Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/1d401506-4f47-39c5-a612-247ef02c9e34.roa
File:                     1d401506-4f47-39c5-a612-247ef02c9e34.roa (raw, json)
Hash identifier:          BuobjlB6oYiiI09e4fZyfr0lU04XEI6N+heCwcjwF20=
Subject key identifier:   9D:23:6B:A9:B6:8C:D1:E7:18:C8:B4:EA:1A:A2:41:CA:70:36:DE:7B
Certificate issuer:       /CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Certificate serial:       010D0C9F4328584F243E66E1AC030964EEB16780
Authority key identifier: 5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/1d401506-4f47-39c5-a612-247ef02c9e34.roa
Signing time:             Fri 11 Sep 2026 17:10:17 +0000
ROA not before:           Fri 11 Sep 2026 17:10:17 +0000
ROA not after:            Thu 10 Dec 2026 18:10:17 +0000
asID:                     14618
IP address blocks:        64.207.196.0/24 maxlen: 24
                          64.207.197.0/24 maxlen: 24
                          64.207.198.0/24 maxlen: 24
                          64.207.199.0/24 maxlen: 24
                          64.207.204.0/24 maxlen: 24
                          64.207.205.0/24 maxlen: 24
                          67.222.248.0/24 maxlen: 24
                          67.222.249.0/24 maxlen: 24
                          67.222.250.0/24 maxlen: 24
                          67.222.251.0/24 maxlen: 24
                          216.9.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/13ca66ad-657f-42b1-9ec3-ab39b361fadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/13ca66ad-657f-42b1-9ec3-ab39b361fadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:24:3e:66:e1:ac:03:09:64:ee:b1:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
        Validity
            Not Before: Sep 11 17:10:17 2026 GMT
            Not After : Dec 10 18:10:17 2026 GMT
        Subject: CN=6e0be2ad-ef38-4fa7-933b-6546efd975be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8d:9b:41:1d:f6:d3:7a:bf:48:9d:48:fd:a6:
                    89:d7:82:14:9e:12:c8:12:2d:f5:2a:97:36:d6:ee:
                    0f:5c:7a:0e:2e:89:95:a4:bc:e0:78:b6:2f:3b:22:
                    09:ce:22:6c:89:ad:12:93:f9:fa:d7:e4:f5:85:35:
                    d7:11:9f:1c:a9:5f:91:f6:e4:35:79:55:62:5d:40:
                    11:fd:7d:7c:18:dd:a4:d0:df:2e:37:a4:14:3f:e9:
                    8b:ee:39:02:5d:fa:cf:d8:82:9b:ee:fb:a2:20:47:
                    f8:eb:24:aa:f5:a5:aa:d0:ec:73:5d:e6:94:36:a1:
                    83:e8:0f:60:0c:cf:62:cd:6f:b4:4c:88:0a:ba:1e:
                    eb:6f:7b:dc:32:d3:52:42:28:5b:5d:7e:b0:ff:8f:
                    82:10:9a:6c:d4:6c:c9:40:eb:55:36:3b:22:aa:b4:
                    be:a2:42:26:57:7f:fc:cc:9b:b4:4e:42:0a:25:6f:
                    03:bc:64:25:0b:52:b8:d4:74:fd:05:9d:d9:0b:5b:
                    a4:cd:94:af:dc:fd:06:6a:5f:bb:89:9e:22:20:dc:
                    5b:af:60:74:93:44:f0:92:31:60:57:e0:45:fe:c8:
                    b7:56:81:6f:54:0c:0b:36:46:e0:97:c2:ff:f0:89:
                    54:f4:92:a0:18:9f:f4:fa:b7:4a:fa:91:89:05:1d:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:23:6B:A9:B6:8C:D1:E7:18:C8:B4:EA:1A:A2:41:CA:70:36:DE:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/1d401506-4f47-39c5-a612-247ef02c9e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/13ca66ad-657f-42b1-9ec3-ab39b361fadd.crl

            X509v3 Authority Key Identifier:
                keyid:5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.207.196.0/22
                  64.207.204.0/23
                  67.222.248.0/22
                  216.9.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:49:7f:f7:5b:bb:a0:d9:74:ba:f8:8a:f2:27:e3:1e:98:9f:
         11:87:21:83:f1:51:22:8b:3b:7b:03:45:20:76:d0:e2:5b:4c:
         33:16:c3:60:57:45:33:cd:35:77:a1:fa:bf:bc:61:61:28:0f:
         79:13:3c:55:b6:a7:7c:41:52:81:c3:3f:7c:76:b3:bd:55:89:
         22:8b:90:df:68:c1:8f:ab:88:1f:ab:5e:70:d8:07:90:ce:28:
         8e:e7:04:0e:4b:c8:9f:7c:50:eb:3b:35:a5:b1:42:49:e3:68:
         a7:16:0a:e2:4c:48:d5:0f:61:1e:e8:5a:c1:74:ba:8a:cb:2f:
         ad:58:31:a1:4a:a9:e9:de:d2:06:20:23:04:3c:96:92:a9:33:
         83:17:74:83:73:ee:76:f0:9d:84:c0:39:63:31:23:e7:e1:26:
         0f:94:a0:a0:12:52:b9:4f:22:c7:35:cd:8a:7b:91:3a:43:81:
         cf:e1:32:92:0c:26:9a:e5:88:00:58:c1:cb:0f:be:2c:ee:c4:
         42:a1:16:70:6b:79:02:66:a4:85:7d:1b:15:d4:1f:e2:be:a7:
         41:61:88:1d:25:80:e3:c3:4d:1a:38:c0:72:b5:7b:0e:cc:8c:
         9a:22:db:6f:29:dd:6a:a1:b7:63:0e:14:01:53:64:19:50:f3:
         81:cf:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:09:43 2026 by rpki-client