Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/49d6ad56-16a6-333c-8ac4-74f44b58b6d5.roa
File:                     49d6ad56-16a6-333c-8ac4-74f44b58b6d5.roa (raw, json)
Hash identifier:          reZJ+hbaO3canyg79c7zfufYoQVhTqsr7tytoX6GEFU=
Subject key identifier:   BF:39:E5:DE:48:31:AB:03:E5:FD:03:C0:17:39:A6:36:06:3C:DA:20
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584F19FCF9323B1A7DA0B2ABD3A0
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/49d6ad56-16a6-333c-8ac4-74f44b58b6d5.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     22351
IP address blocks:        64.88.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:f9:32:3b:1a:7d:a0:b2:ab:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=278fc120-4964-426d-a496-7ec118155427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:b7:b4:fd:2b:d8:53:2d:c0:d9:d3:1c:b9:
                    b6:8f:7f:17:07:fe:b6:83:40:8a:22:5c:51:7a:9f:
                    d8:bf:bb:3c:be:51:4f:21:df:4e:98:a6:29:87:1c:
                    3e:1d:21:79:62:81:35:d3:6d:61:f9:da:99:02:e0:
                    34:cc:79:0b:33:0e:f4:d7:57:15:56:82:04:07:ac:
                    21:2e:a6:6c:ec:a3:7a:d5:29:11:1c:4a:07:f1:d6:
                    f0:f7:5d:a1:07:7e:61:88:51:bd:79:a8:5a:06:60:
                    5a:48:07:13:a4:d8:0f:60:5a:f9:a0:e8:0f:87:10:
                    6d:68:02:8f:bf:9a:69:a9:6c:0e:94:5c:e3:56:0f:
                    3c:58:30:56:95:e1:ab:1d:60:51:57:3a:ec:18:f0:
                    a7:16:52:2c:61:3c:06:e2:a2:bf:cd:84:aa:94:7a:
                    50:43:d3:91:00:08:c7:3f:47:61:67:a2:2c:8d:f0:
                    cf:f0:5f:5c:0f:e5:61:64:3f:ff:df:19:3b:0a:88:
                    73:a3:d8:5d:fe:1b:03:ed:48:b6:72:99:df:0b:84:
                    73:46:fd:6e:fd:9c:ce:a1:dc:8e:6b:70:4a:7f:ea:
                    1d:dc:07:b8:44:91:da:d8:f6:45:11:bf:4b:44:38:
                    1b:00:52:6e:6c:da:be:63:2b:b5:3f:a6:f7:c3:51:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:39:E5:DE:48:31:AB:03:E5:FD:03:C0:17:39:A6:36:06:3C:DA:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/49d6ad56-16a6-333c-8ac4-74f44b58b6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:26:09:34:bd:a2:60:5c:0e:96:fc:e6:ff:8a:49:7e:e9:ca:
         cf:1f:cf:3f:72:bf:88:66:ae:c2:b1:94:1a:5d:a9:31:cf:ac:
         3c:8e:5e:a2:94:2f:b2:ce:25:a1:61:fb:c9:aa:f3:36:27:bb:
         89:4f:12:40:5b:1f:57:48:a2:f6:32:42:12:7f:49:5c:38:74:
         c5:9f:43:00:a7:85:ed:35:92:02:29:d3:8a:f9:76:78:38:26:
         fa:bb:10:36:79:30:65:7c:68:a2:ed:6c:16:d6:2c:88:44:32:
         11:58:b7:20:e4:89:ab:66:62:c7:4e:d3:e9:47:75:52:92:1a:
         d9:52:33:f5:4d:03:e1:1f:fa:80:eb:d5:a3:60:d1:3a:a4:e7:
         5b:70:f6:8b:af:b7:7e:ee:fd:21:e8:30:31:ba:47:aa:9e:d9:
         20:c3:2e:a1:f2:ce:27:b4:08:ab:de:da:e9:86:13:68:db:c1:
         1b:0d:09:2b:02:18:0d:e8:66:4a:80:cc:19:ee:09:2b:6f:b5:
         9a:a8:28:e5:e1:df:a8:8f:e5:2c:7c:1e:4f:0b:8f:15:3a:ce:
         6d:4c:35:0d:51:e0:39:01:d6:29:5d:1f:14:da:fe:5b:ee:b4:
         af:fc:9c:70:51:c0:6c:1d:80:08:85:1a:1f:18:d1:6e:ec:b3:
         cf:34:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:00:18 2026 by rpki-client