Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/ae8cd62e-5bf2-3058-b8b2-5ee0b8c4aa1f.roa
File:                     ae8cd62e-5bf2-3058-b8b2-5ee0b8c4aa1f.roa (raw, json)
Hash identifier:          4XphiToXjalqTPxycxF6vGPEGcGvtXv6+ji3s3d5umg=
Subject key identifier:   2B:B9:43:FA:37:D8:A6:2F:DF:FE:5E:72:D9:4D:12:80:B0:E0:91:A6
Certificate issuer:       /CN=87a7a98d-6ed8-48cc-953b-32292e94edde
Certificate serial:       010D0C9F4328584EA796D22B826DB853C5341F00
Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/ae8cd62e-5bf2-3058-b8b2-5ee0b8c4aa1f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26891
IP address blocks:        64.25.224.0/20 maxlen: 24
                          66.110.176.0/20 maxlen: 24
                          97.64.0.0/20 maxlen: 24
                          162.210.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:d2:2b:82:6d:b8:53:c5:34:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f510623b-a5f9-47b2-8d53-f61258de0ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:9b:da:90:d0:d8:fe:cf:af:66:c1:5c:d4:
                    69:f6:8c:68:e0:c6:04:f5:88:0d:99:36:34:70:6e:
                    8c:d0:b6:dd:ed:8d:0f:34:91:99:c0:51:f5:6d:a7:
                    b0:20:1b:a4:cd:63:15:af:71:b9:53:85:db:7c:86:
                    df:cc:72:cc:e8:04:f7:89:c2:2a:d0:48:b9:44:6d:
                    5d:f5:8e:19:08:97:35:0f:f1:fe:2a:49:4e:ed:27:
                    c2:c8:dd:6c:c8:65:85:b6:5a:c6:54:d0:8c:4f:cf:
                    5e:25:e8:9c:cc:7e:da:67:7b:32:34:a8:e2:bf:e3:
                    52:6b:4d:67:15:3e:7d:5b:aa:50:f6:2a:6f:ca:18:
                    3d:9c:ef:63:da:a1:e8:bb:73:ee:84:c3:53:e5:09:
                    12:b5:a5:f3:79:4f:0f:87:db:17:9a:fb:bd:89:b5:
                    19:c6:0d:9d:70:4a:4c:c5:4b:b1:9a:7c:14:0e:5b:
                    fd:4d:f1:12:7c:e5:1d:2e:ce:20:68:93:75:9d:64:
                    37:94:ee:91:7a:43:33:16:37:51:4f:ae:8b:48:5e:
                    40:33:17:f6:81:39:af:65:df:5b:e5:08:91:07:ad:
                    42:76:3f:b4:53:15:8f:83:02:49:39:58:70:0c:d7:
                    43:bd:f6:b7:53:c0:20:ea:92:81:9a:26:82:9d:23:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B9:43:FA:37:D8:A6:2F:DF:FE:5E:72:D9:4D:12:80:B0:E0:91:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/ae8cd62e-5bf2-3058-b8b2-5ee0b8c4aa1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl

            X509v3 Authority Key Identifier:
                keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.224.0/20
                  66.110.176.0/20
                  97.64.0.0/20
                  162.210.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:79:4a:1a:99:73:ed:51:1b:d5:8f:20:62:9b:10:5d:c4:01:
         75:d3:01:7d:0c:66:f3:cf:c2:8c:df:55:5b:40:5a:fd:39:f8:
         c1:58:5f:d1:7d:95:f8:c1:9b:2f:12:e4:cc:bd:fb:2a:67:48:
         58:9b:7e:24:a3:6b:f7:96:37:d1:7d:a0:8c:9b:58:ad:67:71:
         a9:67:9e:e5:b1:a3:d9:c5:56:6c:b8:c4:5e:c9:e8:48:a2:59:
         47:8a:54:f1:aa:fc:9c:83:85:20:27:e0:8d:33:d4:8a:86:39:
         7f:01:a0:21:b1:d3:05:b9:b2:d1:d8:7b:f2:34:fb:86:b8:ce:
         c6:99:91:b6:0b:41:b3:a7:98:d6:19:34:84:86:9c:49:ea:8f:
         ad:35:71:e5:96:b9:f1:df:ef:de:05:06:2c:fb:c2:05:74:37:
         67:aa:0b:fa:e1:9e:ce:27:01:84:3b:58:51:0d:fd:42:0a:f1:
         6d:32:85:37:67:bf:3c:47:f5:63:d7:b1:5f:a8:e6:07:f3:4c:
         85:8a:9e:f9:6d:1a:fa:68:b0:ae:80:5d:d4:2d:5e:81:51:ad:
         fa:1b:cf:8d:8e:96:6d:cb:a6:55:1f:7e:d9:40:fb:70:23:1b:
         d2:b3:82:84:4b:52:2e:87:d0:f4:77:45:b7:c7:e0:7f:b0:4e:
         ab:ca:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:31:41 2026 by rpki-client