Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51/69aaeeed-fc10-3828-aa94-fc8fcc614cd9.roa
File:                     69aaeeed-fc10-3828-aa94-fc8fcc614cd9.roa (raw, json)
Hash identifier:          bxOSI4bBpDGO3eBr5/8U2w5fMPfw2ovgA4/FfFtLKEo=
Subject key identifier:   CA:B5:9F:48:28:53:F6:60:DD:CD:0B:5A:41:83:AE:37:30:1D:76:C6
Certificate issuer:       /CN=a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51
Certificate serial:       010D0C9F4328584FA16319A22A5730D1433AEB60
Authority key identifier: 6A:45:3C:D2:D5:46:39:83:89:C7:7E:87:58:B4:52:65:BE:B4:6C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51/69aaeeed-fc10-3828-aa94-fc8fcc614cd9.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     11745
IP address blocks:        64.72.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:19:a2:2a:57:30:d1:43:3a:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=b0413a76-25b6-46be-8d9e-a6ad258a448d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:82:a1:64:30:18:72:8a:0f:90:09:06:b9:
                    b6:1f:f9:45:81:69:db:44:55:25:22:77:55:d0:e2:
                    17:f4:42:5f:c8:db:be:0a:1b:c4:8a:4d:fe:cc:f8:
                    6d:1e:12:a3:10:11:ae:ae:2d:b6:76:31:00:8a:c9:
                    54:fe:50:70:27:fe:3f:fd:64:b4:d2:2a:8e:60:b7:
                    1e:ad:f5:53:7e:62:d9:ce:ba:24:69:81:b1:69:34:
                    e2:05:de:05:8a:bc:53:75:d7:c6:63:04:5f:c9:35:
                    fe:2e:41:83:31:4a:8d:6a:4c:df:6f:1c:b5:5c:bc:
                    d1:c5:2d:51:f1:a9:1b:4c:1f:2c:4b:0f:06:a9:bb:
                    f3:ed:e5:2c:6d:22:ad:ff:4a:23:1a:41:d8:dd:07:
                    05:32:88:bd:81:d9:0a:50:ff:7d:46:86:e2:4c:e0:
                    86:c0:fd:ee:84:aa:80:07:86:76:9a:b6:89:74:47:
                    b7:44:1d:fe:1d:53:48:56:27:16:3d:9f:98:cd:43:
                    b4:a3:66:59:8e:e1:37:c5:0f:44:2f:85:c2:74:af:
                    1b:e2:49:95:1e:3d:a5:6e:86:a6:01:9e:6d:2b:f0:
                    99:a9:f9:b7:f6:8d:bf:68:dd:66:ef:61:1a:90:af:
                    39:b2:56:40:8f:e8:7c:c3:d4:d0:ce:f3:d7:8d:82:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B5:9F:48:28:53:F6:60:DD:CD:0B:5A:41:83:AE:37:30:1D:76:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51/69aaeeed-fc10-3828-aa94-fc8fcc614cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51.crl

            X509v3 Authority Key Identifier:
                keyid:6A:45:3C:D2:D5:46:39:83:89:C7:7E:87:58:B4:52:65:BE:B4:6C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7ca1b7a-bc37-4a81-b9ff-5c837fd08e51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:93:f3:91:a5:98:e5:2f:26:38:97:b2:0b:8e:68:13:c3:48:
         31:78:cb:ba:d2:39:93:75:0f:9a:de:05:2b:ee:56:00:85:16:
         48:48:fe:4b:a1:e6:00:bf:86:ee:f3:39:70:96:6e:63:62:4f:
         f4:95:58:80:7a:ca:40:eb:7b:13:2b:d7:75:a7:8a:26:38:ac:
         72:8d:e9:1d:fb:df:28:a8:f3:ae:fc:81:36:0e:7c:88:94:dd:
         ef:7f:af:0c:de:98:c7:64:2e:a3:7b:f2:f2:c1:69:26:a6:95:
         2a:e4:ce:19:a6:18:0c:1e:ab:71:27:ec:55:1a:ed:51:ad:ba:
         3a:7b:78:15:71:b1:43:a1:4e:d1:7f:4b:c3:e1:a7:15:a1:cc:
         f5:3f:a7:b7:15:1d:3b:84:ba:27:98:3e:5a:83:49:53:9e:78:
         e9:32:36:6a:a0:c0:c2:7d:22:f8:d2:45:94:1f:7d:94:90:4e:
         3e:d5:43:d7:33:6a:fe:d7:42:40:bc:1c:bd:59:9e:c6:51:97:
         05:07:70:44:00:c1:2e:18:a5:2f:66:17:1d:d4:e6:29:83:27:
         37:8f:8f:4c:73:c8:f2:5a:a8:eb:8c:82:ce:a9:cc:17:11:7b:
         2d:99:fc:df:c5:5e:49:a1:b9:ef:2e:a6:cd:7b:c9:0a:1a:5a:
         47:96:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:30:51 2026 by rpki-client