Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa
File:                     6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa (raw, json)
Hash identifier:          GA5oR0lG/M+UfkVP54EJUuyAz+5QkjJ9EIGUn5/KCbw=
Subject key identifier:   E2:B6:EE:49:05:0C:D2:35:3E:76:88:78:26:DD:0A:06:8B:60:D6:14
Certificate issuer:       /CN=18a27bbf-900f-4a15-9ddb-8d30f013a375
Certificate serial:       010D0C9F4328584B110C00FDA17CD6EAAE5EE900
Authority key identifier: 6E:2F:AE:21:72:68:FB:98:6F:44:35:69:7D:53:7F:FB:62:B2:6C:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     32808
IP address blocks:        66.29.160.0/19 maxlen: 32
                          70.36.80.0/22 maxlen: 32
                          107.191.0.0/19 maxlen: 32
                          204.14.20.0/22 maxlen: 32
                          208.64.88.0/22 maxlen: 32
                          2604:7b80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/18a27bbf-900f-4a15-9ddb-8d30f013a375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/18a27bbf-900f-4a15-9ddb-8d30f013a375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:00:fd:a1:7c:d6:ea:ae:5e:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a27bbf-900f-4a15-9ddb-8d30f013a375
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=bb7a59a1-31da-45d5-883f-ca524a4a551d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:4e:bb:09:d0:d2:20:c7:03:cc:40:d6:8f:
                    d6:50:db:57:1e:76:48:69:71:16:2e:ec:bf:0a:b7:
                    27:6e:7d:7b:ff:da:8d:a9:65:36:71:cd:04:c3:79:
                    d0:4f:d0:05:1f:86:b4:7a:7f:46:0b:81:86:2e:7b:
                    04:a0:c2:59:3d:e5:6c:92:36:58:fe:e3:26:4e:ce:
                    c3:d8:89:66:d3:35:b4:78:64:71:f7:7d:c6:8d:ae:
                    5c:d5:ca:9b:0c:5a:f1:79:5e:8c:0c:cd:13:1f:85:
                    8e:a7:90:c5:7f:86:ea:0e:15:68:19:d0:aa:86:f7:
                    39:8c:af:a1:94:e0:4a:0b:b7:52:96:97:f6:0a:39:
                    69:8a:08:73:fa:73:91:da:70:25:05:d2:33:65:8d:
                    03:9f:a8:6f:5e:9c:e5:7f:e0:08:e1:df:3e:7f:46:
                    fe:29:e3:96:d4:9a:4e:1a:30:17:ab:3a:e2:61:ae:
                    0d:6f:67:99:a0:b3:26:62:e4:27:96:fb:1b:74:e8:
                    69:5b:33:b4:4d:cc:f2:44:27:e3:9b:29:f0:0c:80:
                    03:04:89:a8:31:9c:3b:90:8f:00:03:f5:4d:95:87:
                    5f:46:6a:c1:ea:9f:fa:23:92:24:0c:24:86:b1:a4:
                    39:98:52:7c:fc:4e:ae:f7:da:51:ef:06:41:4e:5a:
                    39:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B6:EE:49:05:0C:D2:35:3E:76:88:78:26:DD:0A:06:8B:60:D6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/18a27bbf-900f-4a15-9ddb-8d30f013a375.crl

            X509v3 Authority Key Identifier:
                keyid:6E:2F:AE:21:72:68:FB:98:6F:44:35:69:7D:53:7F:FB:62:B2:6C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.29.160.0/19
                  70.36.80.0/22
                  107.191.0.0/19
                  204.14.20.0/22
                  208.64.88.0/22
                IPv6:
                  2604:7b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:3f:49:5b:c9:6e:fb:c8:9a:4f:cb:51:15:83:6e:a6:6a:f9:
         e7:55:04:79:d6:14:71:17:c0:57:e0:13:e4:e5:ec:ff:58:e6:
         f1:44:90:27:cf:fc:90:b1:af:73:db:11:c4:49:78:5b:32:5c:
         81:f1:dd:4d:26:a1:9e:1a:b1:61:93:80:eb:ee:5c:c2:96:b7:
         eb:4d:5a:62:17:d3:32:39:09:9a:0b:44:fc:29:43:ed:cf:06:
         73:38:38:f6:d7:54:9c:cf:2a:15:85:7c:6b:9d:56:44:84:e5:
         cb:89:14:45:0b:53:dd:27:d2:9b:a2:a9:2e:c2:41:e6:88:66:
         5f:55:d4:f0:7f:4f:8f:dd:46:87:8e:5d:7c:fb:ef:5d:51:6c:
         97:2f:5a:7b:31:b0:45:83:84:c1:05:29:e9:fc:ae:9f:19:fd:
         5e:2e:bf:d2:b3:4f:db:bd:19:3c:85:67:c0:42:66:a8:75:3a:
         77:f1:a7:29:2c:07:b6:95:e9:94:be:0e:74:ab:90:06:60:f3:
         4a:8c:b7:52:1b:74:c4:c1:98:5f:bb:69:64:53:90:cf:11:88:
         a3:1f:c7:59:1b:2d:5e:82:ad:f4:a8:95:59:97:9e:91:28:09:
         4e:0c:74:8b:5c:83:8e:1a:d7:46:f2:aa:58:5d:8f:3a:e1:fd:
         3c:2e:ef:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:08:02 2025 by rpki-client