Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/8d569749-810b-3248-8989-6bc289ef12f5.roa
File:                     8d569749-810b-3248-8989-6bc289ef12f5.roa (raw, json)
Hash identifier:          GRAs4y/VOfh+IiqlFV43+nIGLle2zxQrNMVZ9ax1yN4=
Subject key identifier:   42:66:58:0F:3F:60:8F:55:2C:43:0C:E5:C8:D2:48:06:48:2E:54:AA
Certificate issuer:       /CN=63938b4d-d1ca-4f80-97cb-ec6ec0935c57
Certificate serial:       010D0C9F4328584F1F924C014D4405D78A8F05C0
Authority key identifier: 10:91:CF:80:A3:35:03:B4:12:28:DA:2B:02:AB:52:AB:BE:24:11:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/8d569749-810b-3248-8989-6bc289ef12f5.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     14363
IP address blocks:        64.6.0.0/20 maxlen: 24
                          64.239.96.0/21 maxlen: 24
                          69.161.33.0/24 maxlen: 24
                          69.161.42.0/23 maxlen: 24
                          74.206.40.0/21 maxlen: 24
                          108.161.64.0/21 maxlen: 24
                          173.233.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:4c:01:4d:44:05:d7:8a:8f:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63938b4d-d1ca-4f80-97cb-ec6ec0935c57
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=e7b0b0b9-7f52-49e9-a9c3-19604c0a9a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:51:79:09:b5:cc:e2:07:77:44:a6:d2:47:
                    3d:e6:1d:85:76:e2:e6:6a:ab:d1:38:83:ec:a2:ed:
                    ee:b5:e4:73:f4:17:9d:7f:72:7d:eb:21:49:75:2c:
                    6e:b5:5f:f9:ec:7f:00:78:d0:82:80:b5:3a:91:a6:
                    5d:49:37:53:1a:1b:40:4d:88:6a:e9:e6:33:e4:f1:
                    1e:f8:40:e3:e9:6b:eb:af:4e:c5:5a:a8:4c:59:42:
                    6a:10:a2:3a:b0:c2:8b:40:c5:26:47:50:cc:74:ed:
                    31:26:c1:e0:f0:fe:c8:ef:44:40:10:35:0c:21:48:
                    2b:3d:8e:6d:4c:e4:05:a9:c5:3c:22:dd:1a:fe:fb:
                    18:af:d5:c9:c4:50:73:12:c9:b9:72:07:47:63:3a:
                    41:8c:fa:f3:49:22:94:ba:3f:96:9b:3c:d4:55:cc:
                    fc:7a:9a:35:c3:db:94:7c:f4:3a:e2:ca:50:00:0e:
                    88:d2:4f:16:4f:6f:ad:d8:e7:79:e1:41:9d:1b:5a:
                    7c:4d:6d:81:12:b2:80:64:b3:4d:dd:24:9e:d6:27:
                    b4:e5:d1:75:6c:47:ef:3d:65:55:5e:5e:83:51:41:
                    60:51:14:ea:88:04:e8:da:c7:b4:29:b5:92:a9:7c:
                    95:86:31:5c:3d:ba:04:d4:81:9b:95:9e:ea:a4:72:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:66:58:0F:3F:60:8F:55:2C:43:0C:E5:C8:D2:48:06:48:2E:54:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/8d569749-810b-3248-8989-6bc289ef12f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.crl

            X509v3 Authority Key Identifier:
                keyid:10:91:CF:80:A3:35:03:B4:12:28:DA:2B:02:AB:52:AB:BE:24:11:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.0.0/20
                  64.239.96.0/21
                  69.161.33.0/24
                  69.161.42.0/23
                  74.206.40.0/21
                  108.161.64.0/21
                  173.233.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:39:50:2c:7c:fe:05:e7:ee:73:0b:a4:fe:e0:40:2a:67:8b:
         b7:28:89:b6:37:dd:87:af:21:b7:c5:73:46:95:43:71:54:96:
         cc:5f:00:27:9a:46:1c:ed:ad:ee:a9:ac:62:3c:8f:bd:c1:5d:
         9f:91:7b:43:9d:77:14:3d:a9:1b:a9:cd:26:ab:1c:48:9b:46:
         00:f8:4b:a7:6b:84:ed:33:f1:d7:e3:b8:64:8b:8c:49:61:88:
         74:fa:bc:1c:39:b7:d3:e0:b4:73:3c:34:03:44:a4:af:5c:0a:
         ad:6d:a0:d4:b2:2f:c5:6e:db:fe:8e:10:d0:d8:42:9e:1f:a3:
         b7:68:84:d3:71:06:f0:f8:0d:80:c6:c9:21:26:ac:45:ee:ff:
         b7:e1:90:fc:2c:1d:70:94:ab:6e:d6:ad:71:dc:ef:19:8b:a9:
         5d:c2:46:82:cb:72:aa:de:3f:5d:6a:25:3f:8f:14:01:5c:aa:
         76:54:e7:3a:44:2f:88:de:8d:69:ff:20:15:d2:9b:f3:4d:5e:
         4e:1a:a9:6d:b5:50:3d:b5:30:dc:58:87:97:67:cc:11:97:9a:
         9d:9d:f5:96:ef:d2:78:ba:7d:0a:29:35:6f:eb:ed:c3:93:62:
         6c:60:f2:ae:17:f7:1b:24:8e:af:c7:6b:88:0f:36:76:74:41:
         fa:a4:31:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:28:05 2026 by rpki-client