Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b28309d1-1c31-3013-a7cf-0d32d2408c34.roa
File:                     b28309d1-1c31-3013-a7cf-0d32d2408c34.roa (raw, json)
Hash identifier:          Ruz21j5xY33SGnjH3YTFspJMMBajNdx+Z4IKW/3NToM=
Subject key identifier:   54:71:B9:5E:EA:A9:85:AE:41:39:FB:46:43:D0:65:79:86:14:58:D4
Certificate issuer:       /CN=785749fa-091c-4978-a918-3238e45d2a1c
Certificate serial:       010D0C9F4328584F5FC806FA49B3CC2D3AC5F100
Authority key identifier: 33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b28309d1-1c31-3013-a7cf-0d32d2408c34.roa
Signing time:             Sat 03 Oct 2026 01:00:12 +0000
ROA not before:           Sat 03 Oct 2026 01:00:12 +0000
ROA not after:            Fri 01 Jan 2027 02:00:12 +0000
asID:                     395394
IP address blocks:        64.184.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:c8:06:fa:49:b3:cc:2d:3a:c5:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785749fa-091c-4978-a918-3238e45d2a1c
        Validity
            Not Before: Oct  3 01:00:12 2026 GMT
            Not After : Jan  1 02:00:12 2027 GMT
        Subject: CN=4545de20-de39-4a9c-a6ef-e294a3dcbad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:ba:8f:dd:95:64:11:42:d0:0e:b0:e2:79:
                    ac:5d:b9:30:0e:c0:8d:fa:74:86:dc:56:5f:b3:37:
                    10:5f:c5:43:33:1e:6b:fe:14:a6:36:89:e7:a8:4e:
                    c6:d1:1e:2c:53:45:cb:06:48:32:00:53:9e:10:a0:
                    23:08:dd:78:6d:51:76:39:0c:a5:ae:8a:30:0f:55:
                    8c:a2:fb:cd:9a:2a:45:ca:15:86:2e:da:81:0d:1d:
                    9c:17:11:fe:7e:9b:bf:c9:48:70:3a:a6:5f:e3:31:
                    99:67:8e:4c:0d:4e:87:7b:75:c5:48:1c:17:da:8a:
                    43:07:9d:78:b0:c1:f2:3c:91:bb:40:18:ca:a8:16:
                    25:43:8d:bf:f7:70:ff:2c:04:a2:ce:5d:18:27:4d:
                    41:09:a7:df:1b:24:c7:a6:43:b8:92:84:ae:62:40:
                    b8:1f:87:29:2d:5d:73:3c:00:ff:b9:39:08:da:7f:
                    20:fa:d9:53:8b:f1:2a:82:b4:3b:35:ab:ff:5e:c0:
                    86:1c:f2:a8:e0:67:53:e8:fe:55:4a:7f:a9:dd:e8:
                    63:83:87:b7:4d:72:7f:91:85:26:16:1c:fb:56:0a:
                    93:4d:c2:e6:5b:b4:de:65:c1:81:5e:e4:c4:bf:7b:
                    d9:70:6a:f4:ac:de:a7:d6:13:80:77:97:fa:85:64:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:71:B9:5E:EA:A9:85:AE:41:39:FB:46:43:D0:65:79:86:14:58:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b28309d1-1c31-3013-a7cf-0d32d2408c34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl

            X509v3 Authority Key Identifier:
                keyid:33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:99:67:78:b4:56:c1:80:b1:00:b6:a3:aa:5e:0b:d0:77:64:
         bd:3c:7e:8d:90:ff:b4:be:c0:c9:85:3e:68:27:6b:e9:6c:26:
         29:d7:cc:16:f2:dc:c0:2e:1b:c6:d3:1c:0b:14:62:e0:43:da:
         a7:18:f9:c6:5a:b1:22:1f:52:65:3b:02:24:dd:ea:5b:95:e3:
         17:f1:21:02:6c:ff:96:d1:5a:9d:5c:f7:94:45:96:09:e7:dd:
         ee:23:4d:89:58:3d:e8:9e:d3:79:1d:89:02:91:1c:fa:17:34:
         e8:f3:07:95:bf:da:ea:78:e4:de:eb:cd:7e:36:72:f3:00:2e:
         b0:44:a9:6c:d3:94:59:d3:94:08:e0:64:23:0a:92:b6:05:c9:
         fd:00:4a:b1:02:6f:2c:b3:f5:a4:61:1b:c8:a1:b0:1d:7b:a6:
         bc:21:23:5d:0e:f6:72:ba:ae:82:bc:2d:f8:34:f8:69:6a:88:
         41:80:c0:f0:bd:61:b6:a6:66:27:33:37:90:ad:82:87:e1:91:
         69:bc:8d:07:86:09:b3:32:e2:76:6c:b1:12:6d:0a:2f:90:35:
         ca:69:4d:d7:a3:0b:96:96:88:90:e8:1b:0e:a2:91:06:d8:ea:
         d4:9e:53:e3:3f:3a:4d:b1:e0:c7:ce:b3:ac:2c:26:b3:44:78:
         f8:80:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:19:19 2026 by rpki-client