Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa
File:                     20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa (raw, json)
Hash identifier:          nIelnra0+O4am8H1vgnc7t9zsE3gr8FZ2Oy8eqHSuD0=
Subject key identifier:   18:C0:AC:C7:1D:8E:2D:3C:F5:F7:26:0C:F2:16:47:3B:84:B0:74:45
Certificate issuer:       /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Certificate serial:       010D0C9F4328584DBBA03DF9145F3C7F1FF86740
Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        64.57.8.0/21 maxlen: 21
                          64.57.8.0/24 maxlen: 24
                          64.57.9.0/24 maxlen: 24
                          64.57.10.0/24 maxlen: 24
                          64.57.11.0/24 maxlen: 24
                          64.57.12.0/24 maxlen: 24
                          64.57.13.0/24 maxlen: 24
                          64.57.14.0/24 maxlen: 24
                          64.57.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:3d:f9:14:5f:3c:7f:1f:f8:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=3589b6fa-a583-424e-ac8d-bf45cd94a59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:03:b2:65:68:78:17:38:f2:90:27:bc:fc:12:
                    3c:7b:89:5b:73:dc:a2:36:d2:59:4e:aa:ab:17:04:
                    d6:00:be:b7:9a:f7:56:48:bd:20:21:9f:03:17:b1:
                    a5:9d:b7:32:1a:93:50:de:3a:d5:37:ca:41:29:c0:
                    04:de:37:a3:c9:ea:b5:8c:c5:6c:c1:32:ed:11:a1:
                    8d:96:a7:c5:27:56:87:40:40:ec:0f:80:67:d1:f6:
                    80:44:66:ff:19:30:41:ff:c3:5c:b8:d6:78:bb:72:
                    92:91:6e:cf:9d:a2:12:f3:38:19:f1:c5:0f:0d:57:
                    42:90:9b:60:51:05:cb:e4:1e:05:15:31:95:45:e7:
                    ef:d9:a0:80:5e:aa:18:29:d8:b5:27:15:10:d2:d3:
                    b0:3a:9a:06:0c:a1:0a:10:0f:ae:ce:28:25:7d:b2:
                    5e:b4:37:32:96:95:eb:9f:cd:32:03:d8:3f:29:ab:
                    21:29:e5:35:f7:39:b8:33:90:88:d3:ac:19:95:6f:
                    85:91:e0:5d:33:11:04:91:b7:47:05:8d:d1:c9:87:
                    14:44:0d:a3:0c:ca:1a:0c:10:e4:00:a9:16:73:88:
                    6f:5e:1c:0a:e9:05:12:a3:5d:d2:fd:36:07:f6:02:
                    34:5a:4a:64:2f:50:e5:2c:9f:80:4c:7f:69:64:9c:
                    9f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C0:AC:C7:1D:8E:2D:3C:F5:F7:26:0C:F2:16:47:3B:84:B0:74:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl

            X509v3 Authority Key Identifier:
                keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:14:b2:aa:7a:b1:9b:67:b3:9f:d2:e6:e6:fc:88:e5:61:aa:
         9c:da:f0:26:19:c0:ec:86:b8:8d:0e:c1:be:5e:e0:2e:56:5f:
         d5:f1:af:ef:24:5e:69:9e:cb:49:e2:95:94:88:de:ab:bb:c7:
         d7:74:b9:02:37:78:41:6f:ff:52:a6:bd:dd:52:cb:89:dc:d6:
         42:b0:60:1e:06:63:41:5a:ba:63:1b:b1:59:09:b8:20:38:70:
         73:5e:50:f6:62:4c:1c:b2:41:83:e2:b1:fd:22:97:58:90:73:
         69:45:cf:27:a1:37:10:e8:d4:15:86:56:96:f9:ff:fc:6b:31:
         f1:4b:6e:22:54:6a:ea:99:e0:29:1e:57:bf:b1:13:b5:b1:ae:
         7c:58:de:7c:ef:77:7c:1f:df:b0:08:7f:93:38:48:8c:a1:46:
         6f:50:ec:71:1b:fc:b2:f2:e8:42:4b:c9:d1:e6:2a:ac:66:ce:
         05:14:ed:15:08:38:15:c6:56:6e:26:97:19:f8:63:a5:8b:02:
         6e:82:a4:16:2c:5a:c4:bc:3f:62:5d:43:da:7d:e6:45:d6:6e:
         85:f5:45:82:db:49:9b:85:4f:0f:00:eb:88:66:ce:0a:8c:0a:
         3d:10:8a:94:a2:3a:5c:37:89:c5:fd:19:7f:67:57:c4:5a:db:
         8c:4b:ed:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:37:02 2026 by rpki-client