Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a2043139-f730-332b-a197-cc8ccdf0ccc6.roa
File:                     a2043139-f730-332b-a197-cc8ccdf0ccc6.roa (raw, json)
Hash identifier:          htcn4ZQ0eHVvVtfjuOeXsohsI0AX9SkRZSxwK7st5IY=
Subject key identifier:   B5:8E:B5:03:FE:C7:E2:AF:A7:0F:F9:A0:15:73:A9:B7:29:4A:D8:A5
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584CAE5739B15337BFDCD9567280
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a2043139-f730-332b-a197-cc8ccdf0ccc6.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     13768
IP address blocks:        64.34.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:39:b1:53:37:bf:dc:d9:56:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=e642e84c-ccbe-40f1-b9d4-0c1cd96c0e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:44:f1:e7:c6:50:1c:76:39:04:98:41:fb:
                    57:26:c7:84:68:8f:d6:21:d8:1c:8c:7a:e2:c0:a6:
                    c1:83:03:aa:35:6a:a6:33:09:09:ff:ef:e7:f5:33:
                    47:25:46:d8:8c:9b:5e:32:ba:02:da:2f:82:d5:57:
                    ed:7e:97:8d:8b:ba:1e:36:d9:f7:1c:81:8d:64:b1:
                    ca:94:39:4c:cc:2b:31:e8:04:fa:82:8a:e1:02:20:
                    af:cf:24:48:fc:10:23:33:77:43:4d:e5:a1:08:cd:
                    0b:bf:c0:8d:dc:bf:f0:41:6b:d8:cf:71:08:54:ae:
                    b6:07:27:87:2e:d9:31:e6:61:d3:8f:58:7f:e4:77:
                    ad:7d:d1:42:de:8c:f7:ee:9c:ac:47:fc:70:4a:81:
                    97:ef:1b:10:8b:6c:7f:bb:7c:8f:2c:b3:ba:e5:10:
                    22:22:20:66:51:77:8e:3d:36:87:bd:5a:b5:78:99:
                    06:ee:26:99:39:86:15:63:63:22:37:29:4f:8e:05:
                    57:e5:c6:bb:3a:7c:41:6d:a5:97:d0:6c:24:dd:31:
                    6a:84:d0:7e:f1:b7:30:c1:12:6a:3a:ec:1c:d0:b0:
                    c8:6e:fb:73:21:27:21:9c:7a:cc:64:79:88:2b:f8:
                    88:af:35:09:fc:11:fc:de:76:84:25:db:b2:2d:92:
                    7b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8E:B5:03:FE:C7:E2:AF:A7:0F:F9:A0:15:73:A9:B7:29:4A:D8:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a2043139-f730-332b-a197-cc8ccdf0ccc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:89:b0:1a:07:7a:44:37:df:79:c3:4b:13:97:47:50:f1:9e:
         2a:48:4b:d1:db:86:9b:d2:8c:fd:eb:36:65:e7:8d:9c:ab:96:
         6e:ab:0b:e8:f3:18:07:ca:43:ee:77:f7:59:cb:2b:79:2a:9c:
         cb:e7:c7:dd:df:fb:a5:b2:80:20:25:4b:44:7a:dd:7d:d5:fa:
         ad:cb:a2:f5:b3:b8:84:be:e0:9b:61:c0:10:ab:73:d8:b3:26:
         04:cc:21:20:f7:48:99:a8:b8:53:cc:f5:a0:e2:af:fc:ad:5d:
         c1:2a:a2:c1:7c:c6:89:a4:32:21:f3:76:38:0b:43:99:72:cb:
         3a:27:1a:ec:41:71:b9:94:8a:21:4e:08:8a:ad:6a:fe:ac:a5:
         56:00:69:f2:dc:45:a7:d8:4e:f0:26:34:f8:f1:7c:fc:6e:55:
         1a:47:58:e2:1b:89:2e:ec:2f:9e:29:20:80:0e:cc:38:b2:d5:
         40:fb:39:4f:4c:db:27:91:b9:90:c8:a8:1c:ea:00:8b:d9:0c:
         23:61:ac:a9:64:76:08:66:f3:60:aa:ca:41:99:46:c0:83:d0:
         00:0d:32:7e:1c:4e:fc:0b:ed:eb:74:c3:b0:ac:8a:1c:07:a6:
         af:b3:5b:73:4b:2b:61:e9:36:d3:98:27:67:4f:42:3c:5e:aa:
         13:0b:c7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 15:58:38 2026 by rpki-client