Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3fe2a65a-7945-30f6-8525-be5e0e78cd0f.roa
File:                     3fe2a65a-7945-30f6-8525-be5e0e78cd0f.roa (raw, json)
Hash identifier:          +aPohPseYQAzTrZodBILeWcccddSxwvMM7zhRlO/LD4=
Subject key identifier:   40:CE:0D:CB:74:BF:46:D0:6A:7E:71:06:E6:FD:A6:AB:03:2B:88:3C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F49894C613E11F87E3A1ABF40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3fe2a65a-7945-30f6-8525-be5e0e78cd0f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        74.82.112.0/20 maxlen: 24
                          74.211.128.0/18 maxlen: 24
                          74.211.192.0/19 maxlen: 24
                          74.211.224.0/21 maxlen: 24
                          74.211.240.0/20 maxlen: 24
                          155.229.8.0/21 maxlen: 24
                          155.229.24.0/21 maxlen: 24
                          155.229.32.0/20 maxlen: 24
                          155.229.56.0/21 maxlen: 24
                          155.229.64.0/21 maxlen: 24
                          155.229.104.0/21 maxlen: 24
                          155.229.112.0/20 maxlen: 24
                          155.229.224.0/20 maxlen: 24
                          205.179.128.0/18 maxlen: 24
                          205.179.192.0/20 maxlen: 24
                          205.179.224.0/20 maxlen: 24
                          206.135.128.0/20 maxlen: 24
                          206.135.192.0/19 maxlen: 24
                          206.217.104.0/21 maxlen: 24
                          206.217.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:4c:61:3e:11:f8:7e:3a:1a:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=86921800-7a0b-4110-a9c6-11df7f4abeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:0b:1a:b3:d2:0c:2a:85:be:a8:1d:54:2a:
                    70:31:9f:36:56:2f:9d:ba:75:94:7d:17:c6:43:09:
                    fa:ce:10:c1:a0:01:b9:72:63:9c:c5:ad:f1:91:7b:
                    8c:92:56:09:53:6e:04:6f:0f:73:53:c4:4a:fc:e1:
                    4e:12:4f:a6:c9:f6:85:52:79:3d:ab:d4:29:85:2a:
                    07:01:d0:38:db:3f:dd:8b:23:f0:7f:37:5b:dc:f7:
                    52:51:c2:b2:16:bf:fd:c2:7d:a0:a5:6b:fa:bf:f3:
                    5f:e4:78:81:1b:7d:69:61:7c:3a:aa:36:62:6d:a1:
                    16:ed:ec:dd:fd:e8:c0:cf:6d:2b:81:36:80:7b:c3:
                    5e:47:68:56:b7:39:80:61:4a:04:5b:a8:8d:4b:f9:
                    e9:e3:35:2d:c1:f2:c0:75:b7:0e:12:37:8b:98:e0:
                    a9:bc:d2:a1:64:2a:84:cc:dd:8d:9d:c4:3c:df:20:
                    7e:9a:05:c2:ca:64:e8:13:fa:28:96:25:bc:d2:2c:
                    6c:43:42:94:c1:93:66:ea:69:2e:b9:45:a3:e7:66:
                    71:08:66:32:19:5d:4a:db:43:58:27:a3:17:86:32:
                    d9:6f:67:d1:62:e3:51:59:d7:97:98:dd:8d:89:53:
                    e4:28:d2:54:59:91:61:0e:a0:e0:3c:94:c8:d8:19:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CE:0D:CB:74:BF:46:D0:6A:7E:71:06:E6:FD:A6:AB:03:2B:88:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3fe2a65a-7945-30f6-8525-be5e0e78cd0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.112.0/20
                  74.211.128.0-74.211.231.255
                  74.211.240.0/20
                  155.229.8.0/21
                  155.229.24.0-155.229.47.255
                  155.229.56.0-155.229.71.255
                  155.229.104.0-155.229.127.255
                  155.229.224.0/20
                  205.179.128.0-205.179.207.255
                  205.179.224.0/20
                  206.135.128.0/20
                  206.135.192.0/19
                  206.217.104.0-206.217.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b3:bf:37:24:07:86:b3:94:ac:95:01:e1:72:ef:a3:b9:6e:
         d3:1d:9a:c1:bc:82:34:f0:b5:a6:75:6f:11:43:5c:c8:4c:60:
         85:e6:0a:cf:86:c1:ac:07:ff:b2:9e:d1:19:dc:ed:de:cc:35:
         dc:75:5b:7d:bb:28:60:b7:c8:df:45:e5:80:d3:8d:2e:84:10:
         cb:83:f5:5e:5f:52:ea:c9:7b:79:79:ad:7a:bc:c9:08:1d:4a:
         8b:4a:ac:a5:13:1d:9b:1d:0d:09:c8:e4:22:ce:98:8a:ee:a0:
         35:61:c6:d1:cd:dd:e5:69:94:17:34:66:89:cf:33:a9:41:22:
         89:1e:fb:47:ef:eb:b7:7b:a8:fe:e9:7d:bb:6a:ac:8a:78:48:
         93:22:b0:e3:b9:aa:1c:96:56:d7:33:de:31:fd:c4:a4:f9:04:
         af:a7:cf:d4:74:67:6a:4f:81:3c:ff:82:3a:6c:98:ec:b4:a5:
         81:de:f8:8b:39:4e:96:cf:c3:f1:11:59:3e:55:27:cc:c3:f7:
         df:c1:0f:b9:dc:a9:77:3d:9b:40:1c:c8:99:5e:0e:b4:58:9d:
         89:61:30:fb:cd:fa:38:16:16:31:31:56:dd:d8:36:73:19:e7:
         d6:e1:9b:35:de:da:ac:a3:ae:59:ab:25:f2:6f:3f:6a:ba:c5:
         4a:29:67:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:58:00 2026 by rpki-client