Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/5bab57c6-a68d-33ac-807a-96f55dd3496e.roa
File:                     5bab57c6-a68d-33ac-807a-96f55dd3496e.roa (raw, json)
Hash identifier:          yv/Zod7iUiT+ORryWUVLXG7dwSXK8xxSiKMai90aaT4=
Subject key identifier:   3D:34:B7:74:26:5A:43:CC:87:15:71:C7:75:BD:AB:00:E6:16:51:A8
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584FA308D40C647DAA1A642EEDE2
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/5bab57c6-a68d-33ac-807a-96f55dd3496e.roa
Signing time:             Tue 27 Oct 2026 03:10:00 +0000
ROA not before:           Tue 27 Oct 2026 03:10:00 +0000
ROA not after:            Mon 25 Jan 2027 04:10:00 +0000
asID:                     11696
IP address blocks:        64.190.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a3:08:d4:0c:64:7d:aa:1a:64:2e:ed:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Oct 27 03:10:00 2026 GMT
            Not After : Jan 25 04:10:00 2027 GMT
        Subject: CN=5d382e26-e096-41b9-8f49-957d04145339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:9a:68:84:2d:fd:aa:ce:f1:a2:8a:07:e3:
                    c0:30:3b:e0:2a:05:18:37:04:c6:05:c6:c4:3f:3c:
                    47:9d:c9:f6:37:ae:53:e8:49:27:48:5d:bd:80:ff:
                    9b:52:24:90:80:32:93:e0:6d:74:8d:9e:96:0e:ae:
                    ed:f5:f4:3c:32:61:ad:23:7a:68:c2:16:42:0b:bf:
                    89:d0:d9:7c:d7:1c:be:9a:45:8a:ca:a4:1e:bc:c0:
                    ec:0e:a5:1a:16:26:b9:8e:1c:35:ab:a8:56:73:29:
                    11:43:2c:78:e6:23:e8:68:f7:87:65:ca:8b:34:a3:
                    98:be:e2:b7:80:48:f0:ab:96:65:5e:e0:08:a8:3a:
                    93:4b:7d:c3:a3:8a:3f:51:7b:31:48:ac:b8:cd:e6:
                    ee:f5:7f:4d:80:61:81:31:7c:3c:91:31:94:11:07:
                    f7:c5:9f:93:1d:ef:3f:de:6a:d5:7d:e8:86:c7:68:
                    7e:9e:0d:c4:a3:cc:a2:6a:66:58:32:39:c8:8e:77:
                    78:f4:5a:78:22:99:49:89:46:9e:72:e5:be:39:34:
                    54:79:61:aa:52:ee:fd:43:ed:9c:11:e4:e3:ff:67:
                    9a:f9:db:34:79:07:41:6a:a3:2b:0f:81:8d:8d:4b:
                    0d:70:86:37:16:94:69:f5:1e:cb:16:7c:71:89:45:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:34:B7:74:26:5A:43:CC:87:15:71:C7:75:BD:AB:00:E6:16:51:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/5bab57c6-a68d-33ac-807a-96f55dd3496e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:98:5c:6b:18:55:36:cd:db:04:74:e7:e6:1e:00:bf:3d:f2:
         ad:6c:77:b7:cf:dc:b2:c6:85:72:0c:2b:1d:77:55:74:65:50:
         ab:ee:ba:79:3f:f5:12:2c:10:28:bd:96:c0:f2:33:bc:be:7d:
         19:39:c1:20:ca:ed:6f:61:ac:37:4c:64:f1:8e:f2:ff:ea:75:
         52:98:44:08:a0:b3:21:cf:d5:77:b7:dc:46:dc:0a:36:46:b3:
         57:d8:64:71:1e:d2:30:f0:47:56:7f:e3:c9:81:fd:e1:f1:2b:
         72:3a:90:b6:0a:c6:27:3c:8e:0d:a0:1c:4b:64:c6:45:68:e5:
         9b:7a:76:17:98:dd:e0:be:0d:c6:ec:cd:3e:90:bd:90:e8:cf:
         2c:85:fa:27:be:86:19:65:55:07:95:2b:1e:4f:7b:7c:04:47:
         49:66:43:e7:b1:7c:fb:6f:76:88:e7:5b:a2:66:7b:38:d4:df:
         0e:80:2d:5d:da:bd:11:0b:f2:8d:75:5f:d3:27:92:eb:cf:0e:
         3b:0c:aa:8b:fb:85:f5:37:00:e8:25:2b:ea:bd:52:d9:39:ce:
         9e:dc:cb:cc:5d:31:f5:9f:7d:88:9f:20:e4:ca:9e:06:ab:43:
         43:00:92:7a:6a:61:e7:41:89:9e:18:54:b7:a2:b8:a1:20:ba:
         a9:17:ee:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:52:22 2026 by rpki-client