Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6cada92a-c593-3d5c-9dec-b926efbc2809.roa
File:                     6cada92a-c593-3d5c-9dec-b926efbc2809.roa (raw, json)
Hash identifier:          T2UA+EufMG7Zb/9iy9MukGK8X4x2Pag2qWH0R+I6Jq8=
Subject key identifier:   F7:89:09:70:A6:FC:86:AB:EA:91:31:98:43:0C:AC:EC:A5:E4:D3:F3
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584F0ED237DE2EC09AACE7F67500
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6cada92a-c593-3d5c-9dec-b926efbc2809.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     13768
IP address blocks:        64.34.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:37:de:2e:c0:9a:ac:e7:f6:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=b70a4313-b45a-4966-8963-7f3b11adbe1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:ba:75:05:e8:4a:41:0b:cd:c4:bb:6d:1c:
                    14:29:0e:bb:f7:17:e7:88:be:4a:d8:1b:63:96:b2:
                    e9:b5:d6:80:a3:75:91:ee:4f:6f:df:22:01:0a:d1:
                    bd:0a:71:9f:a2:65:72:33:86:90:ce:30:ef:39:ea:
                    f1:01:7e:f4:e5:46:1f:90:f6:e9:d3:5f:42:31:25:
                    c6:d8:05:53:f7:67:6f:ef:ea:4b:0c:55:0d:e1:1a:
                    c5:81:e6:c2:5c:ba:7b:b8:80:71:b6:f1:3a:f0:e5:
                    05:7b:b8:be:d7:30:41:11:8f:85:5c:c8:85:07:79:
                    58:b4:bf:0c:c3:36:13:2d:a4:da:ac:bb:34:2e:dc:
                    07:6c:80:8d:4f:42:a7:5f:0a:7e:4f:5e:c0:b2:03:
                    d2:b9:1d:14:88:d2:8e:63:7c:37:32:cc:e3:d4:42:
                    22:91:1d:d1:7f:21:7b:07:0b:e5:0e:fb:70:4a:34:
                    5a:67:2e:d9:ea:84:6e:ae:b0:78:f9:d4:a3:7b:c1:
                    de:37:46:26:c5:10:7f:09:41:11:46:d1:be:2e:8a:
                    fb:47:75:63:e4:57:a0:ba:8f:56:75:f5:bf:0b:b6:
                    93:41:c7:fb:2d:55:8a:29:a3:0b:4d:41:6b:56:1b:
                    aa:08:b9:87:c8:d4:15:a2:98:05:4f:93:24:44:86:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:89:09:70:A6:FC:86:AB:EA:91:31:98:43:0C:AC:EC:A5:E4:D3:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6cada92a-c593-3d5c-9dec-b926efbc2809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:60:f8:26:cd:99:11:ef:22:e4:05:6f:5f:91:14:89:59:b7:
         a0:07:88:e5:a8:c2:60:62:da:d3:d5:2e:0f:ee:bf:94:23:04:
         a0:0e:63:82:d3:1e:be:26:a6:8e:bb:7b:5c:dc:35:45:8e:69:
         30:1a:ce:4c:53:46:9f:61:8c:cd:c4:6a:32:59:06:07:6e:ea:
         19:41:60:9f:24:c2:ca:d9:a9:c7:b9:c7:5b:9c:26:29:df:11:
         91:8f:c9:42:63:e2:5b:5c:4c:b0:bc:a4:8b:82:4d:19:3a:98:
         58:33:2a:5a:4b:40:41:c8:b0:1a:f6:f6:9e:89:5f:ab:30:05:
         94:7d:ed:aa:60:3b:44:5f:e9:ad:e3:16:b6:bf:08:3f:ab:83:
         33:4d:ba:fb:3c:04:8b:02:b2:fe:2c:af:35:9f:4a:dc:27:4f:
         d0:fc:02:d0:07:89:28:92:48:0e:ba:00:69:5e:19:d5:bd:30:
         b8:03:1d:cd:e0:5f:48:a8:00:91:2c:4a:5e:cb:3d:fb:8e:ad:
         08:3e:04:72:0a:1c:b9:0a:1b:2f:74:dd:36:e4:3a:64:d6:02:
         db:36:5b:a9:2d:4c:0a:5a:83:ea:0b:02:c1:f6:2f:01:0e:18:
         ad:f2:3c:59:51:92:12:f8:be:33:fe:2c:1c:04:3b:71:07:17:
         e4:f0:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:06:11 2026 by rpki-client