Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a606ab3d-5522-4048-94ab-e63f767da3c6/fdc7486c-a6c5-3321-888a-bd846ed9312b.roa
File:                     fdc7486c-a6c5-3321-888a-bd846ed9312b.roa (raw, json)
Hash identifier:          elxZlj6ccquWRkSaoAjZxU/zADp6l/76bWZXalqAlmo=
Subject key identifier:   62:BE:3E:EB:6B:4C:E7:96:CA:FC:E5:B9:52:26:90:6A:E8:C0:AF:1E
Certificate issuer:       /CN=a606ab3d-5522-4048-94ab-e63f767da3c6
Certificate serial:       010D0C9F4328584EFE12163165FD786396D64A00
Authority key identifier: 22:3C:22:EE:2E:4D:F1:A3:2A:17:31:9B:19:3F:83:03:B2:B5:36:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a606ab3d-5522-4048-94ab-e63f767da3c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a606ab3d-5522-4048-94ab-e63f767da3c6/fdc7486c-a6c5-3321-888a-bd846ed9312b.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     14131
IP address blocks:        64.56.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a606ab3d-5522-4048-94ab-e63f767da3c6/a606ab3d-5522-4048-94ab-e63f767da3c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a606ab3d-5522-4048-94ab-e63f767da3c6/a606ab3d-5522-4048-94ab-e63f767da3c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a606ab3d-5522-4048-94ab-e63f767da3c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:16:31:65:fd:78:63:96:d6:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a606ab3d-5522-4048-94ab-e63f767da3c6
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=3fb8735f-eb01-4b65-aff3-6061fbbeb4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:1d:74:5e:ef:a4:2a:22:05:00:6c:cc:ad:
                    44:e4:10:c4:fe:d4:1d:f2:c5:b6:15:52:17:a6:8b:
                    43:54:f9:62:72:b5:81:0b:9e:aa:30:2e:bf:07:16:
                    6f:ab:e7:c8:d8:3b:da:c9:47:59:f0:84:cf:ec:3a:
                    0a:ec:8c:e0:b4:d9:dd:cd:24:6d:0a:ef:e9:fc:20:
                    20:41:85:e7:67:f9:b3:17:63:e5:c2:d0:2b:6a:94:
                    37:20:3c:dd:a3:c3:8b:79:34:b6:ea:90:8f:15:a8:
                    a1:35:fc:2b:88:f6:c4:13:e9:0a:4f:a1:31:fc:80:
                    5b:e1:20:44:29:35:a7:12:e4:da:f5:39:43:88:86:
                    c7:78:18:e5:6a:73:0c:a0:c3:16:8b:3a:26:b2:ad:
                    d4:f1:34:35:13:0e:9c:b8:c4:e1:2f:9b:be:0e:9a:
                    4e:0c:3f:97:de:90:34:e0:95:5f:ca:d1:4a:df:27:
                    e8:dc:75:d8:c8:a3:26:97:aa:03:75:b6:df:f6:c1:
                    04:66:b5:11:e1:68:20:76:6e:7e:27:da:ea:63:9f:
                    8e:6f:a3:3a:aa:dc:1e:2d:f5:97:a1:66:60:75:be:
                    4e:8c:83:e2:82:1e:ce:b1:26:9f:81:bd:00:c5:15:
                    9a:f9:7f:c5:98:c3:2c:f0:3f:17:68:1d:ed:52:4e:
                    12:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BE:3E:EB:6B:4C:E7:96:CA:FC:E5:B9:52:26:90:6A:E8:C0:AF:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a606ab3d-5522-4048-94ab-e63f767da3c6/fdc7486c-a6c5-3321-888a-bd846ed9312b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a606ab3d-5522-4048-94ab-e63f767da3c6/a606ab3d-5522-4048-94ab-e63f767da3c6.crl

            X509v3 Authority Key Identifier:
                keyid:22:3C:22:EE:2E:4D:F1:A3:2A:17:31:9B:19:3F:83:03:B2:B5:36:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a606ab3d-5522-4048-94ab-e63f767da3c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9f:01:3a:a3:d0:ae:8b:0c:6a:1a:45:70:06:33:e9:ab:76:
         57:6e:91:3c:9e:68:1a:ee:27:5c:72:aa:1f:50:e7:1b:e3:24:
         f3:0e:97:00:d3:4d:dd:8c:05:a8:9a:b6:2f:88:17:ad:8f:73:
         51:b6:f8:5f:db:da:a1:33:58:16:50:08:af:1c:4f:25:d4:a7:
         de:30:49:d1:da:aa:88:20:4f:b9:86:15:10:a5:76:73:94:fd:
         81:a7:c2:83:ef:7a:f3:e9:70:e9:54:b2:8a:f5:5e:dd:2b:5f:
         ff:38:05:64:7c:7b:02:3f:15:85:9c:ac:51:56:24:79:15:be:
         dc:4a:f2:66:34:96:0e:2a:93:af:67:c9:84:2d:1c:c9:91:28:
         c5:e2:4c:d8:3b:f4:70:1a:53:9f:e5:0c:40:48:b3:e2:de:64:
         03:48:be:c0:60:74:f5:05:23:a8:04:61:03:dc:21:06:a6:9e:
         2d:9f:72:0c:1e:64:58:33:24:b4:f9:a7:48:78:33:ea:7e:67:
         3c:56:20:f9:83:1e:78:9f:ee:df:65:5e:6a:0d:d8:9c:d5:72:
         31:09:d0:f0:da:dd:5a:4c:2f:7e:24:a3:1e:22:cf:9b:9e:7c:
         26:76:1f:bc:43:73:81:2d:ac:b0:d7:95:2c:6c:07:36:04:89:
         cc:a8:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 00:51:40 2026 by rpki-client