Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa
File:                     6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa (raw, json)
Hash identifier:          wx5w5IAbjn3OxenyxVm7CZKrgir1Rc+gnfp9oQcvQDE=
Subject key identifier:   89:96:72:2D:5B:05:26:AC:81:06:E0:AB:12:45:70:18:7F:A1:B5:DA
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584EA7941CE6A143364C6536BA90
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27539
IP address blocks:        64.68.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:1c:e6:a1:43:36:4c:65:36:ba:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=040ca67f-b04b-489c-80e6-add1cc6d6559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:19:a9:04:10:69:39:4b:a3:17:cc:0d:2f:
                    f8:f1:7d:23:d6:38:b0:f8:fe:72:c0:77:54:06:28:
                    73:80:df:8f:ac:0d:57:96:7e:6d:72:70:d9:a6:37:
                    87:c5:8b:7a:5c:be:bc:92:7c:93:e0:aa:6c:f0:eb:
                    e1:40:83:7c:1f:f1:58:e1:f8:8d:c9:51:90:e0:24:
                    99:5d:9a:b1:6d:70:ac:61:94:83:4f:36:f3:9c:7a:
                    99:a7:73:fa:66:ad:4b:e7:21:8a:03:51:cc:96:cc:
                    b1:39:67:84:02:5e:18:ff:9f:b3:d1:e5:04:ac:57:
                    ec:40:bb:98:17:14:78:72:7f:46:c0:1c:dd:65:07:
                    6e:ad:54:88:81:42:4f:11:77:67:c7:02:9f:57:9b:
                    d7:2a:fb:2a:c6:06:78:4e:58:c6:06:2c:e4:15:20:
                    c2:e1:c5:f8:7d:a1:e4:0d:9c:27:b0:66:bf:57:13:
                    ef:b0:b4:e9:e3:94:0c:fc:b9:ec:ea:6a:a5:bc:2a:
                    5d:35:03:e7:86:d3:a2:a7:b9:ab:eb:ed:40:e1:c4:
                    50:dd:11:3b:bb:66:65:5c:c2:b4:b0:78:d5:83:2f:
                    9d:8b:8c:84:1a:64:4a:72:04:f2:ed:c4:5e:09:ad:
                    0c:ba:9e:a6:c8:49:00:78:b1:ab:12:02:d3:0e:f9:
                    23:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:96:72:2D:5B:05:26:AC:81:06:E0:AB:12:45:70:18:7F:A1:B5:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2e:e5:b9:e3:0f:fe:6b:36:4e:17:a7:fd:86:8d:41:a3:56:
         78:60:82:e2:1c:00:ff:7a:de:99:66:fc:b3:ec:46:f2:ea:e7:
         ab:75:0f:eb:6d:ec:1f:ad:21:68:d0:f4:fb:f9:c8:2d:ef:fa:
         76:64:14:d8:6e:2b:99:4b:3d:bd:ba:6e:b8:c0:62:14:e9:64:
         c8:83:e3:77:f5:4b:56:14:94:27:43:2d:42:f6:be:29:26:52:
         82:c7:48:51:46:f7:bc:fb:2c:52:2a:86:58:d4:d9:52:bf:31:
         ec:48:01:db:99:f6:9d:6d:0a:67:e7:e7:82:5c:a2:21:c8:8c:
         02:da:31:bb:f8:b3:57:97:6e:fc:d2:cd:3f:74:84:3d:af:f4:
         43:5c:ae:9d:91:15:21:24:82:78:3f:af:1c:b7:bc:f1:3d:4e:
         b9:53:06:86:63:27:e8:60:74:92:81:da:c0:79:0e:6f:68:11:
         92:de:d1:48:46:d0:ed:23:06:16:f6:5f:a2:7d:75:c8:0a:5c:
         32:59:99:20:95:47:36:e9:d5:19:06:ff:79:01:c5:bc:de:e8:
         b8:6b:34:2a:a4:1a:bb:86:8c:f5:0a:9f:0d:94:f7:f5:a2:8d:
         7b:d8:77:6a:b5:e7:88:ad:7a:79:99:b1:42:aa:f6:81:32:ed:
         b8:88:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:59:33 2026 by rpki-client