlen: 18
                          64.145.192.0/18 maxlen: 18
                          64.248.0.0/18 maxlen: 18
                          64.248.64.0/18 maxlen: 18
                          64.248.128.0/18 maxlen: 18
                          64.248.192.0/18 maxlen: 18
                          64.249.0.0/18 maxlen: 18
                          64.249.64.0/18 maxlen: 18
                          64.249.128.0/18 maxlen: 18
                          64.249.192.0/18 maxlen: 18
                          66.17.72.0/21 maxlen: 21
                          66.200.0.0/18 maxlen: 18
                          66.200.64.0/18 maxlen: 18
                          66.200.128.0/18 maxlen: 18
                          66.200.192.0/18 maxlen: 18
                          74.3.0.0/18 maxlen: 18
                          74.3.64.0/18 maxlen: 18
                          205.214.32.0/20 maxlen: 20
                          206.40.192.0/20 maxlen: 20
                          206.253.0.0/20 maxlen: 20
                          208.41.0.0/18 maxlen: 18
                          208.41.64.0/18 maxlen: 18
                          208.41.128.0/18 maxlen: 18
                          208.41.192.0/18 maxlen: 18
                          216.151.224.0/20 maxlen: 20
                          216.184.128.0/18 maxlen: 18
                          216.184.192.0/18 maxlen: 18
                          216.224.0.0/19 maxlen: 19
                          216.224.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:34:0f:f1:ac:6b:f1:b8:82:e7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=73b32127-4965-48bf-bca3-9b0b37a169c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:4b:50:76:df:bc:49:13:2c:a4:34:2d:d0:
                    36:fc:4b:13:1a:2a:89:84:a6:01:35:fb:8f:c3:4e:
                    62:00:1c:a2:26:59:fb:0b:d1:be:2a:f0:32:a4:f3:
                    d1:20:1c:b9:37:1e:0d:3c:c4:ac:38:3a:55:a9:80:
                    13:27:3a:6e:d4:ab:5e:2b:e0:2f:b7:a7:15:80:19:
                    fe:32:e1:8b:53:27:72:fb:ec:b6:80:0c:d1:8c:91:
                    98:8f:18:e7:1a:b5:27:5a:74:de:60:cd:14:e1:00:
                    b4:98:a0:12:2a:a9:af:52:1b:1e:e7:77:fa:b5:1f:
                    cd:35:0f:45:ca:aa:e8:d8:b6:4a:f3:43:e8:83:76:
                    9f:3e:ca:4d:e7:45:47:53:1d:38:3f:81:31:5f:f3:
                    7d:57:55:0b:12:4e:ea:d5:04:50:da:12:15:42:c0:
                    9e:42:85:0a:34:46:57:98:f9:3b:9c:23:17:f0:5d:
                    46:46:a9:47:0d:c2:6c:a8:29:b1:bc:ed:57:83:fc:
                    bd:34:83:b9:df:42:91:7e:50:1b:a5:50:07:aa:7f:
                    77:ff:2a:0c:32:88:fe:d9:44:8e:68:3c:73:63:06:
                    54:ec:43:f3:84:0f:85:60:e4:24:e5:70:6c:16:04:
                    78:2e:e8:91:0d:95:c2:70:f2:44:a7:0e:09:a0:f5:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FA:08:C1:7E:8C:44:84:0B:7A:81:E4:DB:8B:68:7F:19:80:92:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ad074b3-1ef3-3eda-98c9-f9561f0b6a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.152.0/21
                  64.50.136.0/21
                  64.145.128.0/17
                  64.248.0.0/15
                  66.17.72.0/21
                  66.200.0.0/16
                  74.3.0.0/17
                  205.214.32.0/20
                  206.40.192.0/20
                  206.253.0.0/20
                  208.41.0.0/16
                  216.151.224.0/20
                  216.184.128.0/17
                  216.224.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:30:87:89:43:24:82:de:63:3a:81:84:f4:95:b3:4f:c2:ba:
         98:65:4e:87:ee:2a:8c:3e:06:50:4f:0b:3e:41:8c:6a:2f:b5:
         ec:f4:a4:51:85:de:44:75:da:fd:99:62:69:c1:c5:bd:86:8c:
         90:89:19:55:9d:b5:64:0c:9f:dc:78:e7:ac:5b:01:70:20:b2:
         49:7e:ae:3c:8d:f9:24:ed:4b:45:9a:c9:1f:d2:be:79:59:ee:
         4e:a4:e6:8d:11:92:3a:2b:34:93:f9:07:67:07:88:9e:86:74:
         d4:3d:10:62:24:ff:53:d4:10:5d:ad:e9:d0:2d:46:a8:75:fd:
         ae:a7:be:43:bc:ba:30:11:a8:ee:82:c9:1d:d9:a5:9b:e3:b8:
         d0:2c:c7:df:13:2c:f1:ba:6c:ae:63:83:df:6a:2d:f6:6c:ad:
         36:6b:77:10:ff:42:b5:22:a3:0a:9a:04:5c:74:5a:6a:b9:f9:
         0c:21:a8:90:e3:a5:38:5c:97:7f:3f:72:c3:08:29:a1:a7:44:
         4d:27:f5:95:55:f5:0d:17:95:a9:ff:d3:f1:64:11:3c:12:55:
         40:52:bb:89:47:9d:9f:c0:0f:7a:55:e0:67:42:4a:87:ed:28:
         39:c3:0b:6c:e4:3e:95:8e:a1:43:f5:b6:b3:83:9e:01:b9:a5:
         c1:0b:8f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:46:06 2026 by rpki-client