Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/42b52b8c-914a-371b-99cf-3843b9917007.roa
File:                     42b52b8c-914a-371b-99cf-3843b9917007.roa (raw, json)
Hash identifier:          i3npBLLmhxNKEA2arK3QxjxAu/GV2WfKkbTusc8REbI=
Subject key identifier:   BC:52:FF:03:87:A8:4C:B0:3F:18:55:B7:2B:74:EE:49:4F:F4:0C:FC
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584F0ED235CB7171257954CA32C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/42b52b8c-914a-371b-99cf-3843b9917007.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     13768
IP address blocks:        64.34.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:35:cb:71:71:25:79:54:ca:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=faa7ebc3-8869-4fd3-a03c-50f2378b6c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:59:f5:7e:bc:60:dc:6f:2e:f9:1f:ae:87:
                    49:37:ce:df:05:e7:b8:8c:60:e6:f9:9a:da:eb:81:
                    84:65:bc:1a:77:db:18:7d:ef:58:88:c2:91:cc:8e:
                    34:3e:67:a1:23:c7:46:07:49:b6:ee:c7:0e:78:90:
                    f6:24:25:04:a0:8e:ab:7b:5c:21:4c:94:dc:73:3c:
                    af:65:b2:82:53:90:dd:36:03:0e:55:b8:58:32:b7:
                    b2:9b:03:af:50:60:ec:30:9e:98:29:91:fd:09:7c:
                    cc:5b:fb:79:01:5a:1b:45:69:07:88:e0:c2:24:a1:
                    11:4e:31:77:2d:72:99:6a:f5:92:05:09:19:d2:7a:
                    32:6a:e8:64:25:bd:ef:56:95:ae:dd:4d:21:fa:8e:
                    87:7b:81:f9:3b:62:2b:ce:ba:ad:e6:d2:6d:85:12:
                    a9:2d:b6:fe:06:54:b9:25:93:2c:3d:12:9a:04:1c:
                    8b:0a:1c:b6:96:50:18:a5:88:2c:aa:1c:7b:c5:68:
                    99:fa:3d:c8:dc:74:e3:da:de:c6:9f:20:9d:6e:5d:
                    92:24:3b:a0:76:fe:e8:60:0d:ca:3b:fd:08:37:c1:
                    2b:c7:4f:5f:16:24:29:ac:5f:06:fb:b6:46:06:71:
                    49:4c:ed:7c:4e:72:3f:db:0c:7d:91:c1:4d:7d:bf:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:52:FF:03:87:A8:4C:B0:3F:18:55:B7:2B:74:EE:49:4F:F4:0C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/42b52b8c-914a-371b-99cf-3843b9917007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:16:32:5d:51:1c:67:2c:04:5a:c5:bb:b9:ac:66:33:30:c1:
         38:1a:62:71:a5:d7:cf:5e:03:eb:5f:40:bf:ea:ef:dc:fb:b2:
         56:74:ef:01:bb:16:dd:ed:c5:b6:a8:bb:5b:27:95:eb:cc:ec:
         9b:4d:a8:51:a3:a1:dd:9c:0a:60:09:d8:96:a1:dd:63:21:fc:
         b2:4e:91:df:13:eb:bd:32:38:58:b9:03:9b:e8:60:4d:40:23:
         86:12:02:46:a3:7e:4a:a2:9e:98:a8:dd:68:1a:54:c9:b8:dd:
         97:67:85:63:13:eb:2b:df:0c:e8:60:25:7e:00:3a:bd:e2:94:
         bc:ec:89:91:60:fb:5e:ec:e8:d4:a4:f6:36:31:06:d1:57:35:
         06:48:d2:a0:34:7a:a6:31:dd:86:7a:d3:05:fe:86:a8:89:be:
         10:53:4c:07:84:c7:84:8b:4e:0e:a0:7f:2f:03:1d:40:b9:97:
         b8:b8:eb:2f:b7:b6:17:41:2d:db:02:17:c4:7e:54:b8:4c:fc:
         fe:89:77:ff:5d:61:c1:c2:4e:2d:93:a0:33:a4:16:c3:14:11:
         c0:a9:eb:e7:30:87:a4:bb:ec:fb:3a:01:59:71:16:70:20:cb:
         fb:25:5b:8e:d0:12:fe:e1:00:ce:aa:71:0c:8d:f5:45:b4:13:
         1e:b4:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:54 2026 by rpki-client