Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b482233b-e744-3d40-bf98-463709c352e5.roa
File:                     b482233b-e744-3d40-bf98-463709c352e5.roa (raw, json)
Hash identifier:          rEb9PRPbmycSOlf/wYzjq0N+SI7A4tLR9Oy/gEF2KBc=
Subject key identifier:   5E:BD:A2:65:0D:52:E1:68:CC:DB:BF:32:58:D1:05:DB:BD:32:97:FE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA79C6EB919B3EBF160C86D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b482233b-e744-3d40-bf98-463709c352e5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20001
IP address blocks:        65.84.0.0/16 maxlen: 24
                          65.85.0.0/23 maxlen: 24
                          65.85.3.0/24 maxlen: 24
                          65.85.4.0/22 maxlen: 24
                          65.85.8.0/21 maxlen: 24
                          65.85.16.0/20 maxlen: 24
                          65.85.32.0/19 maxlen: 24
                          65.85.64.0/18 maxlen: 24
                          65.85.128.0/17 maxlen: 24
                          66.92.144.0/21 maxlen: 24
                          66.167.128.0/21 maxlen: 24
                          68.165.64.0/19 maxlen: 24
                          207.145.0.0/22 maxlen: 24
                          207.145.44.0/22 maxlen: 24
                          207.145.52.0/22 maxlen: 24
                          207.145.56.0/21 maxlen: 24
                          207.145.104.0/21 maxlen: 24
                          207.145.144.0/21 maxlen: 24
                          207.145.176.0/21 maxlen: 24
                          207.145.240.0/21 maxlen: 24
                          207.168.28.0/22 maxlen: 24
                          207.168.48.0/22 maxlen: 24
                          207.168.56.0/22 maxlen: 24
                          207.168.80.0/21 maxlen: 24
                          207.168.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:6e:b9:19:b3:eb:f1:60:c8:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b2d0357e-97a0-4252-a268-5f8d063fad62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:56:c0:c7:eb:ee:33:0f:a2:23:17:3f:2b:
                    c1:61:77:d2:0a:94:cb:ea:13:30:ad:82:2a:66:74:
                    c6:5b:01:30:73:68:7c:15:43:d9:78:2a:85:fe:9c:
                    87:76:5b:9c:93:0b:0f:37:f6:e9:46:fd:6e:0b:30:
                    f3:78:9f:77:00:e2:bd:54:83:4e:33:d5:70:3b:3b:
                    b1:68:20:dc:a2:6f:ee:72:6d:92:2a:61:ea:83:0a:
                    c6:a1:1f:2c:67:7d:74:ca:a0:a6:06:dc:52:03:27:
                    99:b3:1f:b2:5e:8f:e3:b6:ae:3b:fd:d6:38:55:9f:
                    6e:1a:d0:12:66:c2:0a:54:f4:05:f3:8f:43:f9:e1:
                    71:dd:30:87:51:5e:23:04:72:d5:fb:f6:b2:ed:2f:
                    35:96:0f:ff:01:1b:cf:14:68:78:07:4e:39:75:10:
                    32:82:7f:98:82:49:8a:7e:5f:70:ab:95:e9:4c:58:
                    86:30:f0:1f:bf:06:dd:59:47:ef:a5:4f:3b:6f:05:
                    3c:d0:d7:c7:e7:40:96:9b:5a:bd:32:1f:79:36:6d:
                    6d:7d:53:79:b0:97:ef:e8:de:36:25:54:77:c7:c5:
                    e3:ab:ab:34:57:4e:8c:af:b7:e9:14:9a:29:f3:8e:
                    23:24:9b:2d:00:d2:ca:74:2c:96:b7:d9:e7:0b:98:
                    60:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BD:A2:65:0D:52:E1:68:CC:DB:BF:32:58:D1:05:DB:BD:32:97:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b482233b-e744-3d40-bf98-463709c352e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.84.0.0-65.85.1.255
                  65.85.3.0-65.85.255.255
                  66.92.144.0/21
                  66.167.128.0/21
                  68.165.64.0/19
                  207.145.0.0/22
                  207.145.44.0/22
                  207.145.52.0-207.145.63.255
                  207.145.104.0/21
                  207.145.144.0/21
                  207.145.176.0/21
                  207.145.240.0/21
                  207.168.28.0/22
                  207.168.48.0/22
                  207.168.56.0/22
                  207.168.80.0/21
                  207.168.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:33:01:8b:ea:4d:47:ab:d9:33:e0:af:6a:6b:9e:f4:06:b1:
         cb:f0:df:2e:54:06:50:41:35:1f:fb:aa:cf:40:18:40:e6:6c:
         d1:c3:9e:33:0f:cc:b3:ad:a1:3f:0f:7a:78:1c:07:8c:0d:e9:
         82:77:87:fb:12:95:28:d1:1a:be:3f:ec:2a:81:5c:17:87:52:
         27:b0:57:80:92:b1:f9:ba:0d:df:93:70:d1:88:a6:51:9e:2c:
         55:84:bf:8f:43:26:1e:54:c9:58:bd:b0:4e:ed:4f:03:0c:55:
         0c:bc:2e:78:0b:56:18:f5:ff:f9:e1:6a:fb:a9:58:a4:f1:13:
         03:20:52:b6:3c:d2:15:46:f4:e5:34:46:84:a3:c2:1d:a6:f9:
         3c:90:8f:cc:72:c3:24:97:04:62:9c:a4:bc:df:b9:f2:c1:a0:
         01:e6:13:28:37:2a:11:55:40:41:48:5b:bb:33:36:08:ba:dc:
         7f:c4:9f:16:d0:93:2e:77:91:58:af:58:92:8f:82:b8:bc:2e:
         a3:66:28:c3:12:56:cd:fd:56:55:47:0c:33:ff:5a:65:fd:08:
         7a:b3:99:3c:28:46:81:cc:8b:2b:e1:c5:34:55:c2:48:e1:31:
         9f:da:77:82:8b:c1:82:b0:e5:25:bc:52:a0:da:fd:ea:0c:bc:
         84:ce:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:40:46 2026 by rpki-client