Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/5434b4b2-89b2-33ca-b477-b7312e09492d.roa
File:                     5434b4b2-89b2-33ca-b477-b7312e09492d.roa (raw, json)
Hash identifier:          SC6TNUNCd6dghgDwsuBREssCcKYhs0SfVFFjzsLP9r0=
Subject key identifier:   C3:5B:CC:2B:C7:E8:7C:9B:14:56:89:C4:11:69:98:7A:F1:A5:EC:2C
Certificate issuer:       /CN=a550ebdf-7911-4ff2-b736-20785a55062a
Certificate serial:       010D0C9F4328584F8DD8965AA17DD7F1A2432400
Authority key identifier: CB:C0:AD:BA:01:65:07:51:8C:33:73:E3:83:7D:38:12:5A:8C:CD:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/5434b4b2-89b2-33ca-b477-b7312e09492d.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     6461
IP address blocks:        64.83.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/a550ebdf-7911-4ff2-b736-20785a55062a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/a550ebdf-7911-4ff2-b736-20785a55062a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:96:5a:a1:7d:d7:f1:a2:43:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a550ebdf-7911-4ff2-b736-20785a55062a
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=91a58a33-ebee-4538-be7e-a779c5ae63b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a6:bb:da:df:87:c0:74:24:29:cb:0a:9c:f0:
                    c0:2c:d0:49:ca:3f:86:e8:8a:af:ff:55:34:dc:ed:
                    f5:77:64:8f:58:d2:15:ad:59:08:01:f0:9c:59:22:
                    de:75:95:b5:13:a2:53:41:af:2a:66:88:d0:dd:9a:
                    c3:f7:c5:b7:1f:35:e4:13:de:4c:36:0a:ee:1e:e8:
                    ee:dd:b5:18:0b:0a:df:51:a1:24:43:45:e7:0b:9e:
                    fe:6f:75:c5:70:2e:68:69:1c:ff:35:e6:36:25:a1:
                    67:df:29:84:06:a7:b8:9f:02:86:91:76:5d:b2:24:
                    70:2e:43:8e:0d:ff:e2:85:d2:1a:cb:ff:e5:99:a5:
                    8a:62:67:11:40:b5:e1:c2:50:00:d2:36:90:35:0e:
                    96:7b:c8:a2:59:49:b4:d6:db:ab:19:b4:ab:3f:27:
                    a3:6d:bb:3e:1c:ed:bf:e5:fd:c4:65:b1:2e:da:50:
                    5d:71:8b:e9:fb:17:59:b1:f1:e1:71:f8:aa:75:7c:
                    7a:32:e1:91:26:ef:bc:98:7d:d6:86:f1:1b:6a:d4:
                    96:42:c7:6d:0c:eb:6f:fb:fa:82:b7:a8:93:6b:e0:
                    67:c8:2a:cd:35:01:c0:a9:14:60:65:35:12:16:ba:
                    c9:9d:5d:34:bd:8e:99:9b:4e:be:b0:45:33:55:ec:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5B:CC:2B:C7:E8:7C:9B:14:56:89:C4:11:69:98:7A:F1:A5:EC:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/5434b4b2-89b2-33ca-b477-b7312e09492d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/a550ebdf-7911-4ff2-b736-20785a55062a.crl

            X509v3 Authority Key Identifier:
                keyid:CB:C0:AD:BA:01:65:07:51:8C:33:73:E3:83:7D:38:12:5A:8C:CD:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.83.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9c:25:b5:af:11:52:67:6b:b1:77:6a:67:8d:34:02:f3:da:
         4b:03:f5:76:04:1e:f0:2a:f4:6a:66:5f:fd:58:32:7c:1a:99:
         2a:56:41:0e:b9:9b:72:0a:3f:1f:68:b4:e5:fe:f3:10:c3:f2:
         65:2d:0a:97:56:26:2a:7e:8c:a1:d0:a3:36:1c:8f:9d:c2:27:
         e2:4e:33:17:21:e5:5f:57:ca:d8:9e:99:d5:ad:22:ad:ee:90:
         30:98:1c:84:d5:fc:fc:d1:40:a7:33:eb:3c:13:3a:7e:bb:98:
         8b:e1:93:f0:59:df:ae:e9:70:3e:65:fd:d3:f3:38:f5:41:37:
         db:3f:5a:2c:fa:ad:4b:e1:2a:5a:9c:cb:8e:b6:98:67:0a:10:
         d5:01:6f:6c:3a:73:09:98:96:a6:f2:1c:34:77:4c:9e:bc:08:
         5b:35:f0:16:2a:96:3a:54:a6:d1:81:1c:1f:f0:72:d7:f0:a4:
         b4:2e:e6:af:7c:27:7c:bc:71:6e:5b:76:3e:01:ba:0b:4c:77:
         cc:19:ad:ea:3a:6d:05:b0:09:3b:30:0f:3a:78:19:5d:43:f0:
         14:c3:4d:d6:2f:93:18:46:e7:8b:dd:e3:cb:48:46:b2:77:f3:
         e5:70:bf:33:06:27:c2:85:d0:50:2e:41:e4:8f:94:a3:1e:c9:
         d9:03:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:14:56 2026 by rpki-client