Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/48d0fc30-2a27-38a2-8e44-7a14c574b839.roa
File:                     48d0fc30-2a27-38a2-8e44-7a14c574b839.roa (raw, json)
Hash identifier:          TWXTioAOvkspRpQXMBECt8SQKXPqZ2nF7lcyYD6hWqc=
Subject key identifier:   9B:1D:57:83:51:95:A1:1F:E9:AC:8D:2A:C5:77:3C:E9:D3:9E:F1:69
Certificate issuer:       /CN=4e3b6f0c-03ba-4619-b32b-5c978718dfe7
Certificate serial:       010D0C9F4328584EA7953E20F68BDED9C8CDEDC0
Authority key identifier: F9:CF:6F:6F:1F:4C:F8:FD:F1:65:A9:22:C0:B4:7E:AB:2A:30:E1:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/48d0fc30-2a27-38a2-8e44-7a14c574b839.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     64238
IP address blocks:        64.191.0.0/23 maxlen: 24
                          2620:ff:c000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:3e:20:f6:8b:de:d9:c8:cd:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3b6f0c-03ba-4619-b32b-5c978718dfe7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4e840445-408e-4e05-a9e9-ca20952d4831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:71:ff:48:fc:ac:79:37:c6:89:07:8e:ef:6e:
                    30:8a:42:23:be:86:3a:28:ee:f1:22:34:fc:84:9a:
                    d6:4e:71:08:5e:de:f5:6d:ce:ee:9f:13:57:98:8f:
                    66:e4:8a:b7:c7:d5:c0:8d:99:c7:d3:60:35:1f:cf:
                    c0:8d:3f:c5:e7:66:0b:85:f4:a7:bb:46:0f:72:b7:
                    75:91:47:95:db:b0:4d:38:70:86:c0:a2:f6:d1:b2:
                    96:42:29:9e:1c:73:95:4b:54:3f:3c:29:51:09:b2:
                    31:aa:39:ea:c2:57:3b:43:1f:bb:56:3f:23:dd:c4:
                    b6:d6:38:03:75:65:e6:1f:d8:fb:a2:de:c6:62:16:
                    61:49:35:57:8d:f3:d4:cc:17:1b:ae:c6:80:6c:2a:
                    63:62:5a:72:d6:13:39:51:0a:89:ff:ec:e0:f8:60:
                    da:e3:aa:d9:88:40:e5:ec:20:91:4a:b6:52:1e:1a:
                    78:24:10:40:ed:11:d1:5a:94:83:bb:e6:8d:cf:ef:
                    7c:06:38:4f:d3:13:17:90:f3:ed:e1:61:fe:9a:3e:
                    1a:92:33:46:9a:40:34:d4:7d:ac:fe:52:bf:33:84:
                    29:6a:b8:f4:51:6c:d2:57:a3:4b:a7:75:99:97:fd:
                    6f:46:b2:6d:0e:55:5b:48:82:b6:bf:ee:5d:1e:ed:
                    6a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1D:57:83:51:95:A1:1F:E9:AC:8D:2A:C5:77:3C:E9:D3:9E:F1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/48d0fc30-2a27-38a2-8e44-7a14c574b839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CF:6F:6F:1F:4C:F8:FD:F1:65:A9:22:C0:B4:7E:AB:2A:30:E1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.0.0/23
                IPv6:
                  2620:ff:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:2d:8e:4e:38:7d:07:fe:7b:f9:e8:02:55:56:32:8b:ab:b4:
         b7:7c:55:fe:66:10:ee:05:49:73:fd:ec:fd:64:7a:0e:a5:06:
         62:a8:e7:cf:1d:dc:0e:a9:61:cf:72:42:6c:15:bf:a8:c6:03:
         07:56:3e:6a:f6:92:f2:50:eb:65:b8:2b:0c:37:e4:8d:8e:4b:
         30:10:c4:6b:4c:82:af:e5:37:74:ca:8b:9e:7b:e5:32:a3:f4:
         66:03:57:5b:4a:5e:df:3c:67:33:90:77:0a:32:74:1d:36:23:
         7a:7e:f9:3e:4b:da:5e:b0:1c:05:08:90:47:af:71:bb:92:bf:
         c1:04:87:5b:6f:8f:d9:c5:d1:0c:1a:90:f4:50:48:2f:de:6a:
         0a:81:c2:17:7c:b0:bf:11:f7:e5:3f:89:e0:7e:8f:b4:55:43:
         55:22:cd:69:29:3a:c1:82:10:02:ec:92:e8:35:4d:e3:9e:9a:
         3f:95:4e:9e:69:e5:a5:c0:48:fa:80:a8:3f:49:13:f7:29:a4:
         d8:c6:de:15:c7:36:5b:ed:69:64:69:6e:7c:1a:36:9b:c0:17:
         38:a0:49:80:79:1f:45:85:7a:cd:5f:76:e3:c7:0b:96:6d:0b:
         71:c8:a4:2c:c6:c2:00:31:6f:0e:52:d9:b3:86:87:65:cb:d3:
         a2:5f:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 08:59:07 2026 by rpki-client