Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf995f26-06f8-317b-9528-1a361a1e7c47.roa
File:                     cf995f26-06f8-317b-9528-1a361a1e7c47.roa (raw, json)
Hash identifier:          qeMJPg667UogJnpfXHn+luvaOZcDw5MdwY2GOQmh9R0=
Subject key identifier:   D6:D0:C0:15:4E:F7:DE:8F:BA:2F:55:0A:FD:0B:3B:43:10:64:54:42
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F49731C2A137AB30569DD7980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf995f26-06f8-317b-9528-1a361a1e7c47.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        64.32.189.0/24 maxlen: 24
                          66.80.113.0/24 maxlen: 24
                          155.229.90.0/24 maxlen: 24
                          155.229.92.0/24 maxlen: 24
                          155.229.93.0/24 maxlen: 24
                          207.145.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:1c:2a:13:7a:b3:05:69:dd:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1d92bbb5-f3de-4930-8ac5-d95d420530fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:89:bf:c2:f3:ac:26:04:55:ee:1e:f2:f9:
                    9a:21:42:74:bd:db:00:08:00:fc:d3:42:59:7d:24:
                    e3:97:96:92:01:26:d0:16:b7:c0:95:8a:42:ea:fd:
                    a0:ef:5e:15:e7:a5:e1:92:d9:5e:25:ca:90:6f:d8:
                    bc:0f:a8:dd:50:1c:a5:61:19:79:db:14:9a:8e:a9:
                    5a:80:ff:0d:fd:35:f7:ce:b3:8a:28:2a:cd:ba:3d:
                    6c:c1:45:11:14:7e:64:08:25:eb:49:ee:5c:28:5d:
                    2c:d8:a0:77:b3:44:8c:46:e4:15:db:24:21:06:13:
                    02:c4:ca:86:ce:b3:70:23:8e:f0:b5:a4:2c:fb:1b:
                    d8:15:5f:32:55:95:aa:03:8b:52:12:66:57:95:0f:
                    1f:f0:04:d8:99:66:29:85:53:f2:90:5b:af:6b:ca:
                    e2:b9:38:62:7c:7c:e4:53:ed:a6:5b:9f:56:87:e7:
                    bf:04:58:80:67:29:8b:20:a7:90:2c:55:12:c8:d4:
                    5f:94:40:ab:d8:d7:c0:bb:42:68:da:97:26:72:1b:
                    d1:f7:79:51:cf:15:ed:4e:af:66:8e:74:a5:fc:cf:
                    1d:68:19:10:20:9c:51:b0:6b:60:ff:8f:c0:d7:49:
                    80:5a:2f:83:42:28:79:c0:8d:4c:96:da:5f:31:07:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D0:C0:15:4E:F7:DE:8F:BA:2F:55:0A:FD:0B:3B:43:10:64:54:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf995f26-06f8-317b-9528-1a361a1e7c47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.189.0/24
                  66.80.113.0/24
                  155.229.90.0/24
                  155.229.92.0/23
                  207.145.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7c:58:7b:20:d6:a7:77:81:38:e7:45:2b:d6:93:ab:fe:eb:
         99:ec:4c:a4:94:a7:4a:0c:33:ca:21:71:f5:44:e2:5a:c4:f9:
         92:e5:0f:6d:dd:52:b1:0b:38:a1:cb:a2:39:9c:c2:af:b3:8a:
         44:73:63:4b:29:43:bb:78:ba:9e:67:90:9f:71:98:3c:1d:d2:
         21:eb:a1:f9:8d:76:ea:3d:13:f5:08:13:7f:f4:e4:90:8f:77:
         48:4c:c3:61:a9:13:ad:11:0b:f4:04:aa:9d:99:69:23:54:65:
         ac:b5:46:22:74:14:0a:b1:e8:73:f7:05:e0:b8:01:3e:b0:01:
         3e:26:53:85:33:d4:7c:96:c3:65:69:3a:ce:de:b4:09:2d:56:
         49:e1:4c:d3:ca:4d:5f:d9:3b:06:33:42:7b:d1:71:6c:61:51:
         48:3d:06:83:d6:43:00:22:2b:25:f0:51:ab:45:ce:4b:fb:bc:
         4a:15:de:07:18:b9:c7:1c:94:0f:72:50:7f:d7:11:49:bc:41:
         16:7a:61:2f:1a:cc:94:ae:a3:be:a9:97:7b:8f:5c:79:b4:55:
         4b:1f:5e:68:93:71:8d:85:a0:df:c6:b8:eb:9c:8c:26:37:b1:
         9b:60:e4:18:a4:a8:64:c5:d6:ae:43:52:5b:4d:1e:60:95:23:
         d8:a5:fa:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:29:30 2026 by rpki-client