Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa
File:                     9150111f-8e0d-3fbe-b669-7e5d4f757864.roa (raw, json)
Hash identifier:          SYS87fkIXGGIBjHWw5BLn9hbCb/0DojoUdJlwz78L5w=
Subject key identifier:   23:4B:7E:2D:7A:BF:F7:80:13:40:51:89:03:49:BD:13:85:DC:B2:38
Certificate issuer:       /CN=9e06ce3b-4bb5-4594-bb6a-2ee5b342370c
Certificate serial:       010D0C9F4328584EA786EC425E6D4868F08D8480
Authority key identifier: 6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397140
IP address blocks:        64.32.43.0/24 maxlen: 24
                          198.8.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:ec:42:5e:6d:48:68:f0:8d:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e06ce3b-4bb5-4594-bb6a-2ee5b342370c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a2eef78a-0ca6-42e1-8a4e-f64cc39bde7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:69:ae:da:82:6c:21:f1:52:b1:c0:60:3b:
                    15:d4:2e:d5:06:66:56:dc:d7:9d:75:c1:26:42:92:
                    88:7a:75:25:0b:4a:bf:e8:6a:49:0a:eb:40:74:b3:
                    a5:2d:59:a7:fc:38:57:62:98:7f:6f:02:bd:c2:5a:
                    75:03:b9:89:33:6b:56:59:4f:93:0b:a0:c3:de:8b:
                    02:a0:9f:d9:ed:b7:3a:3a:77:fb:cb:d4:0a:92:59:
                    84:d2:90:07:a9:fc:a0:75:82:ab:6e:b9:74:cf:97:
                    45:26:0e:67:bd:81:b2:60:2e:d7:7b:71:b6:67:1d:
                    5f:1e:ad:35:54:f4:28:2a:41:c7:a8:5c:74:44:98:
                    df:55:1e:5f:d1:05:f3:66:46:c5:1c:86:1d:17:6e:
                    15:d6:3a:d9:4d:8e:8b:ad:40:3c:55:32:61:2e:45:
                    37:da:16:8d:03:25:28:95:0c:df:3f:ac:5e:20:c7:
                    2e:9f:fd:3b:cb:c0:8e:2e:59:24:90:04:02:f8:88:
                    a4:c7:1e:25:f0:61:0a:e0:31:15:6e:1e:8b:f0:33:
                    30:0f:e8:10:02:d6:d6:68:25:ee:32:77:6e:02:3c:
                    07:72:33:16:c2:e3:14:31:ec:f7:f3:fd:78:5e:2e:
                    7d:c3:bb:1b:e4:6a:b5:74:23:a9:4b:92:ab:8f:ac:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4B:7E:2D:7A:BF:F7:80:13:40:51:89:03:49:BD:13:85:DC:B2:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.43.0/24
                  198.8.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:37:5d:d9:14:fb:b4:c6:f5:f1:02:bb:32:bb:4c:59:a9:7f:
         1a:09:2c:08:ef:62:7f:06:e5:51:7c:74:76:2b:c9:b9:3a:e3:
         21:d8:ad:38:cb:be:b0:8f:5f:fe:e1:8b:1b:87:99:0c:1c:19:
         2f:cb:32:d0:57:13:48:7b:d0:24:7f:83:62:b6:b3:d0:63:78:
         7d:43:72:52:1c:fb:58:27:27:c6:7e:49:7b:67:d8:20:a2:0a:
         48:7f:8f:fb:19:9e:cb:87:8f:05:c3:06:b6:ed:a4:8d:62:0c:
         2b:d6:b9:50:be:b4:ec:02:5c:6e:9e:87:d8:fa:c5:9b:89:20:
         09:2e:7c:e0:08:10:6f:cc:36:ec:da:0d:d3:5a:91:8d:f7:fa:
         6a:d0:ac:06:3c:e9:f7:f9:55:68:de:a6:3f:b5:12:71:ba:84:
         b1:3c:b3:e2:d5:b5:4a:a2:0e:90:66:d7:1e:dc:aa:88:d4:99:
         0f:f6:7a:e2:76:23:fd:1a:7a:87:de:55:8d:0f:a1:22:05:1f:
         82:f5:7b:e8:28:e5:4c:37:30:3c:94:96:46:22:f8:55:cb:55:
         75:dc:08:a4:0b:41:a4:67:b9:45:04:79:21:1a:8f:ae:2c:36:
         63:4f:5b:b8:70:32:b1:cb:21:99:cf:f4:f8:dc:39:97:1a:a3:
         34:88:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:56:31 2026 by rpki-client