Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/9a292636-67b0-3c0b-891a-64efde6a2630.roa
File:                     9a292636-67b0-3c0b-891a-64efde6a2630.roa (raw, json)
Hash identifier:          RA6CysZ54MppG/AXy+xPX4cczAGlImH4D4Kh46syHdg=
Subject key identifier:   E7:7C:D6:97:55:D0:59:01:38:8E:98:C7:C4:06:41:91:F7:23:40:CB
Certificate issuer:       /CN=a550ebdf-7911-4ff2-b736-20785a55062a
Certificate serial:       010D0C9F4328584F8DD8960695068D17DF6E3C00
Authority key identifier: CB:C0:AD:BA:01:65:07:51:8C:33:73:E3:83:7D:38:12:5A:8C:CD:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/9a292636-67b0-3c0b-891a-64efde6a2630.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     53374
IP address blocks:        64.83.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/a550ebdf-7911-4ff2-b736-20785a55062a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/a550ebdf-7911-4ff2-b736-20785a55062a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:96:06:95:06:8d:17:df:6e:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a550ebdf-7911-4ff2-b736-20785a55062a
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=0d4fb100-299f-48c7-bc19-ae8cdb766688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f7:e3:c5:5b:ff:00:19:65:aa:c2:5a:ab:54:
                    f4:39:34:86:e2:2f:bf:db:fc:af:c2:b0:95:7d:3d:
                    0b:fb:1b:c0:d9:8e:0d:c5:55:78:c9:fe:6d:e3:9a:
                    a3:77:6d:40:bf:ae:b7:d7:00:33:8d:9a:f5:f5:3e:
                    e7:7f:31:35:42:db:14:90:f8:57:04:86:5b:35:ad:
                    3f:09:39:75:60:c4:d4:68:26:d2:90:71:88:f5:8f:
                    7a:09:54:18:98:9b:89:fc:51:53:38:f2:5d:51:78:
                    b3:6c:63:7a:79:36:a5:08:38:9e:af:6f:c9:64:8a:
                    e1:4e:47:73:59:92:15:94:69:c7:d2:48:c6:e9:5d:
                    c9:6f:75:64:4f:e4:eb:b5:bb:05:38:33:1f:ea:ad:
                    58:1e:bb:bb:9f:63:6a:eb:d6:dc:87:25:bd:39:9a:
                    de:66:df:d5:6e:d5:28:e0:b3:5a:93:c0:8f:e3:46:
                    04:bf:fb:a5:22:20:5b:5c:7f:fc:88:fd:b9:17:f0:
                    e8:b1:95:e6:93:58:aa:85:b6:ec:f3:c3:ed:ec:fd:
                    4d:b0:a2:06:59:9a:cf:d7:2d:e6:06:d9:aa:b6:54:
                    7a:c7:e2:c2:f2:65:09:fa:29:ea:f2:a1:48:3d:e2:
                    dd:ae:ae:ca:bd:4b:b8:5a:b2:98:63:10:d6:28:d8:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7C:D6:97:55:D0:59:01:38:8E:98:C7:C4:06:41:91:F7:23:40:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/9a292636-67b0-3c0b-891a-64efde6a2630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/a550ebdf-7911-4ff2-b736-20785a55062a.crl

            X509v3 Authority Key Identifier:
                keyid:CB:C0:AD:BA:01:65:07:51:8C:33:73:E3:83:7D:38:12:5A:8C:CD:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.83.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:ee:fb:90:f4:76:a4:02:4b:19:b4:0e:7e:83:91:75:82:
         8c:95:1a:90:55:84:0c:65:11:d2:e3:5f:b6:e4:49:17:3f:37:
         55:40:f7:34:55:06:25:20:78:4a:3d:73:a4:98:5b:8c:bb:c0:
         69:76:05:79:21:e9:2f:55:0c:5b:82:70:8b:7e:48:1b:f9:dc:
         52:c4:db:c2:81:c1:3e:68:e2:73:f3:2d:17:5b:b6:7b:c5:fb:
         ea:d5:1d:20:6e:68:f9:c8:66:96:38:3b:d6:e8:98:9b:6d:0a:
         63:83:19:6a:7b:ee:cb:9b:cc:51:d4:73:96:a9:78:b5:25:45:
         ad:f8:29:3c:a2:e3:de:e8:ef:90:44:c0:0f:3e:e9:77:3b:0c:
         15:9f:4c:96:dc:d1:fb:f2:ca:ee:b4:e9:19:d6:4b:dc:af:f8:
         f2:4c:fa:02:06:97:a3:1e:d2:b1:3d:76:b3:d0:ec:ef:76:ca:
         b3:9f:91:fa:2a:8c:a5:eb:6e:84:3a:ff:be:0e:5e:2f:b6:61:
         3d:32:6f:6d:c5:bd:e9:70:eb:b9:37:e2:a1:b3:76:91:7d:32:
         ad:64:2a:6b:07:56:d1:2d:0d:25:0e:4a:6e:18:1f:1d:86:03:
         0c:15:60:5c:90:24:a5:61:5c:3f:d8:3b:62:95:d6:7c:25:9c:
         bb:f9:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:54:52 2026 by rpki-client