Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/6dbc986f-9783-32e2-9e0d-983ce4146a7d.roa
File:                     6dbc986f-9783-32e2-9e0d-983ce4146a7d.roa (raw, json)
Hash identifier:          0HCY6WiqmBsMZAogAAzrUHO1NiUvVvvWZLY2fayjHII=
Subject key identifier:   F3:40:57:93:A2:A5:92:58:B5:73:AD:31:E4:26:72:55:E9:3E:7A:64
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584F8F7FDF32D15846B2C968AC80
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/6dbc986f-9783-32e2-9e0d-983ce4146a7d.roa
Signing time:             Tue 20 Oct 2026 03:13:41 +0000
ROA not before:           Tue 20 Oct 2026 03:13:41 +0000
ROA not after:            Mon 18 Jan 2027 04:13:41 +0000
asID:                     11696
IP address blocks:        64.190.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:7f:df:32:d1:58:46:b2:c9:68:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Oct 20 03:13:41 2026 GMT
            Not After : Jan 18 04:13:41 2027 GMT
        Subject: CN=7a6706f4-ae3d-4c76-923c-ccc370027151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:d2:a5:62:c7:b6:04:f3:a3:fa:a6:c5:58:
                    65:e7:87:49:73:55:30:f8:d1:77:13:92:2a:94:25:
                    f7:c4:ac:74:42:3a:08:ee:6c:e4:87:0b:1a:59:23:
                    6e:71:42:10:d0:6c:1f:7f:8d:3f:26:6d:53:ac:42:
                    0d:a9:bf:fc:5d:ce:e7:41:2d:59:38:fe:7e:77:75:
                    21:f0:a3:0c:b8:12:f9:15:6d:7e:27:95:4e:cf:d7:
                    24:70:b1:dc:41:71:58:d5:7a:7d:b9:3f:2b:f3:6f:
                    34:c5:97:df:85:74:30:80:a5:76:74:6b:02:59:4e:
                    5d:6b:27:a7:27:a6:bf:09:9a:82:c3:3f:7d:37:c8:
                    1e:ab:75:cd:3b:62:d4:3b:40:82:e8:da:b4:80:93:
                    42:f7:2c:15:08:96:03:3d:21:c8:af:17:48:68:98:
                    f7:d6:a4:c1:99:15:8a:ca:8d:d8:99:4a:df:0c:e4:
                    e2:a9:73:ab:0d:96:df:d1:1b:3f:5a:0e:ff:17:6d:
                    5e:50:cd:14:ff:ef:29:af:ac:5b:8b:de:19:3f:3a:
                    03:a1:8e:a8:ce:81:80:de:a0:6b:28:60:ef:be:d5:
                    7c:de:e7:fd:ca:03:78:5b:1f:85:a9:fc:ef:c8:b8:
                    83:65:f2:0e:db:5c:b3:cd:31:2b:76:d0:70:c5:19:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:40:57:93:A2:A5:92:58:B5:73:AD:31:E4:26:72:55:E9:3E:7A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/6dbc986f-9783-32e2-9e0d-983ce4146a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6c:a1:5a:95:0a:19:68:00:5d:1b:0e:98:ce:d2:e6:a4:59:
         9d:58:1d:f0:f7:69:fb:16:66:a5:20:cb:5c:8e:b0:11:c0:0a:
         f7:80:ed:cd:66:a0:75:9a:50:32:cb:8c:7f:aa:85:4c:f6:fa:
         2f:e5:f4:4a:88:b2:a7:e9:10:7c:2a:33:43:c5:49:3d:b6:28:
         1f:57:3d:db:93:25:4c:76:b0:a2:31:00:83:8d:89:c9:1d:43:
         b8:4c:89:e9:24:46:0b:d2:94:45:42:a6:77:fe:16:d4:d5:d5:
         e0:36:6c:ac:b2:85:68:94:1f:d1:bb:42:43:77:75:ad:5a:83:
         f1:69:f4:5a:09:cf:05:a0:0a:5e:79:d4:e4:41:39:c6:65:c8:
         fb:db:73:96:7a:18:8e:f2:2c:76:e6:62:df:aa:2f:1d:03:0b:
         c2:8a:a7:bd:a6:0e:53:31:97:14:44:20:c0:38:82:3b:15:d4:
         38:ab:2f:cc:20:78:b3:cf:6e:0b:8c:8c:59:73:25:bf:4c:15:
         82:2f:ec:ec:f5:99:ea:84:19:1c:aa:cb:70:da:9a:8e:42:dc:
         14:ff:87:76:50:28:fd:22:20:45:1d:3f:31:44:96:2c:61:bc:
         b5:fb:56:08:4f:d2:53:b8:5b:59:31:bf:08:4b:4a:39:7a:a4:
         f6:61:b8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:40:31 2026 by rpki-client