Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
File:                     385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa (raw, json)
Hash identifier:          GuD4cVLRQKRBLpfr/QORhKi2PR0phZBQj95JvyHAowI=
Subject key identifier:   43:46:E3:10:4B:AB:12:00:DE:A9:A1:DC:D2:9D:37:D1:41:98:0E:D1
Certificate issuer:       /CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
Certificate serial:       010D0C9F4328584F497593F274287311405A0580
Authority key identifier: 39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396226
IP address blocks:        66.146.226.0/23 maxlen: 24
                          148.59.145.0/24 maxlen: 24
                          173.231.64.0/23 maxlen: 24
                          173.231.68.0/22 maxlen: 24
                          199.193.59.0/24 maxlen: 24
                          200.50.128.0/21 maxlen: 24
                          209.142.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:93:f2:74:28:73:11:40:5a:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5c369745-edca-4f75-b27d-196e059b11d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:8f:00:0f:4c:f4:ed:ad:9e:4d:5c:4e:e4:
                    c1:2e:ea:48:36:13:2f:14:0c:ac:0c:f0:cb:8a:81:
                    9b:59:8f:f8:2a:37:14:b7:f7:88:13:2c:27:52:25:
                    29:aa:13:31:16:46:bd:89:aa:59:25:8a:32:3a:7d:
                    24:a9:a6:1a:4b:e4:4e:a3:43:fc:e4:94:32:ca:51:
                    a6:1f:4d:e0:6d:0d:5a:62:d2:93:96:58:19:d4:ea:
                    8b:3a:5f:05:ff:77:ec:bf:bf:85:75:63:99:43:87:
                    05:6a:a1:a7:18:52:56:77:79:79:65:4c:fb:20:91:
                    37:49:67:99:64:44:6e:d2:27:d3:0f:a1:a5:8f:fb:
                    70:5c:7f:fc:f0:35:50:dc:f1:73:e9:a5:58:3b:ee:
                    31:8a:e7:17:23:b2:8d:72:39:ec:b3:aa:8a:9c:e7:
                    6b:29:9d:75:6e:cb:aa:b0:31:cc:0d:62:ab:05:ae:
                    b4:20:60:88:e1:a4:5c:25:d4:83:6b:54:dd:89:7e:
                    d9:12:b7:59:16:72:4f:e3:b1:63:86:c7:fc:47:71:
                    2c:43:cf:b7:e0:5b:58:98:a7:cf:e5:e5:92:ba:39:
                    56:94:f0:44:69:5e:f7:95:68:16:42:16:fe:cf:c0:
                    00:fb:fe:ac:67:0e:7d:ce:7b:2c:fa:e7:43:70:f6:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:46:E3:10:4B:AB:12:00:DE:A9:A1:DC:D2:9D:37:D1:41:98:0E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl

            X509v3 Authority Key Identifier:
                keyid:39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.226.0/23
                  148.59.145.0/24
                  173.231.64.0/23
                  173.231.68.0/22
                  199.193.59.0/24
                  200.50.128.0/21
                  209.142.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6d:ea:c8:e1:f6:30:1f:da:09:7a:c7:58:13:0c:4f:ac:72:
         50:de:47:d0:d0:58:44:27:a0:4b:61:58:42:e3:c2:7e:45:02:
         60:54:93:e1:13:a8:7b:0d:c9:c6:b1:6c:97:df:3b:ff:13:7f:
         f6:1c:69:df:88:b3:53:ad:2c:c6:96:d0:c8:f8:7a:fa:b0:8b:
         1d:45:01:ea:fb:96:23:8d:49:0e:54:c1:a4:9a:b2:86:bc:b9:
         31:aa:c7:e5:ee:f8:90:ea:6a:4e:03:2e:98:98:22:1d:cc:56:
         7d:87:ab:6f:e9:9f:9b:39:ba:8a:fa:17:50:50:56:70:b4:03:
         96:49:71:95:0b:1e:61:a6:26:1b:c7:49:e0:5b:fa:9a:fa:28:
         07:80:05:0d:4a:6c:45:de:6c:51:b9:0d:6b:a5:af:0b:97:dc:
         d8:6f:b4:7a:49:21:b7:25:77:88:d7:a8:7d:a3:08:a3:6e:cd:
         34:cd:99:8a:85:8a:b8:d4:c9:d3:6f:13:98:81:08:ac:df:6d:
         98:03:cc:94:d7:b1:df:d4:03:67:ba:2c:5e:01:e7:73:bc:a3:
         e2:d6:28:87:86:7f:83:c0:62:12:7d:14:34:f5:3a:66:78:b2:
         97:95:a0:55:c5:41:0f:c8:9d:9b:91:53:0d:1a:c9:dc:63:a7:
         e5:81:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:54:57 2026 by rpki-client