Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5aca2be5-5ea7-3399-9f6e-824226ed21c7.roa
File:                     5aca2be5-5ea7-3399-9f6e-824226ed21c7.roa (raw, json)
Hash identifier:          iaerjRFblNjazn+kNW1XIQNoqcZ/NzJ1N+dyeIal0MY=
Subject key identifier:   F7:E0:4B:32:69:13:E5:26:89:F6:8C:65:E1:3D:5B:19:7C:2F:FF:F0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA788B4722149356CD2F8EE80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5aca2be5-5ea7-3399-9f6e-824226ed21c7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20001
IP address blocks:        64.105.74.0/23 maxlen: 24
                          64.105.98.0/23 maxlen: 24
                          64.105.110.0/23 maxlen: 24
                          64.105.126.0/23 maxlen: 24
                          64.105.128.0/22 maxlen: 24
                          64.105.134.0/23 maxlen: 24
                          64.105.154.0/23 maxlen: 24
                          64.105.160.0/23 maxlen: 24
                          64.105.164.0/22 maxlen: 24
                          64.105.168.0/22 maxlen: 24
                          64.105.174.0/23 maxlen: 24
                          64.105.176.0/23 maxlen: 24
                          64.105.180.0/22 maxlen: 24
                          64.105.184.0/22 maxlen: 24
                          64.105.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:b4:72:21:49:35:6c:d2:f8:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=505f098a-9aa3-4593-ab3b-a7612a5f7ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:52:40:69:08:23:fd:10:5c:23:91:2b:d7:
                    ce:1d:87:5f:16:01:31:9b:a8:f4:7f:b1:0f:22:4a:
                    ba:51:de:11:24:3c:66:b9:75:fb:a0:bd:7f:0d:44:
                    f0:2d:0b:57:34:e1:bf:84:92:84:da:46:8e:81:7e:
                    06:72:9f:3b:d0:c0:7c:fc:66:db:e9:c8:be:91:fd:
                    d0:1d:c5:c7:e7:7a:52:3d:3a:68:d3:09:0c:7a:f9:
                    46:21:f2:7a:52:3e:f7:95:e5:ab:54:17:5b:96:8a:
                    b1:f8:89:0c:9d:aa:71:86:59:c8:d4:31:95:bf:5c:
                    0e:6e:6e:04:7b:fe:8a:6a:04:95:bc:cd:0e:54:11:
                    a3:27:e7:96:f7:e6:69:b1:2c:9e:7e:a2:15:d5:c8:
                    a0:3f:53:e5:11:0f:d1:01:24:93:b8:d6:e4:b5:e5:
                    ff:84:3d:96:72:f8:48:33:c7:8c:cc:4c:de:b5:52:
                    36:5b:1c:2f:a2:96:d6:64:99:41:f9:1a:1b:59:7a:
                    f9:7d:a9:2a:c1:e0:9d:6d:58:ae:a9:f2:dd:e0:cf:
                    d1:bf:b0:fb:66:36:b8:a0:a7:34:ad:dd:ae:ca:75:
                    d0:20:38:ec:e6:d0:71:a2:ec:a4:07:35:9d:04:72:
                    29:7a:7d:ef:37:94:9b:04:4b:d5:c1:2f:d1:7e:13:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E0:4B:32:69:13:E5:26:89:F6:8C:65:E1:3D:5B:19:7C:2F:FF:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5aca2be5-5ea7-3399-9f6e-824226ed21c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.105.74.0/23
                  64.105.98.0/23
                  64.105.110.0/23
                  64.105.126.0-64.105.131.255
                  64.105.134.0/23
                  64.105.154.0/23
                  64.105.160.0/23
                  64.105.164.0-64.105.171.255
                  64.105.174.0-64.105.177.255
                  64.105.180.0-64.105.187.255
                  64.105.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:3b:2e:17:84:d3:05:97:96:e4:c8:74:5a:a1:42:0e:85:f4:
         0a:c8:1a:a0:bc:77:e9:50:79:14:aa:bd:82:cd:7a:11:59:c7:
         ac:91:48:62:0f:49:c4:22:fd:7c:cc:17:3d:56:28:1a:c7:02:
         fd:a3:18:61:71:47:00:eb:dd:e6:d1:3f:f9:06:80:34:d0:bc:
         36:68:f7:cd:8f:e8:06:54:da:ef:78:e1:87:9d:df:fc:6b:68:
         94:22:33:0b:c2:4f:cd:ed:48:b9:d6:03:9c:89:cb:d7:b8:af:
         22:82:f7:74:9c:c9:d4:74:ca:97:03:4e:39:bc:6a:c8:a6:85:
         4d:b8:cd:b9:1f:1f:aa:3d:28:95:7d:fb:d4:55:4d:de:9a:ef:
         09:1a:82:b7:1a:13:23:76:a7:5c:ad:a4:d0:e3:f4:e5:40:c3:
         97:1a:e1:81:a6:78:db:4e:4a:eb:28:83:77:74:f3:b7:40:dd:
         2b:84:eb:d7:75:2f:83:bd:49:bf:7e:48:1b:a9:c5:39:b3:19:
         cc:1c:f9:67:f1:eb:1a:42:e8:6d:28:34:eb:6a:a1:e5:1e:2d:
         72:fc:2d:93:1a:54:c9:44:20:a3:da:d6:13:70:95:a1:50:9e:
         bd:56:03:24:d4:02:f0:d9:5b:be:4d:4f:4a:d1:11:f8:4a:48:
         f1:e7:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:31:09 2026 by rpki-client