Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6b507d18-2727-3e86-8f29-bbe628923878.roa
File:                     6b507d18-2727-3e86-8f29-bbe628923878.roa (raw, json)
Hash identifier:          LuudrFGc7IfSMa6glmeqx/FPMUFdqgrJEiKeRfnLeaA=
Subject key identifier:   E3:12:89:36:A5:88:EB:8A:B2:7B:67:6F:62:9C:F7:63:61:55:2D:15
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5E62DB675E93AD2E258F4F80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6b507d18-2727-3e86-8f29-bbe628923878.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     19148
IP address blocks:        64.120.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:db:67:5e:93:ad:2e:25:8f:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=b87cc306-4702-4c36-bb83-5f7d27fc1b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:83:21:b1:8c:d7:af:d1:3f:c8:a6:f9:ae:
                    45:c0:c8:36:39:8e:ac:29:b2:66:d0:a9:f2:d3:11:
                    21:32:70:a3:09:8e:8c:c3:f2:54:9f:13:e0:da:9d:
                    38:4c:04:61:c5:b0:68:e9:06:2f:1b:e5:dc:53:35:
                    ec:f0:e5:34:f1:51:47:86:88:9b:22:2d:d4:e8:12:
                    1a:cc:51:3b:e9:cf:bb:28:d2:a0:a4:8a:2b:43:26:
                    d2:b0:e2:0e:ef:78:ce:1c:37:74:cc:19:b6:e3:5e:
                    78:4a:ed:9b:ea:4c:c4:f1:1c:d9:f2:17:8e:28:5e:
                    97:6e:66:b7:57:de:85:fb:f5:a1:50:2a:56:a0:d3:
                    fb:3e:95:5b:62:e4:ad:e9:64:62:97:c1:b2:89:af:
                    43:5a:3a:c3:b0:fd:1f:eb:e9:29:27:9e:68:1c:90:
                    b3:84:0e:ad:72:1f:84:43:52:98:1f:40:2c:28:95:
                    31:27:8e:98:e1:4a:cd:70:bc:ce:b1:e4:f0:ed:e1:
                    fb:fb:34:af:f8:78:6a:23:c4:07:97:d7:38:71:63:
                    10:44:7d:c8:bb:2b:6c:c5:6d:14:31:3c:21:4d:c1:
                    92:1f:ed:fa:83:88:fb:14:a1:e4:bb:0b:c5:fd:38:
                    90:22:cd:2d:91:3e:03:11:36:e4:cf:6c:30:4f:8b:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:12:89:36:A5:88:EB:8A:B2:7B:67:6F:62:9C:F7:63:61:55:2D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6b507d18-2727-3e86-8f29-bbe628923878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:cf:84:38:4a:11:73:db:d9:02:ce:d4:24:d5:3e:ae:45:6b:
         c1:90:da:03:94:cd:ec:ea:ad:77:70:1c:a1:d5:95:88:0d:6a:
         04:8e:eb:df:39:4e:9c:36:74:56:9c:48:2d:aa:d8:9f:b2:77:
         0a:c9:e7:5d:9c:03:c4:80:f3:fa:ea:ec:6d:54:6d:30:b4:5e:
         d1:64:3a:f6:6b:ef:7c:a6:06:84:01:49:d5:fe:1b:ba:c1:f9:
         36:4d:28:9e:94:d6:05:4d:a6:b7:bb:2e:5a:87:6b:83:d3:81:
         1c:56:67:6a:3e:3d:69:a6:97:fd:52:6b:8b:e9:4e:13:00:0e:
         00:01:a6:db:61:a6:51:c0:e3:05:3f:a1:3c:dc:be:b7:4e:03:
         14:e0:73:45:0a:0e:3f:68:54:d1:dd:25:ce:1c:2b:ca:9c:1d:
         58:01:dc:d1:b5:c4:55:ec:57:e4:0e:81:cb:e5:4b:c8:a3:4c:
         4d:9d:ca:47:e3:28:3b:63:de:e8:0a:c8:76:45:62:8c:dc:52:
         f6:a5:3c:13:66:21:50:48:53:53:4b:3c:7c:58:52:2f:d1:4c:
         9b:d2:90:1e:54:a0:c6:cb:22:78:3d:43:94:13:ef:57:a1:c1:
         5d:f7:f1:7f:91:b8:12:99:2b:93:bf:0f:cf:9c:ac:ce:2e:0c:
         b1:d1:7c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:14:29 2026 by rpki-client