Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b384de5d-6b03-3c5b-a596-de98b37120d0.roa
File:                     b384de5d-6b03-3c5b-a596-de98b37120d0.roa (raw, json)
Hash identifier:          U8Q88FkQ3G20Twyr3RwR4cuotybp3JMW52N6kpRIAMk=
Subject key identifier:   59:10:1E:0F:5D:F9:16:C7:A3:32:27:A5:6D:10:F5:1D:A3:72:6D:DC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F498B44FB16E7F41366562800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b384de5d-6b03-3c5b-a596-de98b37120d0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     5065
IP address blocks:        64.145.12.0/24 maxlen: 24
                          64.145.13.0/24 maxlen: 24
                          64.145.14.0/24 maxlen: 24
                          64.145.15.0/24 maxlen: 24
                          66.80.0.0/24 maxlen: 24
                          66.80.1.0/24 maxlen: 24
                          66.80.2.0/24 maxlen: 24
                          66.80.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:44:fb:16:e7:f4:13:66:56:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5f158fcb-5ef0-48fb-8956-d210889df0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:9f:b1:dc:2b:58:27:e9:86:93:82:84:74:
                    dc:52:71:42:a1:8c:b3:52:d6:79:40:c9:1d:16:2f:
                    d7:46:fd:ca:c2:d9:51:b0:41:a2:e0:6d:a2:62:32:
                    d2:90:aa:74:8a:2b:c9:9e:18:d2:33:30:e4:cb:9d:
                    65:0d:5d:8d:88:e9:1e:33:58:e0:c9:09:89:75:a2:
                    6d:b3:b7:0f:30:58:69:59:e6:f0:a3:12:5c:b9:bc:
                    7b:72:c6:73:f5:cf:8e:5e:3c:ce:79:d7:76:fc:fa:
                    43:b0:6f:12:1f:1a:bd:e9:73:42:8e:44:08:2b:8c:
                    1c:c8:26:4b:fe:29:18:bf:79:cf:51:e7:b9:1e:39:
                    0a:58:83:18:e1:fe:b4:90:a5:1a:71:54:fd:e7:11:
                    c9:74:4b:a0:6f:f6:c6:38:1c:c2:27:c2:2c:14:a6:
                    45:a6:9b:8f:3f:bb:46:1c:64:c2:ad:fd:db:1c:9e:
                    41:de:3d:8c:10:03:f4:fc:c1:00:d8:05:e4:77:0e:
                    cd:03:35:cd:09:28:a6:9f:74:90:c3:02:30:56:63:
                    25:21:12:12:d4:c3:4f:a3:49:67:5c:91:06:10:10:
                    b0:57:c4:f3:08:6d:4f:d6:2e:e3:99:1b:a0:38:f6:
                    b7:c0:37:a3:85:ef:16:6b:31:f9:74:8f:af:d9:13:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:10:1E:0F:5D:F9:16:C7:A3:32:27:A5:6D:10:F5:1D:A3:72:6D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b384de5d-6b03-3c5b-a596-de98b37120d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.12.0/22
                  66.80.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:68:8d:28:8b:02:71:c0:ae:36:20:4b:56:7c:dc:2e:b3:7d:
         ab:c2:47:9e:5f:a7:05:47:86:23:0d:f3:f9:53:85:62:12:bc:
         ad:31:1e:f5:02:7d:c6:1f:7a:eb:73:b0:50:8a:f0:d0:f8:2e:
         e2:3d:0b:23:ab:82:64:d5:ee:9c:33:1c:fd:2e:a4:6e:a7:79:
         48:6d:ea:2d:dc:27:09:54:73:98:e6:2e:81:91:66:b7:2b:d9:
         db:76:d1:a2:73:34:fc:21:0b:df:65:50:01:12:2a:1d:00:b4:
         54:aa:54:48:0e:f5:f2:66:ef:e9:3a:b4:70:16:bb:a1:f6:26:
         38:6b:2b:fd:29:b2:4c:42:05:2a:63:a0:4b:a9:ff:b2:54:ce:
         1d:35:42:7e:99:a6:a8:4e:25:78:b4:68:4d:62:ab:a1:e2:14:
         fa:f2:11:b3:62:64:f0:fa:dd:96:d8:4b:a6:9c:8b:b2:9e:fc:
         69:e0:cc:cb:78:bf:13:e4:17:4c:54:2c:38:23:84:8f:93:9c:
         5e:b6:5e:6d:61:2d:73:92:64:25:ba:0f:f5:ab:4c:62:ec:e8:
         c4:49:ad:ff:43:0e:4d:3c:bb:58:f4:7f:df:e7:a1:3e:63:46:
         a5:fc:9f:23:a2:1c:e0:8a:b3:04:12:2c:8d:4f:e7:9c:fd:ee:
         08:5e:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:51:38 2026 by rpki-client