Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/4e65b898-361e-3f80-89a7-4214db7b7086.roa
File:                     4e65b898-361e-3f80-89a7-4214db7b7086.roa (raw, json)
Hash identifier:          GuSd2zvPkQpfGmYSEV2+JdYMDLDWI272A1NVrvUo8Ug=
Subject key identifier:   38:B7:32:AD:11:AD:05:CF:60:E8:CA:09:3F:E8:1A:08:4F:5B:E3:00
Certificate issuer:       /CN=64b51de8-9235-4199-90c9-93aee2696fab
Certificate serial:       010D0C9F4328584F0D6CEB51A484206A57CFA680
Authority key identifier: 09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/4e65b898-361e-3f80-89a7-4214db7b7086.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     3791
IP address blocks:        199.47.26.0/24 maxlen: 24
                          199.47.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:eb:51:a4:84:20:6a:57:cf:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b51de8-9235-4199-90c9-93aee2696fab
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=ac33542d-76b3-4358-9795-ad8cc5387360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:0e:02:b1:66:c6:fc:1c:c5:cd:5c:b4:c1:
                    e7:06:db:ce:54:cf:05:fa:8e:73:3d:b7:cd:d2:57:
                    e6:6e:4c:8d:cb:05:02:a9:ce:2f:6f:b1:d7:49:e6:
                    38:72:f3:98:51:99:ab:ab:b9:1b:cc:fa:6f:fd:e7:
                    bd:b7:27:34:fe:f7:11:67:c0:98:00:69:aa:5b:fd:
                    14:bf:1c:0e:64:2f:fe:e5:28:63:9e:3f:73:3e:62:
                    f3:a5:6b:7f:82:d5:4b:b6:9f:21:9d:1f:09:0d:96:
                    da:ae:96:78:a1:03:c2:76:87:57:67:90:71:23:65:
                    e4:e3:2a:c5:6e:a1:33:81:bd:96:89:0f:b6:62:b9:
                    6b:91:5b:81:f9:5b:1a:a9:51:c7:a7:72:28:42:25:
                    59:b3:26:cd:89:15:d4:73:a5:6f:d9:1c:5a:36:ae:
                    89:67:b0:2f:dc:71:09:83:e9:29:d8:4b:af:b6:25:
                    0c:0e:18:96:6a:04:34:9f:aa:81:16:c3:c4:ec:90:
                    df:88:23:e5:b4:6b:1a:75:47:2a:a5:df:04:e7:3e:
                    12:89:9a:c6:e5:66:9c:a6:cf:57:31:3f:64:6e:e2:
                    9c:65:fe:76:a8:a2:36:93:b9:7d:ad:23:3e:c7:25:
                    96:99:94:47:3e:85:0e:8a:9a:56:1c:b5:3e:d6:b3:
                    98:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B7:32:AD:11:AD:05:CF:60:E8:CA:09:3F:E8:1A:08:4F:5B:E3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/4e65b898-361e-3f80-89a7-4214db7b7086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.crl

            X509v3 Authority Key Identifier:
                keyid:09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:30:ec:fa:96:21:ab:31:0f:fc:7a:d5:0d:8a:9c:f5:09:09:
         a2:3a:d3:c6:b5:68:99:f4:67:19:8d:b3:4b:5b:d3:ff:bd:1e:
         40:15:7d:16:b1:92:60:81:0c:c9:62:f5:a1:d1:a5:bc:2d:64:
         70:cb:e1:5d:3c:82:9b:c1:53:1b:e8:5d:d1:60:f4:4d:fd:3b:
         1e:e7:1d:d9:28:73:49:18:7a:53:10:7d:ef:49:14:d2:63:4b:
         e3:40:38:73:93:7a:16:ba:14:32:e0:2c:33:ad:79:1d:f1:5f:
         e7:cc:74:a4:7f:cc:f0:7b:d6:ac:b8:e8:d2:11:a9:d0:96:73:
         2e:10:c4:38:53:c5:d9:e0:59:c6:68:0d:50:31:22:21:e7:e8:
         1d:f2:b7:e2:9d:51:81:ce:74:91:c8:22:24:04:d9:06:cc:f5:
         c1:fc:59:2b:1c:fa:4e:d4:7a:c9:40:dd:7a:1d:ab:a5:b8:1a:
         32:a7:1d:02:c4:f1:11:be:6e:bf:ea:4c:8d:41:02:7b:e5:17:
         e0:6d:d0:84:3d:9e:dd:d7:9d:c2:88:8a:16:85:b3:73:50:20:
         d6:d8:a0:e0:89:57:1a:7e:81:49:12:c8:b6:15:66:8d:8c:4d:
         e4:e4:f0:08:e4:71:fa:d7:12:0b:0a:44:56:4f:2e:ef:7a:72:
         7d:15:f3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:55:16 2026 by rpki-client