Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/eed966e5-38e0-3f2b-b394-1ed398a6d48f.roa
File:                     eed966e5-38e0-3f2b-b394-1ed398a6d48f.roa (raw, json)
Hash identifier:          XCQ8oQx4vrZbXA/kLbKOG0idS+NAzu7F2aiAvzsQXI4=
Subject key identifier:   2C:7B:2A:4B:A4:14:BE:CA:7E:0F:E7:F4:56:2C:00:2A:C9:24:16:3C
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584EA7945B826650983A048E1A00
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/eed966e5-38e0-3f2b-b394-1ed398a6d48f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27539
IP address blocks:        64.68.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:5b:82:66:50:98:3a:04:8e:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d26cab5e-fdf7-4238-b2f1-fb5499b2b98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:ee:4a:eb:c3:c4:ed:77:b1:d0:9a:b7:ac:
                    4c:7e:62:76:0e:10:26:42:75:84:29:6f:4f:04:7b:
                    67:be:c8:c8:d8:5a:1b:7b:13:8c:a7:13:5b:ba:90:
                    60:8d:4a:79:ea:a1:c2:8c:3b:e9:a2:e2:56:e6:b8:
                    9c:59:ea:ce:24:6e:c1:0c:35:af:94:a6:51:82:42:
                    69:28:5f:5e:07:81:2a:ca:40:7e:ba:73:80:6b:87:
                    ea:b8:52:bb:c3:fd:32:6e:28:d3:d4:ce:52:95:e9:
                    0b:5c:55:ed:29:36:00:62:0d:97:6a:82:d1:8d:fe:
                    39:50:75:bc:23:15:0d:12:1a:84:c6:a8:c7:18:72:
                    63:39:c5:a4:3e:73:e3:14:b5:c2:50:f5:e1:aa:2a:
                    7b:44:28:4c:21:6a:55:01:e9:d8:73:4a:2f:c6:f2:
                    45:ee:58:c8:8d:7c:4f:fd:16:ec:fa:e8:49:b1:f7:
                    ec:ca:c9:98:90:38:96:3d:88:7f:6c:81:bc:a2:3f:
                    93:b5:3e:9a:4b:f4:6f:ab:1d:9f:81:30:20:66:83:
                    c1:11:53:15:20:63:45:cb:29:e1:b7:0c:9b:ee:f3:
                    84:57:da:b2:6a:9f:aa:a8:29:82:e2:fb:4a:36:14:
                    b0:a6:15:ff:21:46:a9:96:76:80:3c:f2:2d:a4:74:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7B:2A:4B:A4:14:BE:CA:7E:0F:E7:F4:56:2C:00:2A:C9:24:16:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/eed966e5-38e0-3f2b-b394-1ed398a6d48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0e:c1:55:1b:c7:90:12:0b:25:85:b1:c0:65:57:9b:36:a0:
         46:1d:12:ba:68:1a:3c:e6:f5:25:d8:68:6e:a4:54:98:f4:27:
         e8:82:58:01:30:cc:98:13:cf:57:da:b6:9f:22:7f:a5:3d:bd:
         d2:d3:90:49:29:2b:32:3d:7c:f0:de:3e:a1:be:c2:1a:88:ca:
         93:c9:99:cf:be:46:5b:e4:42:dd:85:3b:4b:f1:8f:8d:df:63:
         df:21:90:25:53:63:13:95:2d:c6:53:4b:ec:df:2a:17:f9:45:
         b1:c2:45:fb:e0:c2:9d:a8:0c:49:c5:33:18:85:31:e0:d3:c9:
         9b:42:9f:52:c3:62:29:8f:3f:57:80:d5:01:90:43:f5:86:f8:
         9d:3d:fb:26:d1:81:e3:02:3e:a3:72:56:a3:1a:cc:20:67:a8:
         e9:72:a5:fb:26:8f:a3:58:f5:6b:fc:56:c4:b4:20:ac:ff:90:
         7c:32:05:5b:b7:95:c5:82:5f:dc:00:9e:56:9c:d1:5e:e1:12:
         da:90:24:47:b5:56:3f:7e:d6:f3:da:18:75:b4:78:40:64:35:
         20:01:20:48:d5:eb:d2:0a:aa:1a:24:9e:0a:24:21:39:c3:1c:
         2e:cf:dd:29:cd:72:3b:64:cc:4d:c3:dc:7d:f4:3b:a0:26:32:
         3a:ff:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 22:02:01 2026 by rpki-client