Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa
File:                     7aa03dbb-c767-31ad-805f-79f186089aa4.roa (raw, json)
Hash identifier:          VLFfsWZ0mG3nrbXQaXNOqtk0gsGJKCjAtiOyFTMVygE=
Subject key identifier:   12:F2:73:13:1D:D1:5E:AD:82:7C:AC:86:A8:38:C5:BC:9D:3E:1F:F2
Certificate issuer:       /CN=a5227ba9-e279-4048-a93b-e62de3502f68
Certificate serial:       010D0C9F4328584F1897A523F6352402841DB900
Authority key identifier: 44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     395896
IP address blocks:        64.89.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a5:23:f6:35:24:02:84:1d:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5227ba9-e279-4048-a93b-e62de3502f68
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=78d3922d-6eed-4773-8343-1cdacc07d15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ad:92:a9:d9:db:f8:30:c1:52:57:ea:cf:0b:
                    34:02:1d:3c:04:5f:58:15:a4:39:8a:c8:2e:7a:2a:
                    04:6a:03:fc:cf:24:d8:de:b5:ed:9b:f6:ba:8f:35:
                    1f:0a:be:c2:ca:4a:12:6b:f3:59:81:ff:02:45:e8:
                    f7:26:97:53:a8:59:1a:c6:d6:7c:4d:54:b1:c1:40:
                    49:fe:2f:c5:24:94:e9:62:66:69:56:de:80:23:e2:
                    b7:c1:b4:c2:bb:5e:b4:49:46:bf:0c:c0:a9:22:23:
                    68:7c:e2:0a:8a:05:93:03:1b:64:1e:0f:08:e7:bf:
                    f7:48:ba:32:ba:ad:ab:59:05:b8:38:34:b8:2f:cd:
                    78:b5:d1:5a:b0:d2:f5:c2:8b:28:af:50:5c:53:8b:
                    a4:e8:4d:ce:ac:9d:af:43:47:a4:7c:fc:7e:e7:c6:
                    b9:b5:a1:e2:00:ed:d7:c5:2f:c3:41:dd:94:7f:16:
                    9d:b5:42:80:b0:a3:c6:56:29:c1:49:63:99:94:54:
                    2e:5a:55:e4:70:0c:2b:9d:f9:84:dc:e6:fc:6d:22:
                    98:27:4c:f2:27:a9:45:a6:b6:39:f1:d8:e0:1e:35:
                    70:f4:20:8c:2f:ad:ae:6d:da:36:71:7d:b3:6b:ae:
                    36:09:08:15:30:e1:52:ed:f8:90:fe:d4:cc:73:4b:
                    3f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F2:73:13:1D:D1:5E:AD:82:7C:AC:86:A8:38:C5:BC:9D:3E:1F:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.crl

            X509v3 Authority Key Identifier:
                keyid:44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4b:dc:d6:ab:ac:5c:f6:b9:c3:c2:1a:90:27:f4:ea:bd:67:
         fe:fd:c9:54:43:4a:c6:04:79:09:5e:b9:dd:8c:a8:51:cc:95:
         df:1a:f6:38:74:cd:8a:8b:ed:f1:9f:36:b0:a1:2d:ee:29:b9:
         a0:e4:17:f3:dd:d8:eb:37:7d:40:9b:10:bd:13:18:0f:48:0b:
         e7:08:19:d7:72:25:0d:22:d8:09:39:a8:5c:2d:54:d6:82:42:
         fa:32:24:15:48:d5:f0:f5:81:5b:64:e7:05:e9:b7:0a:73:29:
         e2:5b:4e:ad:83:c6:d8:14:38:38:dc:a1:71:2e:ea:52:d2:8a:
         e7:d8:da:0a:f5:1d:13:0f:45:a8:70:f4:e9:7e:b6:b5:2d:99:
         ee:26:c6:b4:19:89:6c:de:8a:24:60:51:6f:e8:b0:a1:1c:21:
         14:93:ca:4f:a7:fc:4b:f2:67:7b:32:c7:49:48:ee:1a:a0:8d:
         a9:a2:b4:42:c4:f2:50:e4:3c:45:61:67:65:09:4f:69:88:ea:
         1c:65:69:6b:4c:a5:55:c6:81:9f:c7:f3:13:3c:94:61:cf:1e:
         9a:76:97:26:52:0c:20:fe:ef:f1:5f:c2:13:2b:2a:3d:ae:7d:
         10:75:8f:75:ca:4f:1d:18:2e:36:64:53:3a:52:6b:cd:07:63:
         c4:40:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:21:43 2026 by rpki-client