Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa
File:                     6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa (raw, json)
Hash identifier:          1PmUUZP5IMQZ/BvHqcMGLM6LRAXvp/uxuedn7l7x63U=
Subject key identifier:   36:3E:12:D6:AC:06:34:5C:BE:D7:33:90:0E:28:C1:3C:9C:5A:42:1F
Certificate issuer:       /CN=18a27bbf-900f-4a15-9ddb-8d30f013a375
Certificate serial:       010D0C9F4328584E921FA1E7E3E4AE3C88E62100
Authority key identifier: 6E:2F:AE:21:72:68:FB:98:6F:44:35:69:7D:53:7F:FB:62:B2:6C:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     32808
IP address blocks:        66.29.160.0/19 maxlen: 32
                          70.36.80.0/22 maxlen: 32
                          107.191.0.0/19 maxlen: 32
                          204.14.20.0/22 maxlen: 32
                          208.64.88.0/22 maxlen: 32
                          2604:7b80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/18a27bbf-900f-4a15-9ddb-8d30f013a375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/18a27bbf-900f-4a15-9ddb-8d30f013a375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a1:e7:e3:e4:ae:3c:88:e6:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a27bbf-900f-4a15-9ddb-8d30f013a375
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=812eb3d6-8187-4f7e-8946-e092e193fd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:11:c2:96:41:dc:fe:13:5e:71:32:03:e1:75:
                    88:ed:1f:b2:97:6c:8f:9f:48:89:a7:ec:6f:0a:74:
                    d6:fe:31:b5:07:ae:9b:28:60:96:08:fe:50:f1:c8:
                    ee:0c:b4:4b:6b:68:c5:44:dd:4b:cc:b3:2e:6b:3f:
                    20:55:61:cb:cd:ec:45:33:88:d0:fd:25:04:6c:96:
                    83:62:b7:b5:c5:7c:1b:d3:2d:0e:e4:16:ac:f0:ce:
                    2f:63:8a:51:83:02:ab:eb:c7:37:d8:40:9e:90:04:
                    24:b8:7c:84:90:58:77:83:52:57:42:d8:21:a6:3d:
                    47:14:e5:a8:f5:b2:fe:08:98:ab:63:28:c5:27:d2:
                    eb:79:93:75:1d:0d:8b:14:06:d1:dc:08:aa:d1:e5:
                    cb:0d:f6:82:82:1d:88:99:d6:44:32:8d:5f:af:c0:
                    a0:21:a1:55:e8:0f:e4:33:3f:06:5c:4b:54:0c:d3:
                    6c:cb:fe:6b:52:3c:0b:50:ba:6e:a1:59:c9:91:b0:
                    42:3f:c0:c5:d7:61:6c:50:d5:ba:85:d0:85:84:1a:
                    90:d3:28:4b:c3:c1:7c:a5:5c:f1:82:b8:a0:e1:02:
                    47:d5:5b:44:26:4f:3f:89:c1:46:77:53:71:22:f6:
                    86:43:ac:c0:e9:5b:b9:58:fd:4a:a4:b8:26:78:5d:
                    29:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3E:12:D6:AC:06:34:5C:BE:D7:33:90:0E:28:C1:3C:9C:5A:42:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/18a27bbf-900f-4a15-9ddb-8d30f013a375.crl

            X509v3 Authority Key Identifier:
                keyid:6E:2F:AE:21:72:68:FB:98:6F:44:35:69:7D:53:7F:FB:62:B2:6C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.29.160.0/19
                  70.36.80.0/22
                  107.191.0.0/19
                  204.14.20.0/22
                  208.64.88.0/22
                IPv6:
                  2604:7b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:90:31:76:2e:6d:40:4a:91:e1:67:d9:57:25:87:4a:2b:4f:
         40:b7:8e:d2:cb:7b:9d:37:1d:e4:8e:d7:e4:fb:bb:f2:08:5c:
         44:48:69:49:a3:e6:58:42:5a:c3:2e:6b:d1:5d:21:8c:bb:48:
         51:35:51:9c:0e:ec:18:a2:59:34:cf:ba:65:e1:1a:96:b0:47:
         eb:94:9c:20:ef:b6:ed:01:fb:7f:ef:36:f4:d9:fe:ca:cf:b9:
         fa:07:5d:d4:e2:0c:aa:6f:43:ca:19:5e:6c:13:18:00:48:cb:
         a9:80:ee:5c:d5:1b:5c:7e:76:28:14:f7:0a:63:a6:9c:ae:1b:
         e7:99:2a:b2:f1:90:de:77:c1:51:65:e8:69:9b:ad:9d:65:8a:
         a1:2d:74:92:27:b7:e4:0f:cd:f4:d3:aa:ec:57:d9:48:3a:1e:
         0d:77:4e:a5:32:9a:8f:49:4b:69:8d:8a:0d:a1:6d:86:62:94:
         a4:5f:05:32:de:91:cf:3a:93:71:fb:ab:f1:3b:06:31:f0:c5:
         c2:d9:d7:0c:7f:cd:bc:34:eb:a2:36:a2:f5:33:4e:14:13:09:
         87:b1:d7:64:49:aa:42:28:27:c1:32:f2:98:9c:56:e9:07:c9:
         d5:e4:27:47:e5:21:9a:0f:97:bd:bc:d7:7f:25:cc:5f:d6:e0:
         88:91:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:16 2026 by rpki-client