Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa
File:                     864d8067-3825-33b1-b76e-1c3b72be155f.roa (raw, json)
Hash identifier:          +Z9Y5GbGZEr1aIuPAb8Ljc50le2uLUE4tiVyjNoZMCw=
Subject key identifier:   39:AE:12:41:D9:56:24:BB:E9:67:04:96:EC:9F:FE:F9:A5:AF:3A:A1
Certificate issuer:       /CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984
Certificate serial:       010D0C9F4328584D40CA470C31AE13662763BB00
Authority key identifier: 02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     18616
IP address blocks:        52.119.64.0/19 maxlen: 32
                          64.111.64.0/20 maxlen: 32
                          68.233.176.0/20 maxlen: 32
                          163.182.128.0/19 maxlen: 32
                          163.182.160.0/23 maxlen: 32
                          198.254.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:47:0c:31:ae:13:66:27:63:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=bcc7d7a2-6573-470b-a76a-572096c6c434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:9d:69:14:e1:80:f1:90:14:4a:bc:a1:34:
                    86:3a:cf:f6:a8:88:17:9f:23:8f:c6:e5:b4:c2:a8:
                    7e:ea:59:02:91:52:e7:54:67:b3:19:b6:be:14:89:
                    90:ae:12:77:3e:b1:41:77:a9:0d:1e:de:cb:31:e2:
                    59:d5:53:2d:da:4a:7b:59:94:85:e1:d4:ec:1f:0d:
                    5f:61:cb:ec:ce:ce:25:74:17:b3:60:10:97:cf:41:
                    9e:dd:ff:dd:78:46:9c:ec:8b:99:fd:c1:84:a8:13:
                    b1:c4:de:38:43:43:c9:b3:16:07:39:c1:f1:7d:25:
                    d8:ab:ea:6e:ce:80:7e:b6:11:22:92:59:33:ae:e2:
                    bf:91:3b:f7:b2:6f:0b:ec:7b:91:46:67:c7:97:06:
                    56:d5:00:c7:da:bc:a8:f6:90:cc:3f:a0:02:c7:42:
                    96:f3:6f:86:8c:34:ea:1d:e3:05:62:ef:75:ba:17:
                    2b:83:76:55:f4:52:f7:54:7b:16:3e:18:ac:2a:04:
                    ef:f3:70:d5:9a:01:a6:11:e9:fa:bd:52:a8:99:f6:
                    30:71:54:a7:a4:54:d3:00:71:6c:ba:32:06:0e:63:
                    48:31:4b:df:6d:6e:b8:c9:70:7b:21:be:b5:3b:91:
                    57:a8:67:57:6f:ad:2a:15:22:76:5a:a0:b1:81:68:
                    26:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AE:12:41:D9:56:24:BB:E9:67:04:96:EC:9F:FE:F9:A5:AF:3A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl

            X509v3 Authority Key Identifier:
                keyid:02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.64.0/19
                  64.111.64.0/20
                  68.233.176.0/20
                  163.182.128.0-163.182.161.255
                  198.254.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:0b:e7:dd:3e:40:53:7c:15:60:44:d4:7e:0f:4e:6a:c4:fd:
         0f:19:c4:f9:b4:f9:ab:0e:04:a9:11:0d:cd:37:d9:f9:84:86:
         ec:72:20:58:7a:6f:d4:dc:be:46:df:ce:97:9b:b1:6e:3a:0c:
         e1:39:83:31:e7:bc:a6:fe:bc:92:e2:62:47:83:28:5a:99:00:
         6e:2a:2c:4e:c0:99:e5:6f:ae:e5:ce:32:ee:0d:03:7e:00:49:
         b5:73:69:45:95:a9:4a:7a:66:c8:94:8f:f8:92:6a:6c:58:b9:
         74:7a:1b:ba:c7:13:54:94:87:36:a4:33:fd:72:8b:81:4d:26:
         e5:a1:4f:05:dc:d7:7e:f5:8c:1a:1c:e5:1b:d3:34:48:4e:fb:
         a1:90:d6:7c:14:df:cc:56:39:f7:09:9d:b3:cc:96:f4:0f:f9:
         76:81:6c:c5:ad:12:17:6f:6e:c8:2d:9d:a3:fc:0b:24:a2:47:
         2e:16:d0:d3:dd:e7:fe:77:c5:cf:1b:b4:31:56:f6:7f:32:e7:
         e0:5a:30:71:b9:55:aa:fc:03:7a:b5:77:cb:f6:1b:88:be:e3:
         90:56:90:84:ed:60:4c:b3:a1:d7:45:fa:b9:ad:36:a3:e0:97:
         0a:8d:4a:d2:11:c0:ec:39:16:72:89:48:ea:66:cf:22:f5:55:
         8c:6b:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:28 2026 by rpki-client