Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/dae46f96-1ac5-3cc1-a22a-eb9a059a9fd0.roa
File:                     dae46f96-1ac5-3cc1-a22a-eb9a059a9fd0.roa (raw, json)
Hash identifier:          7CXgUHehT+5tXdZBN6KzkSTr0syd56ujmOe5wx1Mlrk=
Subject key identifier:   6B:F4:F1:37:CD:44:8A:FD:64:C0:49:74:8E:75:0C:BF:CF:F7:84:19
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F4328584F655D6100D709FDACB5845A00
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/dae46f96-1ac5-3cc1-a22a-eb9a059a9fd0.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     5650
IP address blocks:        64.93.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:61:00:d7:09:fd:ac:b5:84:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=e0dad4d3-4b3f-4f1b-a420-de02c80b1dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:2b:f0:3c:bb:c5:c1:f4:fe:83:4c:f5:5f:
                    00:88:e1:13:47:6a:1a:28:29:7e:25:ab:a6:ec:69:
                    2d:15:ba:ef:b3:dc:19:bb:6f:16:8c:47:38:ac:34:
                    6c:ee:75:a4:91:7d:9f:f8:f7:f6:e8:5b:24:2e:04:
                    01:71:2c:ec:6d:fc:69:5f:f6:e6:d7:d7:ed:3b:59:
                    9c:9e:3a:c8:b9:2f:bb:ef:3d:5f:1e:3a:eb:2c:0c:
                    25:3e:0e:12:f9:56:3f:16:8a:63:b9:80:e0:25:4e:
                    ff:25:26:10:56:23:0e:e6:07:a9:d1:01:e0:68:09:
                    db:b8:62:74:22:47:22:7d:ff:83:bb:6e:e0:b9:a1:
                    75:12:65:0e:d2:3a:f4:02:b0:9c:dd:0c:d6:06:fc:
                    fa:ee:93:5c:14:08:53:d3:31:fa:31:48:d0:80:0a:
                    bd:be:3f:3b:e8:1d:f1:c2:c5:75:d0:3e:11:a3:83:
                    52:df:b2:88:40:cd:df:31:c9:78:ea:c3:3e:2c:4d:
                    0f:5f:77:2e:3e:b0:8d:40:c3:55:99:e9:22:a0:93:
                    ab:de:7b:0c:b5:7e:5f:2c:f1:70:b0:fc:60:c6:e4:
                    4b:40:00:a2:e5:c9:aa:e2:36:9c:f6:cb:8c:51:47:
                    d3:f9:fb:50:bc:9b:e3:8f:ef:da:be:21:39:8e:a1:
                    36:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F4:F1:37:CD:44:8A:FD:64:C0:49:74:8E:75:0C:BF:CF:F7:84:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/dae46f96-1ac5-3cc1-a22a-eb9a059a9fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:14:b1:24:1f:41:1b:7e:cd:c4:7c:41:16:de:d2:d3:39:88:
         56:76:23:c0:b7:63:c3:06:85:ec:62:6f:01:ac:5a:65:da:c4:
         45:12:86:77:79:ab:2a:a2:03:4e:4d:58:4e:a1:30:89:fc:69:
         e2:9a:3f:25:5f:d2:43:3c:bd:f3:af:07:09:9e:31:96:bb:64:
         17:f5:02:2e:8b:76:ff:ce:bb:2a:8f:cd:a5:2e:47:18:d1:68:
         60:34:4e:64:ac:26:c5:e7:87:b8:39:8f:0f:95:fa:62:a1:f5:
         e0:b5:ec:96:99:e7:e6:29:2f:c4:8b:70:ee:1a:41:77:5a:d2:
         c9:4e:1d:39:1c:f7:46:82:00:f1:23:e2:7c:30:a5:73:e0:9a:
         e8:a9:4e:93:53:2a:dc:26:5e:a0:88:ba:f0:0f:66:59:ac:54:
         e9:75:fe:ec:5c:c2:0c:41:7d:0e:62:f7:41:40:00:66:4e:51:
         23:1c:8d:07:94:23:7c:6f:8e:5a:20:ec:78:b6:90:87:4e:25:
         6d:f4:43:ba:16:cd:f1:0b:f7:8d:b4:22:68:47:47:d5:2b:cf:
         65:ab:0c:65:7b:2e:d9:21:67:72:92:47:a7:23:3f:c7:db:07:
         80:93:83:7d:30:ff:d5:1f:14:91:c5:7b:0c:36:5f:df:ab:73:
         bb:cf:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 16:09:17 2026 by rpki-client