Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/250a5961-b5a2-4399-9c4d-4e71808f4a1c/e3a547e0-76ee-3471-975d-5e7db0222aa9.roa
File:                     e3a547e0-76ee-3471-975d-5e7db0222aa9.roa (raw, json)
Hash identifier:          UbCZsvZsk0mCrAce2lHQFPgkoJn1GQ3r0bZKmuGysgA=
Subject key identifier:   29:A4:4F:74:D9:58:03:B1:20:70:D7:C1:CE:58:AF:48:3C:EE:EC:6E
Certificate issuer:       /CN=250a5961-b5a2-4399-9c4d-4e71808f4a1c
Certificate serial:       010D0C9F4328584E7D3A391DF33068DA6E229C00
Authority key identifier: 7D:D2:A0:2E:48:8E:EC:19:2C:3C:F0:CF:56:2F:31:DA:73:1B:D2:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/250a5961-b5a2-4399-9c4d-4e71808f4a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/250a5961-b5a2-4399-9c4d-4e71808f4a1c/e3a547e0-76ee-3471-975d-5e7db0222aa9.roa
Signing time:             Mon 13 Jul 2026 21:21:52 +0000
ROA not before:           Mon 13 Jul 2026 21:21:52 +0000
ROA not after:            Sun 11 Oct 2026 21:21:52 +0000
asID:                     15175
IP address blocks:        66.185.96.0/20 maxlen: 20
                          74.220.32.0/20 maxlen: 20
                          74.220.32.0/21 maxlen: 21
                          74.220.38.0/24 maxlen: 24
                          74.220.40.0/21 maxlen: 21
                          74.220.43.0/24 maxlen: 24
                          74.220.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/250a5961-b5a2-4399-9c4d-4e71808f4a1c/250a5961-b5a2-4399-9c4d-4e71808f4a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/250a5961-b5a2-4399-9c4d-4e71808f4a1c/250a5961-b5a2-4399-9c4d-4e71808f4a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/250a5961-b5a2-4399-9c4d-4e71808f4a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:3a:39:1d:f3:30:68:da:6e:22:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250a5961-b5a2-4399-9c4d-4e71808f4a1c
        Validity
            Not Before: Jul 13 21:21:52 2026 GMT
            Not After : Oct 11 21:21:52 2026 GMT
        Subject: CN=ce44a6b4-951b-4934-8518-6d854102750d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:0d:7b:93:b6:32:eb:f6:fb:1e:47:03:69:
                    0d:ad:9f:9c:27:ed:87:1a:b4:e7:d0:28:c4:4e:ed:
                    b8:cc:22:56:c8:b8:6b:bb:cb:22:8b:f8:5f:c5:45:
                    60:76:6b:f3:d6:eb:f6:a6:b7:ce:db:04:01:01:38:
                    95:5e:02:55:1c:fc:16:1c:dd:64:4a:52:0e:c2:41:
                    bd:5a:4b:f6:fe:6b:ad:9f:a7:91:28:6a:b2:56:54:
                    de:9f:54:0a:24:91:a5:c3:25:d8:73:65:2c:45:e6:
                    eb:bb:07:bd:b4:1f:d0:fb:3f:0b:0a:97:a5:df:73:
                    ee:07:c9:31:8f:9e:1f:59:6b:f3:f3:69:99:01:cc:
                    d4:78:83:40:78:0d:22:6b:dd:1d:2c:f3:45:ea:ec:
                    e2:5f:0a:41:88:9b:da:11:c5:95:01:a6:7d:c9:ee:
                    1d:a2:88:f8:1c:b4:c9:81:b7:35:55:cb:13:b4:3f:
                    f8:d4:5e:2b:6a:ca:80:b3:23:c0:b6:f5:26:e3:f6:
                    1f:a7:fb:b6:f8:75:de:33:4f:74:cb:09:66:f3:e3:
                    22:3d:23:7a:5a:88:cc:23:23:c5:c4:20:75:22:9b:
                    4c:01:8f:c3:fb:4e:3d:ae:b1:25:3f:74:90:90:3d:
                    35:d0:18:03:d0:5a:1d:0f:02:b9:8b:e6:69:ef:9e:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A4:4F:74:D9:58:03:B1:20:70:D7:C1:CE:58:AF:48:3C:EE:EC:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/250a5961-b5a2-4399-9c4d-4e71808f4a1c/e3a547e0-76ee-3471-975d-5e7db0222aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/250a5961-b5a2-4399-9c4d-4e71808f4a1c/250a5961-b5a2-4399-9c4d-4e71808f4a1c.crl

            X509v3 Authority Key Identifier:
                keyid:7D:D2:A0:2E:48:8E:EC:19:2C:3C:F0:CF:56:2F:31:DA:73:1B:D2:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/250a5961-b5a2-4399-9c4d-4e71808f4a1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.96.0/20
                  74.220.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:b1:f1:f1:42:19:7f:e0:9b:45:4e:7b:4b:e5:44:f8:69:
         a6:3f:d6:fe:45:3e:17:81:f5:5c:91:e7:b2:df:67:c9:f6:e3:
         4c:47:6a:74:f2:5e:23:c6:bf:46:5d:16:e2:d3:4a:fe:01:a2:
         5f:72:81:b8:59:3d:56:2e:37:36:e4:52:11:24:fe:42:0f:53:
         b9:f9:1a:1a:70:22:81:69:79:6b:56:cf:99:1f:92:76:12:06:
         7e:0a:e8:30:84:88:30:5f:2f:5a:42:d7:20:52:aa:e4:c9:75:
         32:af:6c:be:93:a4:30:a0:39:e4:ec:88:ad:1f:fb:1e:65:2a:
         84:62:4a:22:fd:7c:4e:f6:4f:82:9d:92:95:89:78:ab:f1:16:
         df:79:18:b5:eb:f6:5c:c8:00:f4:72:f8:73:83:51:d2:e0:3a:
         cf:a1:df:3f:c4:24:c6:f7:5d:db:ac:49:3c:59:11:9f:22:74:
         d2:97:17:fa:3b:cc:2e:64:3b:eb:a1:36:93:d9:35:84:a2:2e:
         93:a8:71:3b:18:72:3f:35:60:4e:da:e2:b4:61:95:c3:c0:15:
         47:03:a9:07:85:d2:a4:10:ce:77:34:82:01:42:59:bf:b0:e6:
         1a:ef:e2:4a:f9:08:44:08:b2:da:c5:41:f9:87:09:ed:16:8d:
         fe:02:1e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:26:06 2026 by rpki-client