Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa
File:                     a64918a4-9404-3759-bfe5-583ac62a247a.roa (raw, json)
Hash identifier:          Xd6rg7pwI+tCIswBT2bCPkzF4gP8Df/y8ELoS0u1SF8=
Subject key identifier:   12:3C:F0:33:10:B3:1B:2C:97:BC:21:AF:91:EB:29:35:0F:91:E4:60
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584EED520C37D14EC2299EABA880
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     399810
IP address blocks:        64.29.137.0/24 maxlen: 24
                          2607:f3a0:a009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:0c:37:d1:4e:c2:29:9e:ab:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=f61d9fd3-72df-4a75-b925-d5dd03fdcbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:46:a5:9f:ac:82:b8:31:ac:0c:53:70:ab:53:
                    c7:d0:e7:c6:0e:b0:63:fc:59:45:10:d3:f1:ac:88:
                    eb:73:8a:11:89:47:d8:60:8e:74:67:64:3b:4d:9d:
                    fd:fd:9e:24:70:12:8d:fa:53:42:8d:03:57:24:9e:
                    ad:1d:96:dd:9c:50:ec:84:a6:ad:95:19:f6:e4:cc:
                    c5:f9:71:02:a6:8a:cf:41:02:23:f0:19:d5:fe:c2:
                    10:1c:54:c7:93:44:a1:bc:c6:1d:80:81:9a:18:10:
                    bd:8c:5e:4a:bc:36:e0:fe:fb:ab:c7:50:fd:26:e8:
                    c6:35:04:12:0a:8a:ee:34:e4:2d:69:65:cc:ec:8b:
                    ad:13:3d:77:5b:83:8c:21:44:d6:99:11:85:f2:5e:
                    db:71:0d:24:f5:8e:05:29:54:5d:3f:ee:35:2e:ee:
                    5b:48:ee:7e:c9:0e:09:28:0b:8a:b8:94:48:cb:95:
                    ab:28:de:f8:76:ec:73:a4:cb:02:63:1a:bd:40:e5:
                    15:5a:6d:65:7f:a3:34:a7:0d:67:b8:02:a6:1b:5e:
                    3a:7a:2f:ea:18:e2:17:0f:b3:54:5f:9f:75:42:21:
                    e7:de:fa:29:39:d6:82:23:d3:6d:ad:cc:9c:4f:fe:
                    2f:7e:3f:af:db:f8:fb:f5:ad:c1:67:72:fb:39:7f:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3C:F0:33:10:B3:1B:2C:97:BC:21:AF:91:EB:29:35:0F:91:E4:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.137.0/24
                IPv6:
                  2607:f3a0:a009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:09:e0:32:65:f9:32:21:d0:b3:f7:80:a8:e2:92:40:40:8a:
         e2:62:44:6d:89:4e:f3:f1:0f:fd:2d:cf:ba:0b:8e:7f:a7:c0:
         b9:69:3d:10:c7:04:da:f0:55:e7:2e:6a:93:c5:01:29:13:96:
         26:46:b4:24:15:fe:1a:54:91:01:2f:64:8b:d7:5c:c9:7a:fe:
         91:a8:02:95:45:83:9e:f0:90:eb:ac:40:2d:0f:05:0d:8d:9c:
         e4:73:1c:49:96:4a:9c:b0:86:f6:b5:59:2d:be:6d:b2:ef:5c:
         45:05:05:72:3b:06:ad:03:ab:9f:ad:bc:5a:99:20:54:19:a7:
         d8:1d:07:e1:dd:dc:1b:2b:97:4b:dd:fd:27:aa:3c:48:ef:0e:
         eb:c0:34:a9:b5:e4:11:00:d7:34:a4:ad:1d:9a:73:ff:64:5d:
         5b:c9:a3:3b:03:b6:f0:8f:3c:2f:af:70:f5:7a:70:37:a1:fb:
         f7:b0:e5:34:51:f8:10:79:bd:06:1f:c8:4a:7b:a4:15:50:75:
         d4:10:07:13:3d:b9:59:3a:36:e1:eb:1d:d1:c5:e1:e0:54:47:
         fb:12:c8:6a:44:2d:71:dc:43:f6:b5:9f:f6:41:33:a8:db:d3:
         1f:38:71:b0:a0:94:f5:15:37:50:41:25:ec:d3:90:95:3c:e2:
         f8:8a:80:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 01:22:11 2026 by rpki-client