Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa
File:                     b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa (raw, json)
Hash identifier:          QGXIFgKsXA2eqRRu3phMJ2PKijLido4yHU7CxmPZYTA=
Subject key identifier:   40:CA:AB:FC:B8:FE:0C:E9:9B:C9:76:9F:1F:1C:F2:42:1C:5C:CF:4B
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584F71ED9BD97F5C3146C389E880
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     11260
IP address blocks:        64.178.128.0/19 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:9b:d9:7f:5c:31:46:c3:89:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=dce43617-cdb9-47b9-95e3-bce618eb027b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:ff:f6:a4:35:3b:94:52:9c:2c:0b:16:64:
                    f0:70:c6:fe:4a:d0:4c:46:ca:ff:77:78:79:7e:c7:
                    b6:35:a2:06:70:8c:73:3e:06:4d:3b:4a:62:45:9b:
                    d6:04:b1:22:3b:ba:17:c3:f5:cb:01:84:61:77:5c:
                    66:5c:32:b5:56:8e:c7:18:67:65:dd:53:b8:4d:7e:
                    b3:04:00:8e:4e:df:7a:85:28:f4:b2:be:31:2d:b5:
                    b3:b5:de:ae:a0:ce:4e:36:10:4d:b4:b4:98:ca:a2:
                    f0:d8:4c:a3:b1:d9:be:22:61:44:b4:68:e7:b2:d5:
                    22:88:ff:09:a9:71:bd:f9:15:b6:2a:af:6d:42:c7:
                    4b:0d:f9:ad:d6:37:cc:5d:17:25:00:7e:81:8b:46:
                    5e:25:be:fc:00:7c:06:fa:95:55:7a:2e:8d:37:2e:
                    77:6e:97:8b:33:d9:45:a6:8b:fb:c9:82:86:20:e1:
                    67:9f:4d:78:99:25:d9:99:93:4b:1b:03:e3:ba:f0:
                    d2:d9:d3:f6:34:6b:48:3c:68:69:d5:9c:cf:17:3b:
                    ff:59:27:ef:d4:cb:f1:07:ba:df:54:eb:44:66:a2:
                    fb:30:48:54:32:36:38:8e:83:17:c2:0d:fa:1c:a9:
                    50:32:8c:73:d8:8f:94:0e:0e:ba:d5:e6:c5:ce:72:
                    dd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CA:AB:FC:B8:FE:0C:E9:9B:C9:76:9F:1F:1C:F2:42:1C:5C:CF:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.178.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:81:a0:be:37:bd:69:4e:05:ce:70:bf:41:e3:6a:26:24:82:
         64:32:d9:a1:ed:0e:46:4e:f1:81:ea:ea:ca:62:e7:a5:93:03:
         11:9a:a4:ac:66:1b:4f:33:c6:74:bc:51:ff:7d:75:58:26:64:
         f1:d7:38:e7:fd:81:dc:88:91:e2:f3:a6:3d:d3:95:4e:dc:02:
         87:69:85:db:ed:88:ce:a9:c0:b3:06:34:74:27:6f:64:ad:68:
         45:9d:01:4b:b5:33:bf:4c:ad:1b:e4:78:93:06:a6:3c:78:a9:
         a6:f9:40:8a:cb:be:ce:79:fe:39:ad:06:3f:51:3a:58:c2:23:
         5b:96:fd:b0:da:84:48:a1:16:83:38:8b:da:c2:a9:aa:2c:17:
         37:f9:02:f9:75:83:a9:06:a0:54:68:f4:96:25:b0:47:ad:12:
         b8:ff:3a:69:ea:da:7d:10:c9:25:33:3a:cb:15:3c:fd:75:7b:
         d4:09:9d:75:9c:6d:ad:be:df:73:af:ec:8e:cd:10:22:82:d3:
         d2:27:42:d5:ae:3c:61:64:4a:34:8d:49:78:a1:41:97:eb:20:
         19:fd:21:33:d6:f5:11:f8:3e:10:63:92:7f:67:bb:ab:4f:99:
         2f:68:64:81:f9:52:06:30:39:4f:c0:3b:63:5d:57:73:fa:d4:
         0c:3c:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:22:01 2026 by rpki-client