Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/10552b92-83f4-38fa-b4e1-aa76974757b9.roa
File:                     10552b92-83f4-38fa-b4e1-aa76974757b9.roa (raw, json)
Hash identifier:          sjvLGHQkT3WwYrS73ks7hQeYPw70b3V2Du/hJD99CI4=
Subject key identifier:   32:02:86:ED:F4:5D:5C:DC:F0:13:2A:78:64:FA:B9:92:AF:93:11:D4
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584EA78869D4A0A737FA89674E00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/10552b92-83f4-38fa-b4e1-aa76974757b9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13768
IP address blocks:        64.226.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:69:d4:a0:a7:37:fa:89:67:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7a5a2870-d7fc-4b7f-be09-de1e3a2f150b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:84:28:47:9c:83:44:62:50:44:be:8b:6d:
                    be:fe:27:7c:f8:eb:2b:9c:7e:45:49:6a:a5:e5:0f:
                    31:4d:f4:e8:5c:b6:d6:87:8b:f3:ae:a5:56:f1:05:
                    1a:48:10:55:ae:df:97:ef:f0:d1:ad:02:9f:45:fd:
                    da:4a:92:22:0b:71:10:2e:ac:71:a3:d4:b2:2c:3e:
                    f6:3f:f6:7b:05:07:b3:27:c9:8d:7d:c9:b6:3d:4c:
                    29:b8:1c:2e:19:99:07:10:29:5a:55:16:e9:1e:bf:
                    b9:a1:d1:70:f1:14:b3:f5:d7:fb:a3:cc:3d:2e:6c:
                    d5:ee:5c:ea:d1:c2:b5:70:17:a5:35:37:a1:5f:2d:
                    57:46:fd:bb:38:5c:a3:00:c4:79:cb:70:31:7a:bd:
                    81:41:cc:bd:8d:44:28:b1:26:fe:51:a8:e8:92:b4:
                    25:53:54:c3:0f:45:3f:47:0f:db:c3:ff:67:53:2c:
                    13:9c:bd:f1:0c:f5:6b:31:f9:d9:a9:a9:ed:02:e5:
                    d2:d0:01:e8:e0:78:0d:50:25:02:e2:44:07:5f:19:
                    a2:ca:c6:9e:10:f9:ca:7d:f3:94:8a:49:3f:d1:f9:
                    ab:fb:31:a9:8e:b1:3c:e8:31:6e:9e:e3:99:ca:87:
                    9d:c5:c4:f0:67:ac:8f:bf:80:d8:79:dd:1f:a2:25:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:02:86:ED:F4:5D:5C:DC:F0:13:2A:78:64:FA:B9:92:AF:93:11:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/10552b92-83f4-38fa-b4e1-aa76974757b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a3:65:0a:ef:0e:bb:6c:4d:c2:fc:fe:bd:74:9d:f9:fc:f4:
         f9:57:97:35:45:d5:d6:2e:62:b9:bd:ae:cf:d8:1c:b5:28:59:
         2c:c6:69:88:5c:19:f2:31:28:64:fa:29:e1:83:df:8c:37:5b:
         53:f2:d9:11:a1:9d:e0:b8:3c:41:7b:fd:0f:6b:d9:e0:73:89:
         24:a6:2c:ba:7e:8c:f3:a9:08:a0:75:ef:01:cf:a8:27:93:42:
         06:8e:4d:fe:52:c5:32:1b:1c:71:6b:1a:aa:b0:8c:4e:4c:13:
         9e:16:a9:47:aa:b5:0d:37:d6:5e:7c:05:b1:d3:ea:29:af:4e:
         37:ab:40:eb:ad:71:c9:09:29:1a:95:f4:f0:24:ed:2a:13:d2:
         10:d1:f7:de:d2:8a:71:fb:f0:78:b3:eb:1f:34:a1:2e:ed:11:
         19:a1:3b:58:0f:59:2a:af:1a:e0:da:8a:8c:ba:42:a7:bb:df:
         eb:d4:c0:34:0c:8a:a6:53:8d:a8:8b:f8:78:1b:d4:82:dc:d2:
         9d:da:12:31:a8:cc:d8:0c:4a:3d:f3:c8:35:63:6a:df:d7:4e:
         14:c6:d0:eb:e2:84:96:8e:6b:f3:f0:d8:6e:bb:19:1c:c1:3a:
         4a:80:39:96:2f:b4:cd:ef:b4:b2:ac:5e:de:9e:f4:8b:3e:18:
         91:f1:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:06:13 2026 by rpki-client