Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/9e540039-127c-38b3-b90d-fe59445c0d0d.roa
File:                     9e540039-127c-38b3-b90d-fe59445c0d0d.roa (raw, json)
Hash identifier:          0mYVHyZN9WPo5PRddtHLfWa3mNeHWIXOxYrjD6a3EqA=
Subject key identifier:   57:EF:C4:6F:E1:DC:C7:6C:FE:25:7E:5B:BC:AB:8E:A0:2A:AA:87:90
Certificate issuer:       /CN=807e0353-894a-4214-89b5-40ce5ac7089f
Certificate serial:       010D0C9F4328584ED68802FCDC2B5D0176694D00
Authority key identifier: FD:E4:AC:FE:9C:7E:84:7E:48:69:97:5C:79:14:E2:56:5B:BB:BB:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/9e540039-127c-38b3-b90d-fe59445c0d0d.roa
Signing time:             Fri 14 Aug 2026 21:05:33 +0000
ROA not before:           Fri 14 Aug 2026 21:05:33 +0000
ROA not after:            Thu 12 Nov 2026 22:05:33 +0000
asID:                     400494
IP address blocks:        64.70.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:88:02:fc:dc:2b:5d:01:76:69:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807e0353-894a-4214-89b5-40ce5ac7089f
        Validity
            Not Before: Aug 14 21:05:33 2026 GMT
            Not After : Nov 12 22:05:33 2026 GMT
        Subject: CN=a536022f-ab1d-4c80-a784-cc10900d2042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:6c:b5:bb:13:69:0c:0f:45:a9:00:f4:a5:
                    be:af:98:17:4a:0b:b9:06:b2:ac:c8:1d:d2:c2:db:
                    a8:b6:90:19:5f:cc:5c:3b:46:b7:e4:0b:ab:62:46:
                    32:2b:ff:5a:39:6d:6c:4d:66:bf:e0:94:05:7d:6d:
                    fd:73:e0:fe:9b:6c:6d:46:ea:62:60:e0:66:65:2a:
                    23:2c:d8:c5:ec:e7:c1:ea:53:04:20:fd:ea:2f:54:
                    1d:53:12:0b:48:f9:97:90:bf:05:fc:4c:51:b6:e7:
                    e9:fb:47:70:25:12:a1:83:1f:9b:4c:fd:bf:36:ee:
                    eb:75:ab:e4:85:bc:e2:12:05:c9:1b:c5:bf:b6:32:
                    e5:c6:c9:c0:8c:20:9d:41:ba:3a:2e:b2:8d:2d:12:
                    3c:92:a0:1d:83:be:05:ca:99:22:ec:d5:58:ae:5c:
                    dc:ab:b4:0f:96:17:1d:83:8e:f3:79:09:42:86:df:
                    3e:b7:e3:0d:7c:ef:d4:77:97:b8:ae:23:3c:40:dc:
                    f4:57:01:d1:23:fb:19:26:b9:de:73:ad:f1:8c:e9:
                    b3:25:74:39:8c:11:8c:50:ca:8b:c5:57:2e:ec:a7:
                    5a:07:85:8d:78:f4:c9:59:c3:8e:a1:76:f8:d4:79:
                    df:8d:a7:a9:0a:04:d2:a3:af:6f:45:1d:8e:0f:c0:
                    c8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EF:C4:6F:E1:DC:C7:6C:FE:25:7E:5B:BC:AB:8E:A0:2A:AA:87:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/9e540039-127c-38b3-b90d-fe59445c0d0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.crl

            X509v3 Authority Key Identifier:
                keyid:FD:E4:AC:FE:9C:7E:84:7E:48:69:97:5C:79:14:E2:56:5B:BB:BB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.70.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d8:2a:f5:a7:2b:ae:1f:09:b1:6f:bf:e4:58:78:42:ac:31:
         75:6c:69:27:b7:4e:03:78:71:61:31:2b:a9:17:62:3c:53:7b:
         99:6a:ec:af:d8:44:38:5a:55:01:45:4f:1a:42:94:2c:c3:2a:
         46:e2:94:7f:52:c6:73:ce:88:5b:7a:94:53:f8:29:f4:a2:76:
         72:a7:8e:c8:95:16:38:01:45:80:07:8f:c0:18:6c:23:fc:9a:
         a2:6e:5d:00:25:6b:c5:04:8d:09:df:f6:52:2f:9b:37:78:35:
         6d:16:c9:2f:c1:90:69:31:59:e0:96:d8:30:5d:9a:58:71:dc:
         f9:f4:72:f0:8b:dd:f6:d8:ec:c2:f0:ab:f2:7b:f1:14:cf:65:
         b4:3f:3f:ef:62:74:4a:7d:2a:cb:0a:6a:2a:7a:79:57:e6:2b:
         11:6f:5f:64:78:78:b5:6c:b6:65:8e:20:a3:64:fd:82:e7:54:
         9d:e8:23:b5:97:16:4c:fe:e0:01:34:fe:14:5a:85:b0:21:5b:
         1f:3f:b4:a6:7e:89:74:46:5b:77:be:ce:25:c7:98:c3:4f:96:
         d2:24:ff:be:ec:48:0c:06:15:86:b8:d6:05:50:bb:b6:52:82:
         01:71:89:23:4d:0c:a5:2a:50:76:1f:b4:4a:ff:93:c1:05:26:
         1c:b0:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:23:25 2026 by rpki-client