Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e73ce00b-03d6-351c-8489-cd1ce4651731.roa
File:                     e73ce00b-03d6-351c-8489-cd1ce4651731.roa (raw, json)
Hash identifier:          LYElJvxDAZbVTABrkcQOb4odic4fvy9NP7l0DERDnPo=
Subject key identifier:   CB:B8:25:65:62:D3:FD:10:36:AC:1E:0F:87:DF:DE:C0:EB:56:E4:39
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584EDC91DC07F5EF7FDBEAD1455C
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e73ce00b-03d6-351c-8489-cd1ce4651731.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     198949
IP address blocks:        64.150.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:dc:07:f5:ef:7f:db:ea:d1:45:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=3b62720a-8fbd-49c0-bdef-b159657e3f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:c0:36:a6:7d:ec:4f:a4:d1:94:d6:7b:7c:
                    ef:0d:42:e5:ce:83:57:e6:a0:57:c0:0a:9d:02:a8:
                    11:64:2b:21:65:8a:1e:f9:e7:e4:40:a7:61:7a:89:
                    3e:de:21:de:fe:f5:e8:3a:3a:02:39:4e:52:be:a8:
                    63:aa:65:a7:c9:70:fc:f3:1a:37:c2:70:be:e1:69:
                    b5:23:9f:e3:9c:3f:09:cf:5a:ee:99:69:c0:0c:07:
                    69:7a:76:0e:03:02:a6:90:a2:c8:a6:28:db:d6:72:
                    d7:c6:e3:eb:82:c9:d5:f0:01:ee:74:37:cd:27:2b:
                    e2:27:d8:ad:f9:5b:6d:3d:94:44:a3:d2:1a:08:07:
                    23:54:c4:29:98:77:32:43:01:48:a4:2d:54:6d:ea:
                    62:1f:7e:f9:77:07:17:b4:5f:af:dd:dc:e0:9a:8b:
                    fa:e8:02:77:93:e9:30:ce:62:4b:10:43:8b:f7:d4:
                    fe:44:73:bd:5f:e0:f6:fe:be:8b:36:cd:e4:38:1a:
                    ec:d5:ee:ff:b0:82:ad:ad:92:db:86:5a:38:b7:a1:
                    f2:06:31:47:81:bc:34:56:d2:56:cd:2b:ef:aa:f5:
                    ed:d5:3c:35:b6:f4:53:75:f2:c3:38:29:ce:11:82:
                    f0:0a:35:f2:15:52:b1:f8:04:45:0b:89:7f:f3:38:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B8:25:65:62:D3:FD:10:36:AC:1E:0F:87:DF:DE:C0:EB:56:E4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e73ce00b-03d6-351c-8489-cd1ce4651731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.150.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:11:ec:4e:08:26:3b:d5:8d:c7:56:fd:2f:7f:94:04:db:7b:
         68:ad:10:ea:8f:5a:d6:2c:24:44:e3:a8:f5:20:0c:c3:59:60:
         24:e7:f3:e2:d6:6a:27:79:cf:37:dd:39:84:11:48:f3:db:40:
         da:c8:53:a1:64:95:39:55:30:6d:82:21:e7:99:cf:36:58:5d:
         f4:21:12:17:62:c3:80:cd:32:6d:8f:7b:56:98:d0:08:1d:41:
         4f:c5:0b:5c:ac:40:7f:e5:ab:38:46:f5:a6:af:3b:68:ff:6d:
         94:b0:9d:46:08:66:53:aa:94:60:2e:6c:32:1f:ee:7f:b0:01:
         f5:da:81:91:3e:af:bd:08:e5:76:a4:47:bf:96:d8:8f:0f:2a:
         f9:fe:4a:75:dc:ec:fe:f3:79:d2:69:65:b0:f3:ac:48:3b:b0:
         ef:82:43:3e:38:b5:a6:de:69:31:1f:80:30:44:93:60:3e:d3:
         73:ed:fc:f2:4d:80:29:cf:a3:e7:52:53:39:34:87:81:e5:f0:
         11:a3:56:57:23:b1:cc:15:c4:be:22:6d:ec:dc:5c:25:1c:d6:
         91:9b:8c:d1:0c:28:6e:d1:26:dc:be:c2:d4:4c:18:0d:ce:27:
         19:9d:17:e5:14:45:7e:8b:8c:fb:a0:87:f8:af:fb:f2:a1:44:
         83:3e:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:45:25 2026 by rpki-client