Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
File:                     f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa (raw, json)
Hash identifier:          mD/1Mw4e2C3WkMzk3s2y4eIB3x4QcJxelM0V4TsWPXs=
Subject key identifier:   95:A1:C6:CE:1F:85:9D:62:63:D9:EB:76:64:90:CD:36:72:FC:E5:E2
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F4328584F4972FAF19902282705625500
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     210110
IP address blocks:        23.105.192.0/19 maxlen: 24
                          23.106.128.0/19 maxlen: 24
                          23.252.96.0/20 maxlen: 24
                          45.62.96.0/19 maxlen: 24
                          45.78.0.0/18 maxlen: 24
                          66.112.208.0/20 maxlen: 24
                          67.209.176.0/20 maxlen: 24
                          74.121.148.0/22 maxlen: 24
                          104.128.80.0/20 maxlen: 24
                          104.160.32.0/20 maxlen: 24
                          104.194.64.0/19 maxlen: 24
                          104.224.128.0/18 maxlen: 24
                          107.182.176.0/20 maxlen: 24
                          138.128.192.0/19 maxlen: 24
                          144.168.56.0/21 maxlen: 24
                          162.211.224.0/21 maxlen: 24
                          192.243.112.0/20 maxlen: 24
                          198.35.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:fa:f1:99:02:28:27:05:62:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7750661b-c5d9-49d7-81b9-c1c45c03feed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:ea:fa:09:8d:15:5f:f5:40:6f:7b:17:84:
                    dc:d1:73:1e:85:41:5c:19:bd:0a:cd:19:5f:e9:3a:
                    24:5f:42:58:72:5e:e5:f6:fa:56:6c:4a:d9:81:f8:
                    cc:4f:37:7c:15:53:cd:5d:01:aa:0a:ce:c8:c8:44:
                    c1:0f:04:84:56:ca:6e:51:51:b9:80:41:0a:61:33:
                    7a:f5:6c:1e:25:92:1c:d8:62:48:80:aa:ae:01:11:
                    4a:9c:28:39:96:a3:76:26:25:bf:56:1e:9a:a8:52:
                    6a:dd:d5:05:47:b0:93:8d:77:f0:2c:5f:69:30:5e:
                    24:49:43:b1:c7:eb:59:e5:a9:fd:ec:5f:5d:45:23:
                    3e:29:40:63:40:35:a1:31:30:00:76:18:1c:ef:5c:
                    37:98:07:1c:80:ba:22:e5:54:fa:16:0a:9e:5c:2b:
                    a2:6b:30:43:1a:f8:60:1d:fa:aa:b3:cc:0c:1c:6d:
                    90:61:b3:93:f1:4b:d2:82:d3:0c:f2:f2:15:a4:4e:
                    60:49:58:7c:eb:6e:33:88:4d:fb:ae:b1:91:9d:eb:
                    9d:21:02:3d:9f:2b:08:cd:1a:bb:69:fd:8e:db:6a:
                    39:ce:ef:1a:e4:78:ed:88:be:a0:1b:54:e6:12:74:
                    5d:6b:cd:6d:e6:a7:bc:0a:87:e6:a6:38:71:22:a0:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A1:C6:CE:1F:85:9D:62:63:D9:EB:76:64:90:CD:36:72:FC:E5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.192.0/19
                  23.106.128.0/19
                  23.252.96.0/20
                  45.62.96.0/19
                  45.78.0.0/18
                  66.112.208.0/20
                  67.209.176.0/20
                  74.121.148.0/22
                  104.128.80.0/20
                  104.160.32.0/20
                  104.194.64.0/19
                  104.224.128.0/18
                  107.182.176.0/20
                  138.128.192.0/19
                  144.168.56.0/21
                  162.211.224.0/21
                  192.243.112.0/20
                  198.35.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a4:0f:24:eb:09:ac:93:3e:ff:dd:85:8a:5b:cf:fb:49:ab:
         e3:75:57:13:62:cc:a5:b7:35:93:1a:5b:0c:78:27:70:0c:74:
         34:17:db:1d:3a:1d:66:5c:70:2b:e6:0e:f0:6c:fa:b8:de:1a:
         9e:c8:7d:01:c9:27:0b:3f:4f:fc:6a:48:3b:bf:81:fc:63:bb:
         69:56:1b:10:fe:3f:3e:f4:32:cf:64:a9:61:c3:1d:ee:27:16:
         02:0f:12:10:4e:67:9c:85:11:56:83:69:17:7e:9d:e7:ba:24:
         5b:e7:16:ad:08:d3:e0:e9:de:2d:66:b4:ee:a5:46:94:6d:ec:
         b7:b8:47:33:c8:25:fa:d5:43:21:8c:19:c7:5c:25:24:e7:b1:
         98:9b:c7:a2:d9:10:b0:75:ca:db:c9:3a:e6:b7:c3:cb:eb:3c:
         a7:87:24:86:7c:f0:50:69:c2:7a:3b:78:b5:c4:08:74:07:94:
         b2:9f:f1:d7:8e:db:3c:e5:74:58:a4:09:ab:ed:d5:46:ae:7b:
         9e:62:4b:06:a4:c7:51:54:77:8d:a9:32:11:02:6f:81:71:d5:
         b1:ce:fe:ea:52:1e:e2:72:74:90:7a:1a:32:ff:2a:87:a8:8e:
         bb:e3:62:cf:33:1b:6e:b2:2e:78:57:c9:a1:23:cd:8d:04:b8:
         3c:08:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:54:42 2026 by rpki-client