Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5aca2be5-5ea7-3399-9f6e-824226ed21c7.roa
File:                     5aca2be5-5ea7-3399-9f6e-824226ed21c7.roa (raw, json)
Hash identifier:          MU2lcDuud6fsPO4a6NpJ11r6edFKeadDW1KtIdI0VGE=
Subject key identifier:   FD:B0:35:D6:EC:A8:23:56:B1:7D:F4:98:5D:90:EF:E0:4F:4C:AE:0F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F498866081203F63B1D8C2480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5aca2be5-5ea7-3399-9f6e-824226ed21c7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        64.105.74.0/23 maxlen: 24
                          64.105.98.0/23 maxlen: 24
                          64.105.110.0/23 maxlen: 24
                          64.105.126.0/23 maxlen: 24
                          64.105.128.0/22 maxlen: 24
                          64.105.134.0/23 maxlen: 24
                          64.105.154.0/23 maxlen: 24
                          64.105.160.0/23 maxlen: 24
                          64.105.164.0/22 maxlen: 24
                          64.105.168.0/22 maxlen: 24
                          64.105.174.0/23 maxlen: 24
                          64.105.176.0/23 maxlen: 24
                          64.105.180.0/22 maxlen: 24
                          64.105.184.0/22 maxlen: 24
                          64.105.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:66:08:12:03:f6:3b:1d:8c:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f698f1de-7732-4827-9266-09bc218bf28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:0e:a3:a3:98:33:2a:2c:1a:d3:25:13:2b:
                    30:11:9c:73:2a:c9:02:30:e6:4f:82:67:23:a3:65:
                    79:21:7b:b1:f3:2d:4c:1b:75:cb:8c:c1:f9:de:a7:
                    85:a8:3a:40:8c:38:38:d6:5a:10:de:6b:56:01:30:
                    c2:6f:49:a3:8f:ba:38:ad:7f:c7:13:be:1a:b5:90:
                    a1:c9:84:b6:b1:b6:eb:d9:05:2b:bf:c8:15:44:48:
                    e0:88:35:0b:2f:5a:1a:2b:fa:6c:76:14:c9:ba:0e:
                    c1:4e:93:87:77:5a:75:c4:0d:a5:e9:1e:a8:c1:3c:
                    56:20:ff:92:84:08:43:d9:e7:4b:c6:4a:9f:39:6e:
                    06:72:31:97:6f:1f:a8:cb:92:2e:74:fc:8e:3a:f1:
                    76:85:05:28:05:d1:86:ef:5a:dc:85:3a:bd:b1:28:
                    80:89:a9:a1:8e:01:64:9b:05:f9:14:c9:e7:59:2a:
                    06:30:23:d8:1e:2c:03:1d:cb:48:c0:0c:98:28:97:
                    df:d2:24:b2:09:87:f1:c0:46:46:48:81:8e:f5:d4:
                    7c:0b:4f:d6:5a:1b:50:3d:23:8f:7c:8c:92:11:7e:
                    d0:59:3a:4b:80:98:90:4e:5c:96:b2:7d:2a:b3:f9:
                    b8:c3:87:2a:6a:f5:95:1a:50:33:82:46:0a:77:2b:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B0:35:D6:EC:A8:23:56:B1:7D:F4:98:5D:90:EF:E0:4F:4C:AE:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5aca2be5-5ea7-3399-9f6e-824226ed21c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.105.74.0/23
                  64.105.98.0/23
                  64.105.110.0/23
                  64.105.126.0-64.105.131.255
                  64.105.134.0/23
                  64.105.154.0/23
                  64.105.160.0/23
                  64.105.164.0-64.105.171.255
                  64.105.174.0-64.105.177.255
                  64.105.180.0-64.105.187.255
                  64.105.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:31:e1:62:68:bf:58:a4:e9:a4:82:80:39:7d:01:7d:13:04:
         8d:cf:df:ff:a5:89:bd:67:15:ec:b6:66:c5:11:ca:c6:fb:6d:
         8a:b9:29:7b:1a:68:44:da:91:04:65:4b:6f:f5:0e:32:87:b0:
         39:aa:34:48:94:1b:8f:29:19:0c:45:67:09:e7:ac:91:1e:f0:
         df:28:f6:66:73:f2:44:d6:31:80:45:ad:c9:34:f6:a4:d0:20:
         ba:f5:ff:7f:ef:3b:5f:93:b1:d7:7f:ab:df:18:f1:7a:c3:57:
         89:65:07:07:4f:c0:d1:59:e3:87:47:f7:8e:7f:9b:da:f9:49:
         13:97:96:80:12:a0:b6:20:c0:2a:7f:7c:fb:14:58:56:14:0b:
         86:19:6f:d0:f0:b6:36:c7:ad:04:09:73:1c:d7:98:1e:8c:68:
         22:fd:26:dc:e3:0f:60:ef:53:ba:f6:c2:a5:a2:99:00:4b:18:
         f9:96:d0:d2:2b:2c:1c:60:e2:c8:80:60:55:ec:fc:33:82:d6:
         3b:bf:98:06:dd:cd:06:e4:ff:04:47:30:ad:dc:c2:9b:26:3d:
         4d:f5:24:f3:84:15:ee:85:86:a0:c7:0b:20:c2:48:05:a3:50:
         82:4e:b6:71:c8:ad:13:e9:d2:34:cc:96:6a:ff:dc:5e:f2:a7:
         3b:ea:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:11:25 2026 by rpki-client