Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa
File:                     4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa (raw, json)
Hash identifier:          xDF1+Hxsxjz8Uq4oUer5BaQvHxAKQ6+RewltZp+9IkU=
Subject key identifier:   18:C1:59:AA:3C:EE:06:9B:37:36:7A:36:76:2C:58:A6:79:7C:F8:91
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584E131982E346DBA0E3138C5F80
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     3320
IP address blocks:        67.214.178.0/24 maxlen: 24
                          74.80.157.0/24 maxlen: 24
                          74.80.165.0/24 maxlen: 24
                          74.80.174.0/24 maxlen: 24
                          74.80.177.0/24 maxlen: 24
                          74.80.178.0/24 maxlen: 24
                          206.212.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:82:e3:46:db:a0:e3:13:8c:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=67f71462-7da9-4cba-ad00-cb48f0e8208f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:38:19:63:fc:bb:22:98:52:da:e9:6e:63:5d:
                    40:b5:5a:da:09:0b:3c:b3:63:35:8f:cc:ed:e7:43:
                    dd:d6:0d:e1:40:25:60:3a:bb:ae:13:8b:d0:8b:cd:
                    8e:de:04:3b:5f:a3:b6:e4:8c:7f:f6:8b:ac:33:4d:
                    2d:fe:5e:13:06:c7:63:ac:3c:1f:e1:de:3a:fd:c9:
                    97:14:38:18:2a:c8:4c:e6:c5:10:c9:0a:33:02:07:
                    26:b3:88:12:14:02:d0:26:3a:8e:08:85:c5:dd:e6:
                    8b:46:cc:cf:b9:dc:3d:d5:31:5b:8a:75:9b:bf:f2:
                    f7:9e:4a:ab:34:5e:62:1b:36:18:3a:27:4e:bf:7a:
                    cd:57:94:89:e7:0a:83:be:b0:11:54:3c:db:0e:f0:
                    b7:07:c6:9c:fc:fa:f2:90:03:24:ba:88:25:06:fb:
                    05:ed:e3:05:bd:d3:d6:3f:14:3e:cb:98:38:f4:73:
                    0c:42:81:8a:93:f6:34:e3:86:d5:24:34:5d:2e:f8:
                    0c:37:fc:e4:02:64:17:6a:df:8f:41:6c:cb:24:9d:
                    36:40:22:41:ea:e1:39:32:38:4b:f4:ec:4b:75:91:
                    c8:ae:18:86:a6:70:7f:53:87:21:71:6e:b2:6d:52:
                    5d:2a:f1:39:87:f8:7c:5b:39:17:e1:fd:fc:9f:be:
                    06:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C1:59:AA:3C:EE:06:9B:37:36:7A:36:76:2C:58:A6:79:7C:F8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.178.0/24
                  74.80.157.0/24
                  74.80.165.0/24
                  74.80.174.0/24
                  74.80.177.0-74.80.178.255
                  206.212.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:af:da:45:6c:61:1c:f7:f7:85:88:c7:a2:45:f9:74:28:1e:
         b9:4c:ab:8b:55:f0:bb:bd:25:22:be:e5:f5:35:90:a8:44:0a:
         17:fd:fe:54:a0:3e:10:8d:cd:de:e0:ab:af:75:2e:e1:50:09:
         ed:0d:03:89:b3:96:58:ee:4d:ba:ed:d0:ff:e6:98:e9:fd:14:
         76:8c:7b:8a:3f:1f:cb:84:85:1e:0a:6c:8e:18:3c:34:6c:83:
         f6:48:c1:b8:11:4a:24:3d:2e:55:81:d7:6d:0f:6b:5b:1d:e2:
         b6:5b:c4:6f:c6:3a:e0:cc:d3:02:cd:0e:3d:ec:1c:75:ba:3e:
         d7:ac:47:a5:99:2a:f5:f0:50:fe:76:05:ed:91:22:a1:fe:51:
         dd:47:09:7f:df:15:18:a1:9e:55:c4:bb:23:f6:fb:17:52:d5:
         8e:91:38:49:80:1e:03:12:93:e4:18:c9:13:5f:52:9d:de:0f:
         f8:b9:67:23:e7:75:44:c0:26:db:48:c7:04:8e:56:83:25:af:
         18:52:66:65:22:99:fc:8f:42:8e:a2:9a:d9:ec:6e:37:f0:f9:
         97:ee:6c:0a:4e:8c:30:82:ee:76:93:f7:cd:c4:9e:26:52:12:
         09:b5:1a:81:76:2b:bb:54:a0:ef:3d:2a:9b:f2:b6:98:f7:88:
         5b:9a:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:00:51 2026 by rpki-client