Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa
File:                     3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa (raw, json)
Hash identifier:          85FzWmwYBZ9HxSEnVCIGHwUTuQWpogURN9eIiTVOoNs=
Subject key identifier:   2B:77:DF:24:A2:64:21:67:92:27:67:85:79:EF:99:20:B2:59:22:75
Certificate issuer:       /CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
Certificate serial:       010D0C9F4328584F225D02DA610C040955064B80
Authority key identifier: 1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     27630
IP address blocks:        67.43.160.0/20 maxlen: 24
                          69.166.0.0/21 maxlen: 24
                          72.34.224.0/19 maxlen: 24
                          207.246.192.0/20 maxlen: 24
                          208.122.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:02:da:61:0c:04:09:55:06:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=9d090182-5ddd-43a8-87dd-d6d308eb5619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:ec:94:81:ef:02:f6:86:55:8e:e2:bf:f7:
                    34:56:5c:3e:7d:bb:6e:16:fe:37:1b:9a:00:14:e9:
                    7f:69:d3:2a:9a:ff:66:f6:1e:d7:90:ee:bd:f8:99:
                    0c:27:6a:02:b1:ce:5b:81:e5:55:b6:2e:1e:85:26:
                    c9:06:f4:2c:02:31:c0:d9:db:2b:95:a1:ec:16:ed:
                    5f:3f:d1:d3:e6:5c:b4:07:55:2e:13:96:20:39:56:
                    fd:cd:c2:73:17:aa:ea:a2:aa:1a:25:86:f9:23:5e:
                    96:b2:25:6a:9f:46:c4:4b:91:9a:90:3b:87:c6:33:
                    a2:84:7f:17:f7:20:6a:a7:9d:bb:44:8b:75:72:49:
                    4e:1f:2e:33:03:35:43:ee:25:e0:d7:31:19:af:01:
                    ae:bd:bb:34:2e:f3:ca:9c:2e:c3:fa:e9:92:98:2b:
                    1d:95:2a:72:5c:9f:66:2c:9b:99:7c:55:64:1a:eb:
                    ad:ba:2d:b1:46:cd:eb:3f:7f:72:29:fd:35:c0:a9:
                    5d:0a:b4:cb:49:94:08:3d:b6:01:a4:12:89:61:20:
                    59:a7:bd:85:cd:8a:eb:6a:c3:3e:97:68:a9:8f:55:
                    b2:03:ed:a4:ae:77:24:f5:45:77:7a:5b:65:d5:a4:
                    fb:4f:19:c0:5f:b0:cb:df:04:9b:62:97:4b:d1:7d:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:77:DF:24:A2:64:21:67:92:27:67:85:79:EF:99:20:B2:59:22:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.crl

            X509v3 Authority Key Identifier:
                keyid:1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.160.0/20
                  69.166.0.0/21
                  72.34.224.0/19
                  207.246.192.0/20
                  208.122.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e0:b3:6e:43:df:68:50:45:2f:7b:1f:22:17:6e:c9:56:a7:
         90:86:69:02:e3:26:11:06:4d:e2:37:5a:36:12:19:b9:cd:2f:
         f4:27:39:75:98:0a:0b:25:59:98:e2:5f:1f:d0:3f:6f:ae:28:
         ea:c9:c7:df:fa:09:c2:3c:4f:a0:f0:b9:05:dd:8e:7e:5d:7b:
         77:f2:a0:6b:db:a5:5a:f8:40:8d:35:06:84:05:57:28:be:e6:
         7c:fe:87:a0:0f:4b:23:95:e7:20:21:21:83:c5:2d:c7:22:16:
         5e:44:27:dc:dc:92:ea:55:9c:68:57:ac:20:32:40:b0:63:3b:
         1f:6c:9d:36:cb:67:1d:f0:ee:6a:6a:ac:d4:80:6f:03:7d:40:
         92:6b:09:13:c0:b1:a1:b8:27:d8:45:88:5f:2d:f1:d7:e6:32:
         38:b6:3b:06:d1:4f:55:07:f2:b1:ef:8a:d4:23:cd:b4:41:3a:
         9a:6f:1e:f4:52:5b:05:b0:ba:6e:48:9b:4d:c4:20:89:54:c9:
         46:f6:11:58:0f:1a:a3:5d:5e:eb:2d:23:fb:0c:8c:ef:c4:bc:
         dd:3f:31:a4:0f:9b:0d:c2:78:5c:b5:f7:3a:51:2a:e0:b4:e0:
         ef:d1:18:50:2a:4c:df:52:02:72:5e:3f:d1:4f:70:f1:4e:76:
         b5:e9:6f:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:29:45 2026 by rpki-client