Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/ffe3db9c-1256-3195-9b36-bd1807335dec.roa
File:                     ffe3db9c-1256-3195-9b36-bd1807335dec.roa (raw, json)
Hash identifier:          jbazJQg+d/AUZgMAg/XLVfs0jv31TnYQxSkxBCBlktY=
Subject key identifier:   E5:62:31:F6:84:20:31:6F:C8:55:2C:58:85:8A:C9:A3:DE:8E:11:90
Certificate issuer:       /CN=807e0353-894a-4214-89b5-40ce5ac7089f
Certificate serial:       010D0C9F4328584EA792343741235C1910D20B80
Authority key identifier: FD:E4:AC:FE:9C:7E:84:7E:48:69:97:5C:79:14:E2:56:5B:BB:BB:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/ffe3db9c-1256-3195-9b36-bd1807335dec.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400494
IP address blocks:        64.70.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:34:37:41:23:5c:19:10:d2:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807e0353-894a-4214-89b5-40ce5ac7089f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=615b17c1-ec05-4e1d-9a52-6639351ded49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:ea:a1:ad:1d:41:ed:39:ed:45:11:36:2f:
                    34:ff:84:66:0b:9d:d6:fa:33:dc:1d:8a:0a:9c:f8:
                    19:49:80:f3:2b:a3:9f:ce:b6:6f:3b:ee:42:4a:9a:
                    de:65:92:14:8d:b2:27:67:e5:ae:b4:f5:3c:ce:37:
                    cf:55:0a:fb:c2:5a:ed:38:90:e2:9e:11:6c:a2:0d:
                    ac:8b:4d:f9:3d:67:44:99:09:5a:33:01:1e:dc:39:
                    da:6c:6f:7c:a9:b7:d4:53:a1:0e:4e:39:0d:51:3f:
                    0f:39:7a:de:38:3d:94:31:8a:e5:d7:68:f9:dc:92:
                    47:09:b4:d8:b8:16:5b:85:97:ae:af:45:71:50:4a:
                    15:5f:89:2b:2c:16:4f:1d:a4:ea:9b:51:4b:03:06:
                    c1:78:75:76:99:db:9e:81:8e:bd:35:94:04:8a:eb:
                    30:a3:06:5d:7b:fa:61:a6:2a:ff:a7:d7:21:fa:b8:
                    6b:6d:91:21:a0:21:8b:08:82:15:af:ec:82:30:5b:
                    ee:48:41:2e:52:a9:30:82:f8:ca:28:a1:d3:0c:20:
                    53:85:37:87:92:b0:92:67:36:b0:e9:ae:d3:d7:9d:
                    1f:4b:e6:88:da:4c:c8:a4:2a:26:68:71:27:d3:f7:
                    2a:4a:2a:3f:c8:d1:7e:9c:18:2e:db:7c:9f:20:c6:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:62:31:F6:84:20:31:6F:C8:55:2C:58:85:8A:C9:A3:DE:8E:11:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/ffe3db9c-1256-3195-9b36-bd1807335dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.crl

            X509v3 Authority Key Identifier:
                keyid:FD:E4:AC:FE:9C:7E:84:7E:48:69:97:5C:79:14:E2:56:5B:BB:BB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.70.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:89:28:64:84:05:5c:73:5b:a2:b1:3e:79:2c:35:0a:90:f3:
         5a:ff:b5:fd:d4:be:6f:a1:ef:69:b5:58:5d:08:e5:e0:38:93:
         a7:c9:77:24:7e:b5:8d:13:dd:22:f9:bf:62:23:69:bf:78:21:
         d8:6d:37:f0:f8:9a:ae:c0:41:13:ca:75:95:0c:e6:54:34:d6:
         cb:08:b0:23:76:42:b5:7b:e6:62:e9:7f:b6:b0:25:ea:21:7f:
         0d:69:d8:a0:a6:51:9b:55:38:a0:38:1f:f3:1e:b7:08:48:4f:
         44:95:ad:83:3e:6b:b5:41:d0:65:be:8e:92:cf:92:f5:06:ad:
         70:7d:2e:3e:5d:d8:8e:bf:a9:76:9b:7c:78:50:09:d3:23:4e:
         85:de:d8:b1:0b:d5:76:9f:34:3b:51:ef:a1:6e:98:01:a8:dd:
         b5:32:1f:40:c7:12:01:8a:c5:98:2f:be:c3:4d:26:a3:82:9a:
         05:89:2f:3e:99:fa:a9:5c:68:a2:a0:fa:8b:79:03:73:5c:10:
         de:f7:25:f1:6a:65:54:3a:ed:3e:48:9f:d1:5a:b7:b0:72:9c:
         9c:83:8f:de:5c:21:b1:97:fc:f9:64:d5:a1:fe:a8:4e:41:67:
         c5:40:c2:21:ff:38:41:52:61:72:12:7d:a3:76:9f:3f:52:e9:
         5f:b9:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:31:38 2026 by rpki-client