Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/c71cd7f1-c056-3040-8493-57a10e5d5057.roa
File:                     c71cd7f1-c056-3040-8493-57a10e5d5057.roa (raw, json)
Hash identifier:          xoS3C6OnEkarbQshogdhSNjFtYJS0IFr5+pjPVRL6u0=
Subject key identifier:   33:EA:4D:4B:CF:36:E6:DB:5C:AB:B3:60:81:96:59:27:AC:48:BB:1B
Certificate issuer:       /CN=3eed6bd4-f589-42d2-9aa7-de279e9aeb04
Certificate serial:       010D0C9F4328584EB2B1C0BCA2405E2604B8E800
Authority key identifier: 47:E1:51:61:48:04:8D:B2:78:F2:2E:4D:3E:44:4D:AF:12:B7:55:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/c71cd7f1-c056-3040-8493-57a10e5d5057.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     8075
IP address blocks:        64.15.23.0/24 maxlen: 24
                          64.15.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c0:bc:a2:40:5e:26:04:b8:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eed6bd4-f589-42d2-9aa7-de279e9aeb04
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=079ef1e6-cc66-416e-a812-2c487920908d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:08:0a:af:70:82:f3:d0:d3:a0:46:46:7f:f4:
                    14:c1:02:0a:b6:23:62:7f:c8:67:de:e3:53:50:af:
                    08:9a:ac:ea:cc:a1:54:23:39:ae:b4:fd:cc:5e:4b:
                    69:e0:dc:09:bb:bd:c4:59:f4:57:50:93:70:d8:85:
                    97:ba:f9:7b:81:2a:9e:7f:74:3a:b6:04:8b:66:75:
                    28:ab:78:ee:04:5f:b7:8c:dc:b6:9f:91:d0:63:b4:
                    d3:71:a8:56:d9:80:73:e7:dc:2d:ac:d8:3a:f8:da:
                    91:f8:24:0e:84:68:da:7d:10:7e:ce:69:bf:18:93:
                    2c:98:8a:78:11:af:e4:3c:15:eb:05:30:fb:1d:a0:
                    d2:26:67:b2:51:ea:31:ac:75:2b:fc:45:11:5b:71:
                    a2:1e:b6:35:10:5e:64:67:dc:52:93:49:64:1c:9a:
                    fe:88:36:4b:22:4e:33:f1:c6:cf:de:86:78:7d:d8:
                    05:36:05:1a:0c:33:e2:61:4b:ac:14:1f:2e:f8:53:
                    0b:7f:04:13:7f:d8:2d:89:0b:f9:c6:0c:2f:7f:3c:
                    8b:37:41:6c:a6:b0:4b:15:68:14:b6:d8:52:5b:43:
                    b1:30:e2:21:08:bd:87:51:a7:b8:5d:82:b7:b3:46:
                    08:7b:f1:8a:9c:e3:68:db:77:af:ad:16:af:ed:db:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EA:4D:4B:CF:36:E6:DB:5C:AB:B3:60:81:96:59:27:AC:48:BB:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/c71cd7f1-c056-3040-8493-57a10e5d5057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.crl

            X509v3 Authority Key Identifier:
                keyid:47:E1:51:61:48:04:8D:B2:78:F2:2E:4D:3E:44:4D:AF:12:B7:55:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.23.0/24
                  64.15.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:db:89:19:fc:e5:fc:fb:b9:d4:0e:85:a8:d0:d4:33:40:
         7f:b1:f3:e6:81:76:0b:90:46:3f:3b:95:be:52:fa:0b:57:88:
         b5:ee:0a:67:cb:94:3a:56:ac:3b:ca:cf:a4:50:e0:58:0f:0a:
         fc:63:f2:0f:b6:1c:ac:67:0d:45:e1:61:be:23:b8:87:16:1d:
         ff:6f:3f:f0:a3:a1:f3:e1:cf:e4:3e:f5:77:4b:56:71:25:95:
         ec:f3:b5:cd:ad:14:d8:18:5c:e1:6d:77:5e:cd:8a:5e:6a:5d:
         fd:c1:c6:8a:12:a1:e8:a7:90:f4:1a:b4:ec:c6:54:8e:5c:b3:
         bf:ad:89:01:80:4d:66:90:e5:5a:de:ff:6f:8b:9b:ce:77:fc:
         87:43:1d:d6:66:38:1f:86:f4:85:f8:de:45:da:e5:07:ec:fa:
         6d:69:9c:6e:2a:a2:a2:ac:51:76:31:2e:ea:53:50:cc:7a:6b:
         54:ed:9f:47:7b:29:60:7f:18:9e:70:89:67:91:75:71:77:fd:
         4f:bb:86:46:cb:be:58:64:93:84:39:11:4e:1c:f0:0e:48:bf:
         fd:14:18:51:04:9f:5b:95:8f:f6:72:1b:d2:30:5d:bb:d9:ae:
         8f:7a:52:67:2b:8c:15:9c:f9:dc:cd:57:75:31:00:69:61:54:
         8f:cd:b0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:47 2026 by rpki-client