Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa
File:                     d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa (raw, json)
Hash identifier:          XFjO1klPqaNy8xn/sbA8AQvyXVQ6J4FUbIFhvfbgUv8=
Subject key identifier:   D2:0C:92:CB:4F:3A:4E:50:94:EA:3E:BE:4D:10:62:2D:17:8B:F6:2E
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584D32D4D5218163A4722B163A80
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     6079
IP address blocks:        67.214.178.0/24 maxlen: 24
                          74.80.157.0/24 maxlen: 24
                          74.80.165.0/24 maxlen: 24
                          74.80.174.0/24 maxlen: 24
                          74.80.177.0/24 maxlen: 24
                          74.80.178.0/24 maxlen: 24
                          206.212.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:d5:21:81:63:a4:72:2b:16:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=8960749e-9e6c-40dd-8e08-0579df9e5642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:09:65:34:90:0f:e0:bd:e0:3f:c3:38:96:
                    79:46:3e:a7:d9:9a:68:51:6e:e2:9c:e8:e3:52:f3:
                    aa:12:38:a8:cd:66:2f:8e:ab:40:27:8f:fa:35:d3:
                    4f:44:c4:03:43:b1:d8:b7:8b:03:23:80:23:90:e8:
                    0f:8c:42:8b:e3:e5:41:38:6e:7e:38:62:11:4f:50:
                    28:ad:83:29:c9:b6:a0:56:27:82:55:a8:4a:2d:c1:
                    0d:c6:52:a0:95:d7:8e:e1:87:fa:9b:cf:77:22:46:
                    10:b1:ce:c3:93:38:47:57:87:45:ba:6a:22:6d:60:
                    31:20:67:b8:93:e6:a3:06:c7:fb:cc:03:ac:c2:48:
                    1a:b1:11:ce:2b:e7:f7:ca:ee:04:f9:88:fd:af:6a:
                    9c:14:9c:b8:4c:bd:35:a1:31:d7:dd:00:77:a2:26:
                    cb:34:84:b2:19:58:56:2b:0d:17:bf:d2:aa:6f:2c:
                    76:3b:b4:d3:27:41:17:39:d3:fd:51:d3:c0:24:a2:
                    53:12:24:0c:04:6a:4e:e5:e5:00:74:6a:ab:f0:77:
                    60:84:c8:e9:d7:7a:d0:d0:30:4e:0b:b3:85:75:87:
                    4e:00:68:5b:88:2e:72:11:4e:68:dd:f6:2f:a5:ea:
                    60:77:92:eb:07:e0:25:b4:04:29:6d:41:3f:d6:f2:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0C:92:CB:4F:3A:4E:50:94:EA:3E:BE:4D:10:62:2D:17:8B:F6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.178.0/24
                  74.80.157.0/24
                  74.80.165.0/24
                  74.80.174.0/24
                  74.80.177.0-74.80.178.255
                  206.212.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:f0:2b:45:b4:d7:d3:e7:43:0b:95:cc:82:77:c1:3a:49:
         0b:7a:99:51:86:fe:e2:9f:29:7d:21:c2:50:ce:b4:94:f9:80:
         d7:c0:b6:8f:92:97:c1:7d:db:df:30:65:42:51:e1:b5:df:e8:
         96:51:55:60:74:99:31:a2:1e:5b:2d:81:88:f2:cc:b4:d8:2a:
         c6:41:d3:3c:fb:8f:e4:09:80:b3:51:3f:42:42:69:c0:91:16:
         d5:6d:95:50:4c:bd:30:8a:13:23:f8:17:b5:37:23:af:89:4b:
         35:0f:92:52:9a:43:49:1e:e2:1b:e8:3c:91:f9:e8:2a:ea:c2:
         26:c6:c3:cd:7e:b7:b2:80:73:35:7b:67:36:a8:2e:64:8e:ac:
         9b:0b:15:97:4e:ce:9e:2d:54:ce:4e:a0:83:69:a7:2b:ae:38:
         93:ef:dc:5c:4d:21:e3:a3:f1:c6:04:1a:84:d1:b7:9b:f0:69:
         12:1d:c6:2d:ef:72:96:6c:56:f7:fb:0b:37:cd:86:88:cd:b4:
         d1:48:c0:43:61:c4:ef:39:08:ce:3f:89:84:78:a4:9f:1e:da:
         ea:8b:43:2a:2a:f8:36:10:43:c8:45:0e:53:41:9a:dc:d7:f7:
         2a:b8:8c:c2:17:8f:a5:8d:96:5f:97:99:82:de:08:78:20:c8:
         96:9c:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:21 2026 by rpki-client