Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0506839b-7bd0-317e-9d0b-2962f87aa814.roa
File:                     0506839b-7bd0-317e-9d0b-2962f87aa814.roa (raw, json)
Hash identifier:          PS0CNZdS9iaiLs54y/tIYGdw1Hw1GF6L80kswxlpIQ8=
Subject key identifier:   D3:31:E7:94:F0:08:17:C5:9C:3D:08:8C:20:9E:B7:70:A9:F2:CC:19
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D19B4D8F7DCDEF6DC2D0729A0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0506839b-7bd0-317e-9d0b-2962f87aa814.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     7459
IP address blocks:        64.8.192.0/19 maxlen: 24
                          64.32.128.0/20 maxlen: 24
                          64.32.192.0/18 maxlen: 24
                          64.105.64.0/21 maxlen: 24
                          64.105.76.0/22 maxlen: 24
                          64.139.16.0/20 maxlen: 24
                          66.80.8.0/21 maxlen: 24
                          66.80.48.0/21 maxlen: 24
                          66.80.104.0/21 maxlen: 24
                          66.80.136.0/21 maxlen: 24
                          66.80.144.0/20 maxlen: 24
                          66.80.160.0/21 maxlen: 24
                          66.80.176.0/20 maxlen: 24
                          67.102.224.0/20 maxlen: 24
                          69.3.192.0/20 maxlen: 24
                          207.145.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:d8:f7:dc:de:f6:dc:2d:07:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=4342b396-0bee-440f-a317-1ea8d9bd677b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ee:9b:b3:f8:cc:bd:33:0f:0f:78:4d:7f:57:
                    1f:83:77:68:ab:f5:5d:4a:da:60:0c:80:c6:56:56:
                    42:e1:ff:80:c6:2b:82:5b:e7:99:66:be:de:98:b4:
                    0b:6b:98:4c:b7:ee:99:4b:40:47:fe:cf:9c:10:a6:
                    9e:05:02:f0:01:36:b0:6b:3e:6d:e7:fc:1c:3a:bd:
                    1e:24:bf:bb:9f:2e:bf:66:da:3a:07:fd:6d:64:2d:
                    1e:69:88:d8:79:42:b5:7e:3f:85:9c:69:d8:e8:d2:
                    f4:57:90:28:4f:28:00:1c:2a:9e:5c:28:a3:48:76:
                    0c:d5:98:41:93:42:07:bc:db:fb:d2:2c:81:b5:62:
                    d4:c0:36:b4:bb:f1:98:f9:f7:51:8d:cd:71:77:50:
                    08:3d:87:ff:0a:15:d2:08:93:b4:05:dc:39:1b:1d:
                    bd:fc:c5:6d:71:79:fc:ce:6e:2a:15:18:ae:51:50:
                    ab:52:dc:0a:67:49:6d:9a:03:3e:16:42:7c:22:78:
                    3f:84:94:70:7d:82:15:28:5d:0e:95:e0:93:69:6a:
                    cd:bb:a0:25:bb:87:73:af:c3:81:ed:d2:5e:1d:e5:
                    dd:4b:8e:14:fd:79:12:07:e9:4d:54:8b:75:1d:c7:
                    ca:60:79:a6:25:ac:7e:c9:32:d7:1a:e6:26:92:3c:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:31:E7:94:F0:08:17:C5:9C:3D:08:8C:20:9E:B7:70:A9:F2:CC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0506839b-7bd0-317e-9d0b-2962f87aa814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.8.192.0/19
                  64.32.128.0/20
                  64.32.192.0/18
                  64.105.64.0/21
                  64.105.76.0/22
                  64.139.16.0/20
                  66.80.8.0/21
                  66.80.48.0/21
                  66.80.104.0/21
                  66.80.136.0-66.80.167.255
                  66.80.176.0/20
                  67.102.224.0/20
                  69.3.192.0/20
                  207.145.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:0d:d2:c0:28:5d:eb:dc:90:4b:d4:b9:4e:d2:fa:ad:5d:a3:
         73:af:a1:9d:6f:0d:a1:85:50:23:0e:43:31:39:a2:72:10:36:
         6e:6c:fe:30:7d:fb:c3:70:07:a9:8b:f2:7d:23:01:c0:bb:7d:
         48:33:f0:cd:de:fb:4d:e1:8e:20:a0:6b:24:92:bb:15:01:70:
         50:64:7f:d0:5f:b7:da:2f:f5:21:19:3b:a9:d3:8d:bf:e3:42:
         e0:f8:39:18:f4:74:c6:4f:86:52:f8:53:63:32:93:3e:55:b2:
         4c:34:c7:a1:e8:09:83:ae:67:c5:bb:92:4e:c7:33:20:d5:5a:
         b9:b7:6d:fc:6a:98:a9:e9:6d:8f:f2:a4:35:39:a3:e7:ca:0d:
         24:90:92:ff:c5:48:7c:60:8d:03:80:86:9c:4d:bc:48:d7:11:
         20:c1:89:b3:60:5e:f1:b3:5d:2d:fa:43:1c:06:cb:46:92:eb:
         9d:ba:9d:ad:db:d6:28:55:6f:8f:ba:1e:51:f7:42:ec:f6:58:
         0f:8f:76:53:bd:9b:dd:6e:09:3e:8b:45:e3:cc:80:26:07:b7:
         48:94:7c:ab:c7:54:a9:11:ff:a1:75:eb:69:7b:1b:5e:79:71:
         6d:d9:20:fe:37:dc:4f:70:ae:6a:8d:bf:8a:c4:f0:bc:99:83:
         d6:c1:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:20 2026 by rpki-client