Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/88c4acc4-5b64-3367-b655-62e7d0832f19.roa
File:                     88c4acc4-5b64-3367-b655-62e7d0832f19.roa (raw, json)
Hash identifier:          oahuGaFYJR2SzBnD4qecsyBxGl2atgnEBzqeHXEyPhs=
Subject key identifier:   AE:77:1D:2D:16:96:CA:13:A7:9F:F7:4C:E8:E3:04:F7:88:13:07:3D
Certificate issuer:       /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
Certificate serial:       010D0C9F4328584F655D682F1FCA87C2571CA700
Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/88c4acc4-5b64-3367-b655-62e7d0832f19.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     40933
IP address blocks:        64.187.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:68:2f:1f:ca:87:c2:57:1c:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=b4d82ee0-00f6-4ae7-81dd-a5d0624aee53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:48:94:18:52:02:49:c9:ee:25:76:aa:db:
                    34:55:14:f5:ac:01:87:09:2e:a1:96:3d:6e:2c:ec:
                    35:bd:86:9b:84:97:12:5b:11:fb:4d:c7:6b:e6:78:
                    f7:d2:70:09:bc:95:cc:e1:3e:2c:26:a8:e1:56:15:
                    2e:ba:e7:ec:0f:ae:d0:b6:dc:bd:c0:3e:67:68:e8:
                    1d:52:16:80:fe:a4:fb:9c:21:ac:40:1c:1d:6c:d7:
                    06:d4:da:1d:8c:b6:cd:a8:6b:8c:03:74:f3:6e:cd:
                    65:3a:b2:d6:f1:5d:90:f0:40:8c:50:42:5d:90:94:
                    03:eb:56:09:29:4c:97:ac:65:be:77:f0:75:16:ff:
                    e6:56:4d:ac:1d:22:83:e3:51:08:a8:43:f4:1a:e4:
                    40:87:e6:e3:fe:7c:49:62:1e:83:cd:e5:f3:f1:e4:
                    77:96:08:06:fc:8f:d4:8f:91:fe:f9:57:b2:70:38:
                    b1:bd:9e:a7:b1:1b:5d:ad:9c:35:f4:88:6b:0e:f8:
                    e1:2d:06:92:64:9e:bc:cd:03:01:43:8b:aa:a7:a0:
                    2a:30:d5:15:65:2e:d4:cf:ed:e2:cc:50:3b:2e:b5:
                    28:e3:95:98:76:5e:94:35:55:4f:3f:77:e7:aa:2b:
                    be:b7:15:dc:cf:07:6c:f8:07:03:6c:6d:b0:d3:7e:
                    19:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:77:1D:2D:16:96:CA:13:A7:9F:F7:4C:E8:E3:04:F7:88:13:07:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/88c4acc4-5b64-3367-b655-62e7d0832f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl

            X509v3 Authority Key Identifier:
                keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:1c:f0:33:90:2f:0d:4b:18:a9:45:19:9a:54:f0:2b:36:
         de:bb:21:9b:a4:18:53:4d:51:f0:5d:55:e3:8c:66:84:95:e8:
         15:23:91:fd:4c:35:52:bf:75:59:de:bf:58:a9:0e:cb:e5:41:
         62:4e:a2:10:0f:64:b1:32:4a:84:24:98:68:af:fd:10:bf:08:
         e4:30:84:03:c1:e7:f0:97:ac:47:dd:56:4c:a1:56:48:8e:46:
         79:f1:07:56:1c:fb:ec:71:fb:32:4b:83:f3:0c:13:d9:22:a7:
         98:cd:2c:cb:74:08:28:52:5e:ef:6f:49:2a:5f:21:d5:06:48:
         f7:af:ce:70:52:76:74:99:86:b8:31:0e:4c:9c:a1:8a:90:be:
         7f:69:ca:05:f6:20:1b:8a:26:0c:32:fd:15:ef:68:ec:0e:ea:
         bd:71:3e:74:14:be:2b:4b:6f:8e:91:77:4d:93:42:19:d5:c5:
         5f:79:b9:94:2b:09:be:e6:35:ab:97:a2:0d:9c:3c:d0:a2:3c:
         b8:77:0c:b6:ed:d6:51:a2:1f:62:f2:8b:0a:a7:46:e4:b9:47:
         36:73:77:11:b2:4a:45:66:ad:c2:c8:b1:02:46:07:94:36:89:
         b2:e9:95:e5:72:80:0d:e4:1f:77:64:94:ce:7d:b2:03:ad:53:
         f7:71:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:43:51 2026 by rpki-client