Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa
File:                     bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa (raw, json)
Hash identifier:          6wNKSycik0hbKuMRrGNTVwues0+MKKVq2SLiof0rH8c=
Subject key identifier:   04:66:67:BE:16:54:DC:F8:03:DA:A8:A5:41:92:0B:8B:0F:BF:3E:B4
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584F4973A9CE1F4E7AEAD4579480
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6621
IP address blocks:        67.143.0.0/19 maxlen: 19
                          67.143.32.0/20 maxlen: 20
                          67.143.64.0/21 maxlen: 21
                          67.143.72.0/21 maxlen: 21
                          67.143.80.0/20 maxlen: 20
                          67.143.96.0/23 maxlen: 23
                          67.143.98.0/24 maxlen: 24
                          67.143.100.0/22 maxlen: 22
                          67.143.104.0/21 maxlen: 21
                          67.143.112.0/20 maxlen: 20
                          67.143.128.0/22 maxlen: 22
                          67.143.132.0/22 maxlen: 22
                          67.143.136.0/22 maxlen: 22
                          67.143.140.0/22 maxlen: 22
                          67.143.144.0/22 maxlen: 22
                          67.143.148.0/22 maxlen: 22
                          67.143.152.0/22 maxlen: 22
                          67.143.156.0/22 maxlen: 22
                          67.143.160.0/22 maxlen: 22
                          67.143.164.0/22 maxlen: 22
                          67.143.168.0/22 maxlen: 22
                          67.143.172.0/22 maxlen: 22
                          67.143.174.0/23 maxlen: 23
                          67.143.180.0/22 maxlen: 22
                          67.143.184.0/22 maxlen: 22
                          67.143.188.0/22 maxlen: 22
                          67.143.191.0/24 maxlen: 24
                          67.143.192.0/22 maxlen: 22
                          67.143.196.0/22 maxlen: 22
                          67.143.200.0/22 maxlen: 22
                          67.143.204.0/22 maxlen: 22
                          67.143.208.0/22 maxlen: 22
                          67.143.212.0/22 maxlen: 22
                          67.143.216.0/22 maxlen: 22
                          67.143.220.0/22 maxlen: 22
                          67.143.224.0/21 maxlen: 21
                          67.143.232.0/21 maxlen: 21
                          67.143.240.0/21 maxlen: 21
                          67.143.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a9:ce:1f:4e:7a:ea:d4:57:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9af01851-b2f5-4d2c-8ea9-b6f99bdc38e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:08:c8:fc:06:22:a3:63:33:3c:99:eb:53:
                    10:72:5d:51:3c:bd:30:40:4e:e5:64:7b:3d:eb:96:
                    60:1d:b4:5a:50:03:0a:b3:31:c9:ab:9f:aa:d0:d5:
                    fb:24:4f:27:24:44:00:ee:60:22:16:02:7d:7a:9d:
                    64:dc:17:a1:6e:74:e6:7d:4f:5b:9e:f4:bc:7a:ac:
                    b9:87:f7:9e:15:46:b0:fa:8d:f5:4b:e9:d3:15:24:
                    4d:3d:d4:60:a7:00:e2:d1:6a:d5:cb:53:eb:53:df:
                    45:41:34:e0:84:31:63:c9:df:da:2c:f6:21:4f:e9:
                    2d:82:c9:e7:58:05:89:fd:bd:bd:dc:62:a3:b4:c5:
                    82:59:50:fd:f0:49:bd:c9:81:4c:0c:a3:7e:8d:75:
                    12:bb:b6:4b:c3:89:51:c7:c9:cd:eb:09:cb:5d:14:
                    ba:4d:2b:01:1e:b4:8e:62:c0:5c:62:53:04:45:45:
                    cd:45:72:3b:e8:42:b9:29:40:98:58:b0:7f:3d:51:
                    73:47:c5:07:e4:93:90:0f:be:01:40:9e:9a:f9:a4:
                    95:f9:83:27:14:61:a6:ba:c3:ba:b9:d7:4c:70:1e:
                    05:df:f5:c7:7d:07:57:4b:c2:06:bc:75:ce:45:dc:
                    68:8d:ae:0b:9a:4e:5d:32:01:0f:1b:39:5a:bd:1c:
                    5b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:66:67:BE:16:54:DC:F8:03:DA:A8:A5:41:92:0B:8B:0F:BF:3E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.143.0.0-67.143.47.255
                  67.143.64.0-67.143.98.255
                  67.143.100.0-67.143.175.255
                  67.143.180.0-67.143.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:84:e0:18:97:eb:59:9c:46:d9:d0:19:7b:8d:1d:73:0f:8e:
         4b:4f:d4:d6:e8:80:be:d2:0e:96:dc:8c:90:d5:61:21:4e:91:
         eb:00:94:6f:2c:f1:97:bb:ec:ca:dd:9a:f8:98:76:d7:1a:11:
         49:2e:05:1b:ba:8c:50:8a:3e:54:82:10:cb:aa:e1:b8:df:f5:
         c6:c7:c3:8d:33:92:a3:31:df:88:7e:10:d4:a4:f0:36:16:9f:
         cf:0e:47:3e:d2:a5:48:6f:2e:95:17:9f:d4:5b:b2:40:97:da:
         44:2d:56:e7:15:a5:dc:65:93:d5:d0:0a:ee:74:86:40:7c:14:
         ab:1e:de:88:46:27:9c:71:d4:08:24:05:c3:18:07:4f:98:c9:
         67:3a:a4:25:ab:69:7a:15:b6:08:46:72:e2:6a:70:e9:e4:eb:
         08:80:be:c9:cf:43:34:da:59:df:ef:45:5e:1b:d3:a3:fe:3e:
         57:7e:ee:15:c7:e2:a1:2a:ca:2b:d9:c5:d6:3e:79:36:02:d9:
         96:8a:18:d7:79:8f:db:77:89:50:c9:4c:ff:ff:05:37:b4:0e:
         0e:93:72:1b:7d:25:18:d0:7c:df:35:fa:f5:23:5e:96:04:c9:
         35:ea:ee:fa:8b:8a:d6:0c:e5:66:8a:88:6a:a6:5b:4e:5e:37:
         80:10:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:47:21 2026 by rpki-client