Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/a1dfb53a-b73c-3e22-b074-38786c83f94a.roa
File:                     a1dfb53a-b73c-3e22-b074-38786c83f94a.roa (raw, json)
Hash identifier:          SVRK/PUsZthqoU+TkFrMVnN5W6wB1wRhiECREQWiaRM=
Subject key identifier:   1C:EC:21:0F:48:D4:D7:96:D1:67:0D:D9:48:98:CA:DC:CF:17:34:5F
Certificate issuer:       /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
Certificate serial:       010D0C9F4328584EC32F86101BBD7B244BC50980
Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/a1dfb53a-b73c-3e22-b074-38786c83f94a.roa
Signing time:             Fri 07 Aug 2026 22:46:54 +0000
ROA not before:           Fri 07 Aug 2026 22:46:54 +0000
ROA not after:            Thu 05 Nov 2026 23:46:54 +0000
asID:                     40933
IP address blocks:        64.187.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:2f:86:10:1b:bd:7b:24:4b:c5:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
        Validity
            Not Before: Aug  7 22:46:54 2026 GMT
            Not After : Nov  5 23:46:54 2026 GMT
        Subject: CN=bd17d30b-9996-4437-856d-7bac7deb8dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:3b:85:76:48:a9:f9:fc:79:1b:e7:ae:15:
                    c6:1b:a5:f7:17:1b:c5:0c:f0:71:2d:ac:94:06:f4:
                    49:e5:a1:b9:9d:0d:47:92:38:52:d3:9a:f5:7f:c2:
                    12:4c:78:2e:a2:df:94:f7:a8:32:59:ef:9a:95:b5:
                    8d:50:ed:a4:80:73:6c:64:98:f5:d1:83:a4:46:39:
                    65:0b:8b:00:1f:bf:56:ce:8f:ed:cd:0d:05:1b:86:
                    aa:d7:41:bd:c5:88:3d:41:83:5a:6b:19:e6:79:1d:
                    c0:4e:ee:f1:6d:54:28:a2:7e:17:2a:89:80:fd:b5:
                    9b:ae:f9:35:39:05:ba:f2:66:20:91:10:50:7a:1d:
                    52:88:ac:fc:47:7c:09:78:63:6b:3d:1a:14:c2:38:
                    c5:1e:6e:0c:d9:35:d5:19:76:65:5d:42:6b:50:31:
                    d2:d0:6f:df:23:e6:41:8f:8d:d6:c2:01:f2:26:36:
                    e2:cc:6a:4a:17:cd:d9:a3:be:58:b1:c5:05:c9:1e:
                    70:c4:1c:ce:e0:d2:64:32:c5:87:b4:98:c2:8b:fc:
                    eb:f9:3f:a3:7a:de:90:50:2c:0f:80:12:c6:03:22:
                    88:06:6f:44:b9:2a:8c:2e:f9:31:3a:ab:64:dd:2c:
                    10:98:19:2e:ef:7a:fc:5f:9f:fc:91:f3:a6:30:44:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EC:21:0F:48:D4:D7:96:D1:67:0D:D9:48:98:CA:DC:CF:17:34:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/a1dfb53a-b73c-3e22-b074-38786c83f94a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl

            X509v3 Authority Key Identifier:
                keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:45:03:48:a4:7c:f4:9d:64:d0:c5:73:ad:a2:a4:01:56:33:
         35:28:d7:8a:12:d4:b7:8e:c7:78:01:d8:2c:b3:6b:4e:91:33:
         9a:9f:dc:f1:0e:a2:c9:f3:27:12:d0:dd:73:87:b3:1c:28:23:
         e2:40:b8:59:0d:7f:78:34:89:8f:7c:0b:97:12:95:c9:c2:be:
         cc:d7:04:18:e6:86:50:4a:95:69:51:d2:86:c5:35:fc:90:63:
         60:72:ef:6b:03:cb:fd:ec:9a:e8:65:62:9a:b1:1d:41:f9:19:
         95:ed:ab:e4:99:e1:a5:6d:30:14:00:ae:75:31:cd:74:d4:86:
         a4:f9:ee:b4:8a:0b:20:98:66:ab:6b:db:45:0a:84:21:fa:b2:
         64:e8:44:ba:0a:b1:ae:aa:df:03:3a:5e:52:fb:5a:8b:97:8f:
         8b:e3:b0:88:94:0e:61:a2:30:23:0f:3c:87:45:e5:94:d6:e9:
         9d:82:3a:88:5e:5a:2b:02:48:35:be:51:72:67:e3:01:f9:12:
         a3:6f:b7:05:32:c0:3b:3e:02:23:94:23:a2:d6:47:dc:70:24:
         16:35:8e:e7:d0:90:01:67:65:d8:de:a8:b9:4b:aa:c4:e1:a6:
         80:22:ad:a0:b5:29:f4:2a:f5:93:6c:db:ba:54:94:13:25:66:
         a3:90:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:25:32 2026 by rpki-client