Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c16d572-f991-3b9b-a82f-4375ba97aaa2.roa
File:                     9c16d572-f991-3b9b-a82f-4375ba97aaa2.roa (raw, json)
Hash identifier:          H0dSfUF3t9BxKOT66ATslpSqcpwHb+WRHI8ANS0uETM=
Subject key identifier:   95:A5:AD:02:42:91:08:27:77:0A:C0:69:26:9E:1F:AE:C1:1F:BE:B8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E9BE501ACABC8669E33D4FD00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c16d572-f991-3b9b-a82f-4375ba97aaa2.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     20115
IP address blocks:        64.32.152.0/21 maxlen: 24
                          64.50.136.0/21 maxlen: 24
                          64.145.128.0/18 maxlen: 24
                          64.145.192.0/18 maxlen: 24
                          64.248.0.0/18 maxlen: 24
                          64.248.64.0/18 maxlen: 24
                          64.248.128.0/18 maxlen: 24
                          64.248.192.0/18 maxlen: 24
                          64.249.0.0/18 maxlen: 24
                          64.249.64.0/18 maxlen: 24
                          64.249.128.0/18 maxlen: 24
                          64.249.192.0/18 maxlen: 24
                          66.17.72.0/21 maxlen: 24
                          66.200.0.0/18 maxlen: 24
                          66.200.64.0/18 maxlen: 24
                          66.200.128.0/18 maxlen: 24
                          66.200.192.0/18 maxlen: 24
                          74.3.0.0/18 maxlen: 24
                          74.3.64.0/18 maxlen: 24
                          205.214.32.0/20 maxlen: 24
                          206.40.192.0/20 maxlen: 24
                          206.253.0.0/20 maxlen: 24
                          208.41.0.0/18 maxlen: 24
                          208.41.64.0/18 maxlen: 24
                          208.41.128.0/18 maxlen: 24
                          208.41.192.0/18 maxlen: 24
                          216.151.224.0/20 maxlen: 24
                          216.184.128.0/18 maxlen: 24
                          216.184.192.0/18 maxlen: 24
                          216.224.0.0/19 maxlen: 24
                          216.224.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:01:ac:ab:c8:66:9e:33:d4:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=c0f40c21-e35f-4230-8e37-e9e7bd233870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:ad:2e:2d:6f:04:da:82:06:ee:0e:dd:51:
                    14:8a:8c:f6:38:97:ba:7b:b9:41:b5:3d:ea:e2:96:
                    76:60:4b:a9:97:eb:cc:a4:78:df:bd:9b:ec:32:fd:
                    63:e8:c7:b0:8e:a2:66:85:9c:e3:d2:1b:71:6b:2f:
                    18:06:d3:26:ec:24:2e:af:37:c8:6e:89:32:87:50:
                    ad:5e:b0:b9:ff:39:ad:51:c6:1a:b4:34:0c:33:1a:
                    19:d8:84:7b:c5:d4:3d:8b:8b:bb:39:49:d3:9e:9b:
                    92:93:61:d3:a9:e4:92:9a:9b:02:62:41:49:da:bd:
                    3c:d1:93:a2:01:6a:de:82:e5:61:6e:d5:46:a3:3f:
                    25:da:ab:90:fb:8c:c3:5b:d2:81:60:3c:fc:49:8d:
                    49:33:08:75:0e:0c:a5:b2:66:a7:79:12:e6:b2:18:
                    55:64:43:54:1f:92:7d:d3:77:02:71:7e:8f:59:86:
                    ab:17:5d:a2:b3:50:7c:0b:98:c5:56:40:fd:73:08:
                    41:82:79:16:5c:6f:92:cc:25:89:36:ad:0c:78:6b:
                    cf:62:fa:9e:02:69:5c:d3:9d:b3:2c:43:4a:04:73:
                    b5:5b:9b:f2:da:c3:84:7c:32:4e:01:53:d4:42:8d:
                    55:d7:50:ab:b3:20:26:86:46:2a:b5:26:4c:ea:a1:
                    e0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A5:AD:02:42:91:08:27:77:0A:C0:69:26:9E:1F:AE:C1:1F:BE:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c16d572-f991-3b9b-a82f-4375ba97aaa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.152.0/21
                  64.50.136.0/21
                  64.145.128.0/17
                  64.248.0.0/15
                  66.17.72.0/21
                  66.200.0.0/16
                  74.3.0.0/17
                  205.214.32.0/20
                  206.40.192.0/20
                  206.253.0.0/20
                  208.41.0.0/16
                  216.151.224.0/20
                  216.184.128.0/17
                  216.224.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c2:d8:3e:ca:8b:cc:a2:c3:d5:3b:b6:c6:bf:22:d3:48:27:
         91:85:cd:22:58:d5:7d:5a:41:fc:c2:9a:e0:43:9b:d4:02:ad:
         28:37:cd:be:96:64:61:db:c4:78:cd:35:b1:bb:1e:18:9a:c1:
         72:a4:e4:9a:4b:10:96:fa:e9:02:40:dc:5c:c6:93:70:c5:eb:
         e1:ed:c9:9d:81:ec:67:e8:8a:a2:68:c4:55:10:19:cd:ac:ac:
         b4:b4:8e:db:04:68:cd:56:e2:1c:b8:74:45:9d:c5:d2:30:90:
         f5:58:60:69:c6:a8:e5:db:53:2e:61:21:00:dd:50:ea:39:3f:
         53:64:a3:15:38:04:e8:c4:6c:0e:66:2f:06:d3:21:51:43:2c:
         36:3f:31:22:75:50:1e:39:cc:38:22:80:52:e0:c2:52:72:82:
         ff:e6:3e:55:27:56:7d:ae:bb:d3:49:92:00:11:9e:11:9b:7f:
         59:4c:77:0a:34:82:fc:ba:b3:2d:31:64:87:f2:38:19:c1:f6:
         91:3c:fb:61:1a:e8:4b:45:73:0e:94:be:d6:a2:bf:bd:f4:a5:
         e7:9e:af:bd:42:87:ef:c2:94:7c:fd:cb:1d:80:a7:1f:ee:3d:
         3a:8c:5c:01:ee:4a:b0:f4:4a:38:8b:0a:cf:fd:c7:a7:ad:fb:
         3a:89:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:44:49 2026 by rpki-client