Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/51aa4873-e5e4-3c3c-aa96-48199041db74.roa
File:                     51aa4873-e5e4-3c3c-aa96-48199041db74.roa (raw, json)
Hash identifier:          y0sVRoWLX/pZl2fzwB1cDqxJ/VsC2rCYhfquyUeeDGw=
Subject key identifier:   F3:7C:50:0C:C0:70:62:77:D0:CA:DE:86:F7:57:81:00:5E:D1:AF:F5
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF4905CFA3482922E8E39580
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/51aa4873-e5e4-3c3c-aa96-48199041db74.roa
Signing time:             Thu 06 Aug 2026 13:15:02 +0000
ROA not before:           Thu 06 Aug 2026 13:15:02 +0000
ROA not after:            Wed 04 Nov 2026 14:15:02 +0000
asID:                     396190
IP address blocks:        64.120.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:49:05:cf:a3:48:29:22:e8:e3:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 13:15:02 2026 GMT
            Not After : Nov  4 14:15:02 2026 GMT
        Subject: CN=a31d950c-a7fa-4956-bb46-1e5584dbb00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:55:b7:ce:53:7e:53:d9:16:15:99:30:d8:
                    47:fd:a3:f3:e4:92:cf:63:f0:20:ba:4c:2d:12:df:
                    1e:5d:f6:e4:65:4b:73:b2:f4:58:d9:71:fc:92:a7:
                    ed:46:65:e5:41:11:d6:0d:2d:eb:af:b2:3f:cc:ad:
                    fe:90:15:ff:b1:e9:68:95:ec:f2:62:b2:78:2f:f2:
                    07:4b:5a:a1:1c:11:d3:14:0b:d7:9e:8d:fc:44:4d:
                    0a:e3:ac:c5:6e:28:18:91:1d:94:0c:d1:fb:03:c8:
                    fb:48:02:cb:11:a3:c8:28:f4:76:94:5e:7f:15:9c:
                    ae:e2:dc:99:fb:71:4c:15:aa:04:66:6d:39:42:69:
                    07:32:2e:ff:39:ac:9d:aa:5f:d6:67:69:ba:e7:46:
                    ce:5a:c3:e1:93:f8:59:46:f8:a3:41:e6:c7:c3:01:
                    43:4b:77:6a:36:8e:c7:47:bc:f9:24:62:a7:71:bd:
                    15:fd:e8:d0:da:1b:25:56:7f:e0:a7:83:74:4d:2d:
                    82:28:29:43:e0:e4:53:31:8b:e5:ac:9b:8f:92:c7:
                    48:44:39:cd:ea:77:2b:fb:de:06:84:e2:e4:32:47:
                    c6:3e:e5:31:b3:5a:6a:1d:11:23:6e:6d:26:07:dd:
                    97:d2:0a:ab:5e:cd:07:8f:33:4f:ea:82:68:e8:37:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7C:50:0C:C0:70:62:77:D0:CA:DE:86:F7:57:81:00:5E:D1:AF:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/51aa4873-e5e4-3c3c-aa96-48199041db74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c1:02:88:3b:96:74:d1:d2:e0:fd:c6:7b:d3:41:6e:9c:31:
         da:d1:55:0d:58:4f:db:05:96:f2:7e:cf:25:55:af:ae:22:a9:
         62:06:56:c5:0d:7c:df:7b:1e:39:c0:5a:ca:cd:a9:a3:37:96:
         ab:c2:e7:e8:f7:bc:e9:98:d7:7e:66:2d:3f:63:d9:54:58:0c:
         2e:8e:44:9c:f2:2e:d6:1d:08:3d:b0:e3:63:e1:46:0a:29:44:
         5c:9a:6f:d7:04:b7:f6:03:82:f2:95:c9:1e:fa:2c:f2:a1:1e:
         e7:28:3f:29:d2:61:f5:51:29:53:88:b7:fb:10:d5:ae:1f:77:
         6b:ed:9f:6d:61:d7:6a:91:71:63:d1:71:be:aa:7c:21:e1:ca:
         7e:e0:48:c3:a9:a3:9d:b5:53:4e:9b:40:da:b1:93:ad:1b:4b:
         64:9c:1c:87:4a:58:7c:22:32:df:4b:8d:60:57:1a:b5:d3:a5:
         16:37:67:13:53:25:c0:50:cd:95:cf:b6:e7:7e:72:04:ab:ea:
         72:d6:df:f3:06:3e:c7:15:ea:ab:b5:39:71:77:87:72:e7:a7:
         2b:3f:07:ca:12:63:9f:24:45:6d:b4:8b:92:eb:c7:86:58:4e:
         b6:a8:75:dc:56:a5:24:4b:d9:d2:a5:d9:57:43:d0:35:59:68:
         08:9b:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:37:46 2026 by rpki-client