Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/ecb03ccd-4052-3fc8-a695-fa9b25294560.roa
File:                     ecb03ccd-4052-3fc8-a695-fa9b25294560.roa (raw, json)
Hash identifier:          P/UAHBrdHN87uu7PscJkVI6XVa3OGzrMxY5CPz2Fe+g=
Subject key identifier:   22:46:0A:B0:8C:AC:5D:B0:20:A5:8F:14:BA:AB:55:3D:8F:A0:4E:54
Certificate issuer:       /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
Certificate serial:       010D0C9F4328584F63F815DBBB77F7DFC87ADC00
Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/ecb03ccd-4052-3fc8-a695-fa9b25294560.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     62695
IP address blocks:        208.64.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:15:db:bb:77:f7:df:c8:7a:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=b8936d6b-87ec-4c37-bc86-733d55039d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:76:e8:81:89:a7:f2:0d:04:7c:d7:28:b1:
                    31:0e:dd:95:4d:14:5f:88:8a:c5:24:be:a6:e8:66:
                    1e:38:91:ac:70:c8:ec:93:4f:73:8e:63:4c:d9:80:
                    7c:3d:1a:88:13:6c:e6:2b:a3:ac:11:b5:e6:88:8e:
                    ea:97:94:6c:16:92:6f:76:d7:cf:a5:af:ba:8d:4d:
                    1f:7d:8e:62:3e:45:ec:ca:0d:6b:e3:f3:a9:fc:da:
                    d6:1c:3b:9b:5d:1f:4c:3d:67:5f:5d:40:d8:2c:49:
                    ea:e1:ae:77:20:e3:3f:b4:f2:55:a9:ef:6b:62:57:
                    07:57:7d:c3:23:4f:7e:4c:bb:60:2d:71:4b:a5:14:
                    36:0c:fb:3e:00:79:c8:64:80:25:1b:b4:c3:e3:6a:
                    96:cb:3c:0a:ee:83:c7:ad:da:60:71:a3:50:ee:bc:
                    e1:c6:2d:62:5e:ed:7c:37:ea:61:ea:c4:1e:04:41:
                    d3:bc:ba:3a:18:82:58:fe:43:3c:1d:1c:2a:5d:e2:
                    f9:65:15:9e:c3:64:cf:bc:53:fc:29:bd:57:8e:2d:
                    1a:e2:c8:09:3f:56:a7:32:86:2b:f4:bc:76:19:42:
                    a8:57:34:77:40:93:37:d7:50:d8:e4:2c:c9:da:fe:
                    d2:4a:fa:dc:97:cd:c9:99:34:e4:a3:54:02:96:fe:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:46:0A:B0:8C:AC:5D:B0:20:A5:8F:14:BA:AB:55:3D:8F:A0:4E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/ecb03ccd-4052-3fc8-a695-fa9b25294560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:cf:2d:13:bf:58:ec:f9:28:60:b9:e1:a1:00:63:e1:38:b7:
         d6:ce:4d:60:05:16:6d:9e:90:29:ed:b8:12:c1:34:de:1a:08:
         10:61:47:be:73:ee:a0:59:56:8d:9d:6f:b4:81:a0:2d:e9:41:
         44:8b:d8:1d:1b:ef:77:b1:23:4e:00:e1:58:66:1b:b8:f7:6a:
         ef:37:ef:1e:88:ef:0f:53:e2:04:0f:be:ce:15:0e:78:7b:4f:
         5c:d4:f5:50:c2:7f:f9:4a:da:4c:3b:8f:03:24:a5:73:58:db:
         a7:24:66:ff:08:46:39:f3:ba:ee:4b:54:39:9c:bf:cf:51:08:
         cd:a2:91:cd:62:bb:96:af:6d:a1:d0:8f:02:6f:81:f6:a4:2c:
         3d:d9:d7:ce:8d:9b:5d:43:c0:ea:d0:2a:ef:5e:b8:a0:0d:ad:
         cb:46:57:cc:39:89:02:68:1d:5c:a3:d3:b8:1c:7a:9e:f8:16:
         1f:07:2f:5d:aa:18:2b:08:e4:67:8d:f3:28:3b:81:6e:88:5b:
         38:bb:67:4a:97:bd:a6:17:41:b2:b3:89:c8:84:79:83:54:6b:
         4b:fb:09:ca:36:4c:5f:d7:66:6b:28:98:37:6b:3e:de:be:12:
         b9:a5:72:7c:8f:78:e3:d5:e9:9e:70:9b:57:ab:9c:97:94:61:
         34:ad:70:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:20:14 2026 by rpki-client