Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2db64fa6-ab02-3fec-9251-6f01938bb52d.roa
File:                     2db64fa6-ab02-3fec-9251-6f01938bb52d.roa (raw, json)
Hash identifier:          vmdnmD95m3yjqT9FJmgP/8hYYK+hcBqlv6VBqoTladg=
Subject key identifier:   6E:4C:A2:41:9A:88:CA:79:19:B8:46:25:A0:30:6A:8B:4E:96:AD:BD
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584F8578789627739ACC0D00F280
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2db64fa6-ab02-3fec-9251-6f01938bb52d.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     62610
IP address blocks:        23.251.35.0/24 maxlen: 24
                          107.151.194.0/24 maxlen: 24
                          198.44.172.0/24 maxlen: 24
                          198.44.173.0/24 maxlen: 24
                          198.44.174.0/24 maxlen: 24
                          198.44.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:78:96:27:73:9a:cc:0d:00:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=3a2d7e7f-46bb-4e44-bcc8-1632169ca05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:32:60:8a:54:3b:4b:1c:97:88:5e:6d:52:
                    63:de:23:4f:98:2d:d4:e0:4b:13:57:d8:69:69:b0:
                    db:86:21:a3:d8:2c:a1:ca:cc:4e:59:7c:fe:4c:c4:
                    4b:82:96:37:e6:b4:ce:4b:ce:44:6d:f7:90:24:d7:
                    ea:99:72:69:59:a0:32:58:b7:b2:8f:a9:ef:42:03:
                    71:a6:54:1d:f7:25:9b:89:f1:81:52:8d:21:aa:2f:
                    9b:f4:cd:80:24:ef:38:f9:dc:ed:d5:d9:28:fc:31:
                    5c:e9:69:ef:ee:c6:b6:22:10:e2:24:aa:e3:da:0e:
                    cd:f6:8d:17:36:fa:5a:ae:ef:27:17:e8:4d:27:65:
                    c2:3d:16:e3:d9:3b:0c:89:ad:9d:ff:24:f6:f5:5f:
                    b1:99:9f:72:9e:8f:2f:a3:94:96:e6:0c:b5:07:bd:
                    2e:87:ed:b3:09:0f:0e:0f:b3:7c:d8:0b:84:8a:3e:
                    b7:c3:2f:94:e8:b0:6b:34:77:d6:19:20:b9:34:b2:
                    70:44:fb:c1:7f:2d:04:cf:c2:b4:ad:7e:3e:f0:45:
                    3a:74:d9:1c:7b:4c:72:f8:1c:f0:21:59:a9:6d:99:
                    f9:24:ad:82:74:50:1d:40:4e:06:46:9e:f1:6a:31:
                    a8:3f:7d:e0:30:a5:b2:ec:4c:43:95:4b:b0:03:6c:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4C:A2:41:9A:88:CA:79:19:B8:46:25:A0:30:6A:8B:4E:96:AD:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2db64fa6-ab02-3fec-9251-6f01938bb52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.35.0/24
                  107.151.194.0/24
                  198.44.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:fa:5d:d1:6e:d9:15:79:51:d4:09:4c:cd:49:8f:9f:06:
         a0:93:c0:04:87:b8:f1:92:8f:68:55:83:4d:77:72:42:c4:cd:
         38:5f:de:b7:79:a7:c2:ce:4c:dd:4d:6f:70:e3:2f:fc:7e:4b:
         10:0e:49:e0:c3:bc:e5:87:55:3a:c1:c5:9d:50:4b:dc:70:8b:
         0d:7b:e0:9b:f7:2d:47:90:ae:b1:40:00:f8:5b:da:54:93:1e:
         16:ee:0c:2d:c8:59:cd:09:5a:73:16:fe:38:b2:07:26:1a:98:
         d9:bd:3a:6d:38:b2:4a:b6:fd:83:69:29:1c:9f:db:b3:c0:56:
         93:76:e1:bb:83:5a:e9:9b:89:f6:e2:96:a7:be:92:46:d8:64:
         4c:15:8a:8e:d8:3b:b0:f2:f0:40:06:5e:63:f2:e2:86:b1:ab:
         c1:52:d7:9f:2b:b1:0a:47:24:dc:bf:64:86:e4:22:5c:95:2c:
         4b:b6:73:32:17:c5:05:35:16:ec:b2:c0:c8:e8:0e:54:59:6c:
         4a:51:e2:e3:e7:c5:0c:a8:8d:7f:17:64:a3:f6:2b:d9:b6:8d:
         ee:25:d3:29:a8:cc:1a:ae:81:5f:e7:bd:21:cc:d8:96:6d:0c:
         c2:c6:11:d1:2b:af:c7:86:ef:82:c9:c2:6d:de:c0:ed:d5:c4:
         21:70:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:15:42 2026 by rpki-client