Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/8eeed7a6-1a45-3e5a-9cc6-ae7a8936753f.roa
File:                     8eeed7a6-1a45-3e5a-9cc6-ae7a8936753f.roa (raw, json)
Hash identifier:          WdJtJpJ/8RBL6uMu5o5tdvvmhS57ki1f2OXR2CzNLeQ=
Subject key identifier:   0E:EE:9A:1F:47:FE:CF:B8:A4:13:12:7C:DD:F1:60:E9:FF:0E:6F:6A
Certificate issuer:       /CN=d982f1ba-c920-429c-a52e-66234d07865d
Certificate serial:       010D0C9F4328584F40A978BC3EE06AFF051A0200
Authority key identifier: 01:54:25:46:D5:2A:CA:79:F4:51:6E:66:35:2C:17:48:59:9A:0C:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/8eeed7a6-1a45-3e5a-9cc6-ae7a8936753f.roa
Signing time:             Mon 21 Sep 2026 21:28:39 +0000
ROA not before:           Mon 21 Sep 2026 21:28:39 +0000
ROA not after:            Sun 20 Dec 2026 22:28:39 +0000
asID:                     399065
IP address blocks:        72.21.0.0/21 maxlen: 24
                          162.33.192.0/22 maxlen: 24
                          167.224.0.0/20 maxlen: 24
                          169.150.32.0/19 maxlen: 24
                          170.203.0.0/21 maxlen: 24
                          170.203.32.0/20 maxlen: 24
                          195.85.120.0/21 maxlen: 24
                          208.56.240.0/20 maxlen: 24
                          216.205.32.0/20 maxlen: 24
                          2602:fce7::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/d982f1ba-c920-429c-a52e-66234d07865d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/d982f1ba-c920-429c-a52e-66234d07865d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:a9:78:bc:3e:e0:6a:ff:05:1a:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d982f1ba-c920-429c-a52e-66234d07865d
        Validity
            Not Before: Sep 21 21:28:39 2026 GMT
            Not After : Dec 20 22:28:39 2026 GMT
        Subject: CN=372e596e-9d08-4810-a098-1d641ad90600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:f9:75:06:ea:3a:74:80:28:26:d6:70:d0:
                    ac:6c:43:6f:06:b1:16:e9:5b:95:dd:69:0b:f3:8a:
                    77:f4:74:dd:5c:7b:cd:0b:bd:3d:18:7b:fe:76:b5:
                    7f:cd:9a:8b:74:a7:54:4a:07:85:30:5b:2b:39:d4:
                    56:bf:c8:87:cf:ef:a6:b9:db:9a:1c:12:2e:bb:cf:
                    d2:41:8d:31:70:f8:16:bd:f0:5f:19:7a:9f:67:b6:
                    12:17:e9:12:d4:ff:f4:f9:a0:34:72:76:e2:a6:4b:
                    ce:72:1c:0a:fb:06:06:0b:9f:87:bb:ae:55:dc:6a:
                    b3:63:a9:27:ee:af:d3:65:e0:56:20:e0:27:e6:2d:
                    03:b5:16:6a:0a:7f:a9:1d:4b:f7:b3:8b:83:2d:55:
                    e5:b6:dd:a0:4d:0b:1b:e8:82:56:33:96:f5:69:7e:
                    ed:ed:40:be:03:30:d5:9c:9c:cd:2f:9e:8f:47:59:
                    74:6d:1a:2f:66:c9:cd:3b:bb:4b:b2:27:25:fa:81:
                    c8:e6:00:48:51:44:0a:dc:e7:1f:fe:75:db:2e:aa:
                    f6:a4:e9:df:e2:33:98:b5:17:7c:5e:33:a8:14:3c:
                    c4:12:dc:fb:37:2d:36:de:29:3d:a6:55:07:ff:8b:
                    3f:39:09:a4:be:14:62:1a:10:10:a6:6f:a9:2c:b0:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EE:9A:1F:47:FE:CF:B8:A4:13:12:7C:DD:F1:60:E9:FF:0E:6F:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/8eeed7a6-1a45-3e5a-9cc6-ae7a8936753f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/d982f1ba-c920-429c-a52e-66234d07865d.crl

            X509v3 Authority Key Identifier:
                keyid:01:54:25:46:D5:2A:CA:79:F4:51:6E:66:35:2C:17:48:59:9A:0C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.0.0/21
                  162.33.192.0/22
                  167.224.0.0/20
                  169.150.32.0/19
                  170.203.0.0/21
                  170.203.32.0/20
                  195.85.120.0/21
                  208.56.240.0/20
                  216.205.32.0/20
                IPv6:
                  2602:fce7::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:83:35:fb:78:a7:8c:73:f2:70:b4:26:cd:02:99:ef:2a:17:
         43:c7:b0:55:3d:1c:6b:c9:9f:e1:20:78:36:39:7b:ea:83:54:
         cc:d0:c3:61:0d:68:9f:2f:29:df:bc:b4:b1:5f:ed:9a:17:ea:
         fa:f9:a7:c7:aa:48:dd:33:a0:e0:7c:b3:f4:f6:79:32:dc:9c:
         a9:6e:6b:3c:f0:39:73:e6:48:a5:71:40:0e:6c:6a:14:5b:27:
         be:12:34:5e:15:7b:91:ec:37:34:ba:50:bd:84:3b:95:e1:63:
         b4:9d:9e:48:dd:e8:ae:0e:45:64:06:b7:85:1b:5f:7b:62:08:
         66:96:eb:80:bc:d6:93:56:90:0d:59:a2:9d:b6:b7:6a:af:87:
         bf:5a:f9:b5:a2:b5:da:94:30:b4:36:12:4a:91:8a:6c:ca:f2:
         92:1b:35:68:3d:53:48:3a:f1:22:b9:f3:7e:21:d3:ab:71:0f:
         dd:04:00:4f:2b:26:87:b1:09:c9:22:47:a9:1b:2e:ae:13:45:
         f7:1f:75:38:86:c5:df:84:89:2e:d1:78:d0:8c:e2:ca:54:5e:
         85:29:21:65:9f:42:66:f9:3c:56:89:48:a3:47:ca:ef:bb:b3:
         64:17:9e:8e:37:52:29:50:9d:c7:08:0e:be:6b:5e:bd:b1:76:
         58:36:1a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:05:36 2026 by rpki-client