Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa
File:                     5a72f703-fbe8-361c-ba27-9625ee1622a2.roa (raw, json)
Hash identifier:          EJDWRFuPM2bVLaGC+y5lcoPW8hx1/c6R96D1DqVWnH8=
Subject key identifier:   60:D6:1C:27:C4:88:44:68:3B:8E:E1:62:A5:20:1C:3A:81:B4:03:56
Certificate issuer:       /CN=eeff816f-42ef-47a6-ba61-7075adb85329
Certificate serial:       010D0C9F4328584F612D6668C32A8E1B70482200
Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     393457
IP address blocks:        64.191.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:66:68:c3:2a:8e:1b:70:48:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=cc3f6826-6ff4-4583-974a-b876cf8671fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:e8:75:a8:41:bf:cb:3b:fd:58:cd:15:b5:
                    87:49:91:28:3e:54:73:4b:81:24:6f:02:40:c4:2c:
                    df:ce:34:c8:ab:9f:44:d3:2f:31:ea:02:ba:66:0f:
                    5a:1c:61:b7:75:5a:3f:dd:93:77:95:ae:cd:17:f2:
                    fb:3b:07:d9:e6:d8:c9:46:f5:d5:0d:94:c9:12:0a:
                    73:b2:fd:b4:c9:ab:ce:fc:b6:d6:5c:eb:8b:c2:ab:
                    a7:19:71:37:7c:13:15:98:cd:61:84:3d:46:03:a0:
                    5c:55:9d:33:e0:4e:6e:1b:05:3c:bb:be:96:9b:5b:
                    82:27:07:7c:61:aa:c1:01:9c:8b:79:aa:9c:c0:ad:
                    ec:b9:e5:3e:8c:f0:56:43:07:c4:0d:ce:74:f4:f1:
                    88:2f:1b:47:1c:be:f3:0c:30:81:e3:87:07:5a:cb:
                    bd:04:15:fc:14:68:51:29:1b:ef:a3:26:09:9b:0c:
                    72:96:c7:f7:39:e8:b1:0e:42:77:1a:65:87:29:c0:
                    82:d6:2f:6a:f6:70:41:f4:97:81:58:c4:ff:94:e5:
                    7c:07:25:94:c0:89:e8:d3:6a:69:ad:0d:c0:3d:21:
                    ec:d6:3c:cf:eb:2c:5e:58:5e:d4:71:64:4c:ef:ed:
                    6c:72:e2:73:4d:d3:40:98:cd:df:40:16:40:4c:ea:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D6:1C:27:C4:88:44:68:3B:8E:E1:62:A5:20:1C:3A:81:B4:03:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl

            X509v3 Authority Key Identifier:
                keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:4a:9f:9d:e8:a7:4c:e9:45:3c:bd:36:48:71:8e:99:f2:4a:
         d4:d1:a6:ff:1b:d9:85:1f:b3:c6:34:73:59:a3:72:d4:da:ec:
         c6:06:09:74:03:74:27:0c:75:a1:18:57:56:0f:cd:e6:51:e9:
         02:2a:1b:92:7c:5f:23:48:52:95:02:e0:c8:f5:1a:13:0b:a9:
         2d:76:94:24:e8:52:b4:b2:ff:33:55:39:34:3c:47:7c:dc:71:
         bc:1d:9e:b3:77:b7:e0:19:87:e3:e0:24:03:25:fc:7a:cd:8f:
         25:c7:00:ca:ec:8d:d6:32:aa:61:f8:79:e1:76:9c:c1:a4:6e:
         d5:77:00:ed:55:f2:0c:9e:1f:a1:fc:33:a7:a1:c6:6e:27:c2:
         c9:df:39:2e:89:98:a3:59:cb:bf:dc:de:43:de:82:55:e3:67:
         50:78:a1:e5:e3:5d:7d:61:d0:97:2a:b5:ff:79:b4:0e:63:a5:
         98:00:ff:95:b6:08:cf:a3:8f:d8:72:7d:dd:92:73:c5:89:09:
         0f:90:a9:7a:bb:73:ed:73:7c:e3:b1:aa:43:03:1f:e9:87:f4:
         c3:8c:7c:85:4e:49:81:08:06:a0:03:94:8c:80:45:b4:88:dc:
         ad:b7:bf:8d:9a:b8:38:de:4f:7b:84:03:3d:bd:dd:4b:29:11:
         cd:7a:8a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:46:52 2026 by rpki-client