Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa
File:                     be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa (raw, json)
Hash identifier:          9xZMz90q+qC+3E/AGDDD/92hZGF4cVSNabHr9UJCKTM=
Subject key identifier:   19:F4:E7:0E:EC:7E:7C:C2:C4:86:7F:EC:7D:BA:5F:8B:B2:06:03:F3
Certificate issuer:       /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
Certificate serial:       010D0C9F4328584F093CE6FFA8D6B97E1B162F80
Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     31849
IP address blocks:        67.213.128.0/21 maxlen: 24
                          104.219.20.0/22 maxlen: 24
                          162.212.96.0/22 maxlen: 24
                          199.30.104.0/22 maxlen: 24
                          199.102.56.0/22 maxlen: 24
                          2607:2a80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:e6:ff:a8:d6:b9:7e:1b:16:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=a61b9417-1597-4a3c-9c82-aac3190bd5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:17:42:54:d4:b2:be:32:2a:b9:fd:04:71:
                    ed:fb:f3:31:b0:f2:59:7e:b3:9d:90:43:33:e1:f7:
                    2d:13:34:f0:41:2d:3e:f8:b2:ea:c7:b5:c8:7b:ca:
                    76:74:21:0d:74:e2:71:56:3f:be:29:fc:a7:4c:d1:
                    ea:d9:2b:7f:ab:7a:ad:4c:34:b5:24:2f:98:ef:d0:
                    68:21:43:8a:98:38:cd:bb:f9:4e:b9:6f:5b:8b:f9:
                    41:f8:8c:8f:a2:d5:14:b1:24:44:a5:79:5c:fa:99:
                    9e:01:db:a4:fd:51:21:a2:0b:91:4a:16:64:83:6f:
                    8c:b8:56:56:55:9f:d4:1e:04:93:0a:f5:dc:48:86:
                    05:c6:da:25:de:f6:7c:44:37:7f:34:1a:5c:d8:f7:
                    64:f5:d8:16:c1:49:f5:9a:f4:fd:ce:66:3b:10:c5:
                    ec:3a:4d:4f:b0:23:50:2b:3a:e0:45:fa:e1:b7:bf:
                    e1:2c:94:35:13:26:80:89:07:e1:3d:05:76:42:81:
                    5b:e8:11:8a:8d:b2:af:34:d6:54:19:fe:82:a0:2a:
                    a8:4e:c4:0e:8a:06:ec:e3:e3:86:82:91:84:2d:6d:
                    09:7c:b6:a2:02:3e:1b:4f:68:2e:3e:e8:a1:7e:1a:
                    35:e0:d2:8f:e3:9e:ea:ce:34:bf:7e:6f:c5:7f:4b:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F4:E7:0E:EC:7E:7C:C2:C4:86:7F:EC:7D:BA:5F:8B:B2:06:03:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl

            X509v3 Authority Key Identifier:
                keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.128.0/21
                  104.219.20.0/22
                  162.212.96.0/22
                  199.30.104.0/22
                  199.102.56.0/22
                IPv6:
                  2607:2a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:50:60:5d:44:3d:a8:7c:90:7e:d8:b1:48:98:94:40:85:82:
         9e:17:06:6c:4c:33:41:74:68:51:ff:26:9e:b7:c5:60:5c:d0:
         30:34:dc:41:2e:ca:20:87:4e:10:10:bb:a6:4b:6b:8d:1c:c6:
         7f:a1:be:52:52:33:cc:5b:39:ce:4b:5e:2a:96:ac:15:de:9b:
         ce:f5:a9:2d:c6:1d:8b:9e:27:8f:19:4a:6d:48:3a:61:03:6c:
         ae:ea:bd:dd:3b:c3:42:99:05:de:49:db:d5:ac:c4:29:0f:e0:
         65:f0:9a:d4:af:ef:c5:b7:45:49:6f:72:eb:4c:21:48:72:63:
         8e:1a:63:ff:74:e6:17:68:11:b6:20:67:61:8f:ce:7c:f6:2d:
         ee:d1:ad:36:dc:2b:6a:ed:9a:cc:7c:1c:3b:31:c0:0a:b8:ba:
         d2:c0:38:3d:87:e1:86:10:ea:c6:ec:b6:64:84:ad:bf:c2:c6:
         32:71:2e:60:bc:16:5f:08:7d:0b:6e:32:a9:a2:08:93:17:81:
         95:8e:94:5d:21:ac:84:0e:0a:8c:99:72:5d:ab:c3:76:a9:bb:
         80:74:b3:da:72:70:7b:53:4a:b0:43:3a:35:9f:d9:58:b7:4c:
         9f:58:30:83:2c:54:7b:a8:d3:53:64:7f:81:dc:b9:7a:1f:33:
         c3:53:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:08:56 2026 by rpki-client