Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/12be74e3-b4f1-305d-a6b5-95b0134a4612.roa
File:                     12be74e3-b4f1-305d-a6b5-95b0134a4612.roa (raw, json)
Hash identifier:          SsX/DtWkm2XeD+Uovwd8LgsZ8dhKVSX7qfN8HORcqHQ=
Subject key identifier:   68:2B:49:FC:91:24:7F:AC:EF:5C:A9:28:C7:2A:48:FC:BA:D1:BD:4C
Certificate issuer:       /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
Certificate serial:       010D0C9F4328584EC32FFCC6D08089F998BFCB00
Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/12be74e3-b4f1-305d-a6b5-95b0134a4612.roa
Signing time:             Fri 07 Aug 2026 22:47:50 +0000
ROA not before:           Fri 07 Aug 2026 22:47:50 +0000
ROA not after:            Thu 05 Nov 2026 23:47:50 +0000
asID:                     40933
IP address blocks:        64.187.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:2f:fc:c6:d0:80:89:f9:98:bf:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
        Validity
            Not Before: Aug  7 22:47:50 2026 GMT
            Not After : Nov  5 23:47:50 2026 GMT
        Subject: CN=96441392-2981-468e-bdae-1e1e30eda982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:54:20:ea:a0:d7:fa:d5:54:9e:f2:09:2e:42:
                    36:9d:4f:31:bb:7a:b2:67:3c:f4:3d:92:b0:fc:f5:
                    9a:4a:b5:7c:58:6a:54:0d:90:59:20:1f:4e:dc:f7:
                    95:af:8d:1a:21:d0:ef:3b:72:13:ed:ec:65:7e:e8:
                    f9:5e:1a:75:cf:ae:3a:a7:aa:6e:ce:2a:19:43:6a:
                    bb:93:9d:6c:2b:69:ec:a5:9c:a9:0f:ec:c3:aa:f9:
                    e0:aa:e1:e9:cc:61:b2:41:18:0c:a3:03:41:7d:82:
                    eb:9e:b1:58:6d:ef:30:07:bb:96:21:84:88:f6:c1:
                    1e:85:7e:41:4c:2e:a7:61:6a:ff:68:f3:48:9a:7a:
                    88:da:e7:05:52:ab:fb:74:ff:60:3a:46:78:51:fd:
                    73:0a:a6:01:89:d6:da:e5:5a:98:fb:ea:eb:8e:13:
                    95:a6:41:90:44:d8:25:45:72:73:a2:35:f2:b8:ef:
                    b1:7f:cc:ba:76:13:f2:d6:94:fa:2e:20:26:3e:28:
                    f7:02:33:3c:7e:55:10:31:d1:78:25:e7:6e:3a:32:
                    29:cf:23:74:7c:1d:2f:a1:82:22:7d:f6:d5:1f:b1:
                    2b:7c:d7:68:bc:49:24:fb:d2:cf:a8:8d:d5:b9:2c:
                    37:c1:8f:0c:9b:9d:83:0c:88:ed:7c:0e:26:30:89:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2B:49:FC:91:24:7F:AC:EF:5C:A9:28:C7:2A:48:FC:BA:D1:BD:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/12be74e3-b4f1-305d-a6b5-95b0134a4612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl

            X509v3 Authority Key Identifier:
                keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:56:02:d2:ad:8f:9d:8e:d2:5d:41:11:c9:c2:e0:ab:8f:
         f9:ad:fc:ac:35:39:c5:c8:a6:f8:cf:e4:a4:f8:2d:8d:c8:df:
         f7:b5:21:f0:cb:15:5b:df:29:15:21:17:44:c0:af:28:01:4b:
         24:15:82:3a:71:73:dc:05:78:f7:98:be:25:e8:6e:a8:d7:7b:
         12:bf:ba:2a:98:21:9c:50:93:34:bb:19:ca:3a:f8:97:54:29:
         b9:4c:3a:d2:1a:ae:65:a6:80:6b:58:96:55:06:0b:cc:3b:f2:
         bf:e0:ed:71:de:a2:95:bd:b4:55:69:45:de:c3:6f:68:10:d2:
         bc:92:19:87:e3:36:d9:fb:e0:0c:2f:ec:f2:eb:3d:db:81:51:
         af:fc:e2:08:14:81:ff:0f:df:aa:da:e8:32:63:ec:62:00:32:
         ef:58:3d:7e:0b:24:54:20:02:5f:d9:67:bb:ba:05:12:67:2f:
         72:13:c0:7c:fb:da:d4:b6:b2:22:dc:1e:e8:7f:c7:18:88:e2:
         19:5f:d0:74:22:e3:cc:7d:77:30:9d:7c:46:a6:ed:7c:18:08:
         db:00:16:40:c2:b6:ea:d0:47:d4:fd:b8:7c:07:cb:e9:32:33:
         f1:ff:a7:e0:3f:9e:87:94:e0:cd:8d:54:ca:ab:27:83:a7:ac:
         b0:69:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:26:03 2026 by rpki-client