Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd5d1b36-ecf8-3a8e-b842-7b339cc641ae.roa
File:                     dd5d1b36-ecf8-3a8e-b842-7b339cc641ae.roa (raw, json)
Hash identifier:          4h3yMTpbC6UlkCeaDIyeo1uxqBPW46rVAzSlIGqOkiI=
Subject key identifier:   EB:A4:0A:14:C6:70:C7:D5:7D:C9:D8:6B:D3:68:13:9E:76:F5:8C:D5
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DBBA06D93893B4C883886F680
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd5d1b36-ecf8-3a8e-b842-7b339cc641ae.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     7029
IP address blocks:        64.32.152.0/21 maxlen: 24
                          64.50.136.0/21 maxlen: 24
                          64.145.128.0/18 maxlen: 24
                          64.145.192.0/18 maxlen: 24
                          64.248.0.0/18 maxlen: 24
                          64.248.64.0/18 maxlen: 24
                          64.248.128.0/18 maxlen: 24
                          64.248.192.0/18 maxlen: 24
                          64.249.0.0/18 maxlen: 24
                          64.249.64.0/18 maxlen: 24
                          64.249.128.0/18 maxlen: 24
                          64.249.192.0/18 maxlen: 24
                          66.17.72.0/21 maxlen: 24
                          66.200.0.0/18 maxlen: 24
                          66.200.64.0/18 maxlen: 24
                          66.200.128.0/18 maxlen: 24
                          66.200.192.0/18 maxlen: 24
                          74.3.0.0/18 maxlen: 24
                          74.3.64.0/18 maxlen: 24
                          205.214.32.0/20 maxlen: 24
                          206.40.192.0/20 maxlen: 24
                          206.253.0.0/20 maxlen: 24
                          208.41.0.0/18 maxlen: 24
                          208.41.64.0/18 maxlen: 24
                          208.41.128.0/18 maxlen: 24
                          208.41.192.0/18 maxlen: 24
                          216.151.224.0/20 maxlen: 24
                          216.184.128.0/18 maxlen: 24
                          216.184.192.0/18 maxlen: 24
                          216.224.0.0/19 maxlen: 24
                          216.224.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:6d:93:89:3b:4c:88:38:86:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=edade654-1ce9-4884-bd6f-e2ce0fe1cb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:22:a7:02:f5:f5:83:74:8e:36:f4:98:7c:
                    be:25:a7:6b:3a:81:53:19:c3:66:7d:29:c1:5e:2d:
                    5c:70:4a:a7:2a:f5:36:72:12:89:5e:a2:ea:65:bf:
                    fe:2f:55:13:a8:e6:b4:d5:08:9d:2d:28:e4:d0:11:
                    9a:f2:90:6f:f0:35:fa:42:1a:25:ed:02:f1:a7:9c:
                    47:9b:e3:0e:fe:1a:d1:fd:e2:30:59:71:ee:26:a3:
                    22:9e:fc:54:ec:db:ad:11:c2:27:c9:71:54:fc:2b:
                    07:f4:38:e4:35:09:34:6b:ca:47:37:b5:9e:80:a3:
                    ec:d2:a4:e3:11:60:38:1e:35:1a:17:6d:0a:14:6b:
                    93:5f:90:64:8c:8c:b6:6b:c4:32:fe:57:01:b6:2d:
                    41:a9:0a:96:1b:97:9a:4f:34:73:ef:cd:51:a3:6e:
                    8e:ca:fb:70:2e:a2:b2:8d:e2:78:9a:9a:29:55:64:
                    98:58:b3:55:ad:04:37:8c:73:d0:6c:d1:7a:bc:e2:
                    67:fc:03:91:7e:3a:c8:8c:56:77:87:8c:2c:16:9b:
                    6b:08:53:6f:86:79:c7:e2:9f:d1:f2:80:f6:a5:54:
                    40:b4:9a:46:95:72:8e:e3:09:e9:69:c3:12:bb:bd:
                    d4:d1:44:54:82:ce:a0:c7:63:0b:b6:55:c2:12:60:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A4:0A:14:C6:70:C7:D5:7D:C9:D8:6B:D3:68:13:9E:76:F5:8C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd5d1b36-ecf8-3a8e-b842-7b339cc641ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.152.0/21
                  64.50.136.0/21
                  64.145.128.0/17
                  64.248.0.0/15
                  66.17.72.0/21
                  66.200.0.0/16
                  74.3.0.0/17
                  205.214.32.0/20
                  206.40.192.0/20
                  206.253.0.0/20
                  208.41.0.0/16
                  216.151.224.0/20
                  216.184.128.0/17
                  216.224.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:2a:8c:96:21:c8:86:cb:66:10:13:03:18:30:5a:0c:17:91:
         e9:18:77:28:76:d9:e8:02:79:db:c7:a6:f7:28:6d:83:1f:23:
         36:1c:53:5d:bf:10:bd:95:92:62:ae:95:8c:c2:b2:47:e9:f8:
         2b:9f:70:b6:09:27:06:70:f3:22:dd:10:e4:8b:e6:ae:d6:f3:
         73:a1:0b:58:55:59:03:7c:5f:09:85:9a:d4:3d:cf:6a:db:91:
         8c:60:c5:48:81:20:a5:b9:76:ac:0c:f4:f2:37:20:ad:08:f1:
         b1:ef:af:b6:f6:73:8a:1b:b2:45:be:0a:35:2e:b9:6d:f7:3d:
         84:0b:3a:7a:63:d3:f6:27:88:98:c7:d1:d9:b5:59:df:86:fe:
         70:88:87:9d:b5:55:16:bf:f7:7f:e2:c1:33:2b:b6:c6:03:d1:
         68:fc:4f:1b:69:3d:e7:bf:3e:75:9d:ce:16:b9:d6:e4:40:ee:
         70:6a:54:af:eb:f6:91:f7:c7:82:fd:29:65:5f:fd:51:61:4a:
         e2:15:f3:d5:22:ea:e4:42:65:b2:5a:45:52:bb:0e:9b:01:98:
         8b:a6:67:a5:8d:47:75:2d:cb:08:7f:0c:0b:4f:2a:d2:b2:01:
         65:75:1d:2a:fd:2a:69:6c:5d:52:cb:34:00:eb:38:aa:14:40:
         51:92:ce:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:07:06 2026 by rpki-client