Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa
File:                     a3abfaf3-64a7-328a-ad03-ba37201c413d.roa (raw, json)
Hash identifier:          +VNWBXbCZKhhRXsDGWy3X++vvBfssu0BqNzUaLLTJj0=
Subject key identifier:   11:BD:D3:A5:07:58:B0:A1:26:C9:21:8B:98:5D:91:64:9B:4F:D6:F1
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584F2D87B75DA9304E99073A7A00
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     803
IP address blocks:        64.110.192.0/18 maxlen: 18
                          64.201.192.0/19 maxlen: 19
                          67.225.0.0/17 maxlen: 17
                          68.69.192.0/19 maxlen: 19
                          69.11.0.0/17 maxlen: 17
                          71.17.0.0/16 maxlen: 16
                          74.113.12.0/22 maxlen: 22
                          2604:1e80::/32 maxlen: 32
                          2607:f4a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:b7:5d:a9:30:4e:99:07:3a:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=dcde0ac8-0bc2-4d3b-a21a-8faeb84109c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:4d:ff:c0:cf:de:ef:e1:83:2d:6a:a4:11:
                    36:20:e1:50:49:08:e3:b6:f0:e2:e1:5a:e7:a6:18:
                    2a:32:6e:a5:3f:13:96:d6:87:f0:42:01:9f:ae:48:
                    8a:f2:94:7e:da:4d:8c:39:ac:02:0f:48:25:c5:8d:
                    ed:73:df:b5:e6:a6:18:5b:fd:b0:67:12:81:c2:66:
                    30:45:5e:76:18:a5:47:47:84:36:c0:70:24:e5:75:
                    55:79:e1:81:f2:b9:23:32:c2:98:1a:69:51:54:a4:
                    fa:43:05:89:80:bf:8c:d8:36:f1:8d:dd:a3:47:c5:
                    20:16:50:62:9e:0f:6a:90:09:d8:a6:ca:08:e1:dd:
                    f9:1f:72:f5:03:bf:03:86:48:85:f6:f3:04:0f:c7:
                    92:43:ec:36:84:f6:cd:dc:9b:aa:5a:a4:a1:9b:ad:
                    58:b2:04:6c:45:c2:4b:61:6b:d1:c9:21:df:4a:f8:
                    6c:54:d5:cb:29:02:96:e3:5d:59:fd:a8:35:4f:86:
                    17:9d:73:f8:74:41:14:73:d5:ea:9d:7c:88:09:5d:
                    00:f7:87:74:9d:09:a4:2b:13:bd:92:e3:49:9c:e6:
                    b8:85:01:25:10:8f:11:9d:03:6d:6f:fc:7f:5c:26:
                    6e:74:7b:c9:fb:d3:f4:8d:8c:72:4a:d8:cc:45:b3:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BD:D3:A5:07:58:B0:A1:26:C9:21:8B:98:5D:91:64:9B:4F:D6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.192.0/18
                  64.201.192.0/19
                  67.225.0.0/17
                  68.69.192.0/19
                  69.11.0.0/17
                  71.17.0.0/16
                  74.113.12.0/22
                IPv6:
                  2604:1e80::/32
                  2607:f4a8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d1:b2:b1:2f:36:18:72:c3:d2:6a:eb:1c:30:78:68:24:80:
         b8:ce:ac:f6:38:72:9c:98:0a:77:a9:70:77:fb:31:ec:33:dc:
         0e:0e:cf:75:e3:48:54:3f:e6:63:01:90:b1:3b:ff:9b:d8:b9:
         23:f9:48:45:e6:a3:f8:ce:b6:4c:d5:8b:68:8a:c4:78:bd:16:
         85:d2:28:5a:d4:c0:67:ec:fb:23:9f:57:1a:9e:79:25:85:06:
         04:bc:9b:ba:dc:6e:93:a8:b2:4d:68:fb:90:a1:0e:6b:09:46:
         1a:cc:e4:b0:e2:ae:bb:c8:19:e2:1f:13:43:a8:94:68:9b:cf:
         18:41:45:e3:a2:ff:c3:4c:07:2e:60:f0:ec:33:64:3c:ed:72:
         e9:31:0e:fa:e1:2a:71:a7:97:2b:9e:62:10:ec:5e:f7:a5:4b:
         60:d2:03:15:1f:85:03:67:c8:ee:15:f3:5b:a8:eb:6e:c4:ef:
         f8:4f:19:86:37:f0:04:5d:c7:ba:22:d7:6b:33:c7:c9:32:09:
         a9:73:39:04:69:f0:bd:d5:02:3a:ac:20:9a:27:41:9f:90:02:
         cd:7b:43:ee:04:cb:32:ef:91:3f:54:c5:ee:2a:b8:e0:e5:ae:
         fd:b6:b0:0d:22:54:07:29:a8:4b:24:06:90:cb:27:4e:23:d7:
         fb:12:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:03:16 2026 by rpki-client