Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/e89af216-578f-3c6f-a210-0db1bf082023.roa
File:                     e89af216-578f-3c6f-a210-0db1bf082023.roa (raw, json)
Hash identifier:          MQ971D0qMKt7fNlE70gS4BELOz3TMukX9Kbv4E79YjM=
Subject key identifier:   7C:67:81:AC:77:13:49:63:BD:5A:FB:E7:6E:9E:A1:8A:AD:68:17:62
Certificate issuer:       /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial:       010D0C9F4328584F216FD180A592B4978783FE50
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/e89af216-578f-3c6f-a210-0db1bf082023.roa
Signing time:             Thu 10 Sep 2026 17:02:26 +0000
ROA not before:           Thu 10 Sep 2026 17:02:26 +0000
ROA not after:            Wed 04 Nov 2026 21:26:04 +0000
asID:                     6939
IP address blocks:        64.74.117.0/24 maxlen: 24
                          64.74.120.0/24 maxlen: 24
                          64.74.123.0/24 maxlen: 24
                          64.74.124.0/23 maxlen: 24
                          64.95.62.0/23 maxlen: 24
                          64.95.64.0/23 maxlen: 24
                          69.25.90.0/23 maxlen: 24
                          209.191.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:21:6f:d1:80:a5:92:b4:97:87:83:fe:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
        Validity
            Not Before: Sep 10 17:02:26 2026 GMT
            Not After : Nov  4 21:26:04 2026 GMT
        Subject: CN=c3114a14-a4cc-452c-80ab-5bfe14ee4a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:48:75:c3:b5:bd:b6:8d:30:87:74:99:83:fb:
                    d9:a5:cd:55:78:6d:27:a0:cb:c0:f8:d7:62:b0:3f:
                    39:ae:1c:63:12:fc:27:07:a6:99:64:ab:27:f6:26:
                    ef:c2:c4:aa:4e:be:55:08:73:d2:9e:18:c0:1e:22:
                    3c:f2:62:40:7c:7e:61:ba:57:1a:8b:5a:dc:7b:76:
                    98:4f:09:0b:cc:d0:e1:90:85:0a:3f:70:c1:44:e2:
                    d1:60:47:cd:8b:de:34:be:3b:61:cc:6e:50:cb:31:
                    7a:df:69:ca:ac:91:bd:6f:7f:ff:89:4e:1f:74:1c:
                    f4:7a:32:a9:09:9c:3a:d0:4c:57:58:4b:c4:8c:61:
                    27:11:ea:31:1b:dd:9a:04:58:57:ed:10:39:39:fa:
                    54:40:f0:d7:2f:09:b9:c7:22:d2:03:6e:a4:fb:3f:
                    f3:6a:8f:30:ef:de:c9:0d:dc:1f:1a:06:f3:db:01:
                    83:24:9a:b0:f8:fd:2b:b7:11:9e:ba:59:c2:6f:ff:
                    3f:d3:6e:a3:94:16:57:0f:da:bc:43:51:91:c2:38:
                    a6:2f:4c:26:d6:d1:1d:a5:4f:dd:e6:b4:75:c4:f2:
                    e9:1c:9a:30:d5:4a:e3:d6:5f:c5:0f:1e:af:4c:9c:
                    0d:d3:d0:e1:57:54:3c:42:c3:0b:40:6d:a0:54:05:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:67:81:AC:77:13:49:63:BD:5A:FB:E7:6E:9E:A1:8A:AD:68:17:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/e89af216-578f-3c6f-a210-0db1bf082023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl

            X509v3 Authority Key Identifier:
                keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.74.117.0/24
                  64.74.120.0/24
                  64.74.123.0-64.74.125.255
                  64.95.62.0-64.95.65.255
                  69.25.90.0/23
                  209.191.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:17:a0:1f:7d:1f:50:b8:91:e6:4b:35:92:da:46:79:7b:31:
         fa:2a:10:72:6e:7a:e1:f9:60:f7:fa:c1:b7:32:fa:a1:ee:03:
         e1:0a:c1:21:f3:c3:00:e0:e0:91:fa:fe:46:c7:6a:ed:1e:59:
         23:7a:07:92:bf:0d:7d:50:b5:27:f8:f7:4f:8f:73:71:1f:45:
         06:80:52:72:56:62:df:36:0e:e4:7d:b2:cb:5f:e1:78:84:07:
         09:41:92:74:c4:73:3e:8b:5e:0c:fe:90:c4:3f:af:3b:7a:1d:
         19:09:98:d1:f3:20:04:5d:2b:a1:34:6b:6e:a6:3c:c7:69:c5:
         ce:71:0b:d6:22:0c:32:13:cd:99:e3:2b:78:04:51:e4:7a:66:
         3a:c3:0d:73:52:e0:25:1b:d2:fa:76:58:ba:71:9e:30:6f:e2:
         9b:9d:36:84:5d:8d:d8:36:6e:ed:8d:b3:0b:bc:c0:e1:e0:86:
         28:fb:b2:c5:68:99:08:5b:5a:7c:3c:02:04:d2:a3:25:a1:ac:
         72:82:a7:50:94:61:2a:0a:00:7d:f2:54:03:20:5a:62:79:1a:
         48:b4:41:8d:02:ea:05:89:67:68:e9:07:1a:32:7c:6d:49:65:
         d7:c9:da:8d:a9:fa:59:82:fe:f2:2c:42:cb:45:b6:c3:a2:d1:
         99:b1:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:16:57 2026 by rpki-client