Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b8d5cab3-b903-3f4a-8b6c-0b44cd2d46c4.roa
File:                     b8d5cab3-b903-3f4a-8b6c-0b44cd2d46c4.roa (raw, json)
Hash identifier:          DOudj8a0a6JkxM3+5xZqXQKPa4nr2YBOc/V5crqZnKE=
Subject key identifier:   AE:B9:FD:9B:C6:EA:63:8D:7D:23:25:C3:B9:72:C3:A7:2A:02:2C:BB
Certificate issuer:       /CN=b0586936-28a6-4bf2-9b25-bda26fb9b65e
Certificate serial:       010D0C9F4328584F497428EBEBE0AA3E3F254280
Authority key identifier: BB:65:59:CC:29:A1:14:F4:F2:9B:47:03:30:95:FD:C6:2E:48:7D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b8d5cab3-b903-3f4a-8b6c-0b44cd2d46c4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16608
IP address blocks:        64.187.64.0/20 maxlen: 24
                          64.187.81.0/24 maxlen: 24
                          64.187.82.0/23 maxlen: 24
                          64.187.84.0/22 maxlen: 24
                          64.187.88.0/22 maxlen: 24
                          64.187.92.0/23 maxlen: 24
                          64.187.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b0586936-28a6-4bf2-9b25-bda26fb9b65e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b0586936-28a6-4bf2-9b25-bda26fb9b65e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:28:eb:eb:e0:aa:3e:3f:25:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0586936-28a6-4bf2-9b25-bda26fb9b65e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4f6b9a46-7664-48a2-ab06-db64fcc0a893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:e3:f8:58:21:da:23:f2:0b:ee:47:b6:ad:
                    05:44:17:7c:3e:ad:1d:1a:30:0a:a9:db:96:d5:ad:
                    ab:82:32:f6:c1:47:40:71:39:2c:09:ca:4a:a7:be:
                    95:ca:e2:c0:6a:58:56:b2:de:99:87:87:48:d1:dc:
                    73:d8:00:68:9f:20:e3:6e:ed:6e:ff:5d:11:2d:c9:
                    c1:22:92:1e:a9:b1:06:9a:21:f9:aa:de:ce:da:87:
                    10:f9:b1:85:d2:09:3e:bd:14:2a:26:93:45:9f:73:
                    2c:00:f8:73:12:b3:10:0d:22:8b:7e:ce:c1:88:82:
                    78:99:dc:bc:7a:80:8d:ff:63:0c:c7:7b:a8:0f:20:
                    ea:d0:3a:92:60:c4:33:78:96:cc:f6:57:f7:eb:32:
                    19:17:f9:19:37:71:16:39:80:c2:a5:78:bf:67:0f:
                    f1:aa:8e:66:cd:46:a2:c8:0f:01:69:d8:a0:65:ee:
                    ca:7f:34:3d:d9:2e:71:51:af:0b:70:4f:07:b7:e7:
                    e8:80:b5:82:de:cd:30:14:da:29:45:c2:33:5c:a5:
                    a8:39:e4:4d:43:34:e7:7d:3c:d4:ea:47:83:ec:1f:
                    29:cc:85:ae:ad:d1:35:f4:66:4e:b2:17:c5:92:8a:
                    0c:05:9b:dd:45:81:12:fb:ef:5d:dc:88:7d:8f:ff:
                    7e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B9:FD:9B:C6:EA:63:8D:7D:23:25:C3:B9:72:C3:A7:2A:02:2C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b8d5cab3-b903-3f4a-8b6c-0b44cd2d46c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b0586936-28a6-4bf2-9b25-bda26fb9b65e.crl

            X509v3 Authority Key Identifier:
                keyid:BB:65:59:CC:29:A1:14:F4:F2:9B:47:03:30:95:FD:C6:2E:48:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.64.0/20
                  64.187.81.0-64.187.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:22:20:0b:d3:f8:a7:61:8e:9e:42:9d:7c:8a:67:d3:c3:11:
         4d:5c:4b:7c:3b:eb:24:b3:ea:bb:f5:b0:d0:03:04:a7:2b:ea:
         ac:60:2c:e3:ef:a1:65:25:e6:cc:40:a2:9c:c6:8c:ca:9a:65:
         fb:87:44:10:94:0b:34:8c:c2:21:88:60:4d:de:42:01:4f:da:
         a4:73:90:5d:d4:28:e3:c9:67:d9:53:88:fe:e6:38:b9:ab:e3:
         d8:0e:3c:0d:9c:06:a4:68:1a:97:a2:ac:f5:96:9b:39:fd:34:
         09:e4:6a:1b:5d:f6:f1:bb:84:43:e0:57:6e:71:70:5f:18:37:
         82:1b:9e:d0:20:bb:ca:ba:cf:cc:1c:1d:7a:48:f4:25:3f:d5:
         cf:ad:5a:73:07:ee:83:71:b6:53:22:46:30:b3:15:a0:f1:8c:
         67:d9:14:b3:1e:94:9d:5d:cb:01:f6:50:9b:21:94:e3:e9:ee:
         aa:0c:60:81:9d:5e:b8:a6:0e:0b:82:4c:b6:d7:29:9f:e9:7d:
         a9:d1:2c:4b:a0:b7:39:a5:20:98:e9:2f:ea:38:f3:8f:bd:11:
         77:5b:eb:db:9f:f0:3b:3a:0c:e8:4d:72:fe:b4:ee:6b:7f:7e:
         4c:f2:86:1a:c2:a4:42:42:32:99:0a:32:f8:5c:c2:ba:aa:46:
         fd:50:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:24:16 2026 by rpki-client