Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa
File:                     2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa (raw, json)
Hash identifier:          V0Hw8Mj2qE+v9Y4zsbgEnEMByvLqziESS9i7xrzRx0I=
Subject key identifier:   F0:08:6A:F2:B8:D0:B3:78:E3:FB:F7:93:43:68:C9:5A:35:8A:68:5F
Certificate issuer:       /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
Certificate serial:       010D0C9F4328584F71ED99E86469580E6587C9C0
Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     32402
IP address blocks:        64.251.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:99:e8:64:69:58:0e:65:87:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=eef68fd3-4532-4cdb-8545-9e0caaa5f941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:af:38:2c:d7:3d:bd:fd:7a:49:29:a7:da:
                    35:1b:cc:5f:a4:be:e0:81:1b:7c:94:fb:fd:49:2b:
                    29:16:c0:2c:3a:e9:6f:b9:31:5b:5d:06:08:4c:17:
                    ea:95:6b:b0:15:55:36:56:de:85:89:54:3b:66:a4:
                    23:54:07:69:d4:b5:b1:f3:f3:c0:f7:f7:f2:ae:be:
                    df:1d:44:91:d7:d2:8a:1c:3f:6a:c8:7f:18:ab:1b:
                    1b:3b:37:ba:f8:23:55:23:59:31:99:63:f1:ee:fa:
                    06:e5:0b:bc:2a:a5:c7:6d:25:a9:35:50:d4:d8:5d:
                    24:51:68:b1:f0:2f:4f:44:d5:94:2a:58:6a:a9:5c:
                    25:af:d8:91:68:0a:a1:57:97:74:67:b9:ce:67:d6:
                    37:08:92:d7:bc:49:07:28:7d:b2:42:3a:ec:73:d4:
                    c1:50:f6:98:5f:3b:8d:88:27:37:7b:43:04:47:a2:
                    63:4c:f9:51:38:63:78:2b:7a:eb:d8:27:73:3a:15:
                    42:a4:5b:47:ef:b2:ae:ac:66:5b:62:4e:8a:82:0a:
                    aa:70:e3:aa:99:76:44:d6:e8:f5:8d:67:aa:96:a9:
                    ae:cf:84:86:cf:8e:72:b1:1b:ec:80:7b:dd:fc:47:
                    c7:42:b1:52:5e:0a:1e:8a:0b:eb:7b:38:77:ad:05:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:08:6A:F2:B8:D0:B3:78:E3:FB:F7:93:43:68:C9:5A:35:8A:68:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.251.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:58:ce:df:d2:d4:9e:58:02:a4:a5:b7:9c:c5:4e:fc:84:
         22:71:35:2d:b6:5b:f6:6b:95:fd:9b:0d:9b:e8:ec:59:9d:07:
         b7:ed:dc:28:33:90:27:9e:39:2a:f6:96:e1:b9:72:f3:68:26:
         c8:8a:97:86:62:66:b6:52:05:3d:be:26:04:07:50:f6:c6:83:
         39:2f:32:cd:9d:08:70:d7:3f:92:e3:16:ef:10:d7:8f:72:ce:
         49:d0:1b:9a:46:9d:ad:0b:cf:5e:82:7f:f4:aa:00:d5:3f:1d:
         54:43:0f:3d:42:35:28:12:60:ce:f1:1d:04:c0:cf:ed:1d:97:
         07:33:5c:aa:7a:e3:a6:97:3a:28:96:a4:6f:d9:ef:9c:ac:a3:
         4a:0f:1c:db:72:df:cf:14:71:26:5e:33:83:ef:f6:23:63:43:
         10:bb:9b:91:32:cd:b8:96:cd:23:5f:32:7d:cc:7f:b3:27:d2:
         43:8d:a1:c3:03:44:f1:92:b2:3d:98:88:8e:4c:97:62:6d:2f:
         83:ed:a5:b1:34:ed:65:d4:e2:e2:0e:46:8c:fb:99:e0:5f:de:
         28:23:17:01:d8:dc:54:e7:ca:02:01:54:b6:99:bf:e9:4e:a7:
         71:6b:39:8d:c9:d1:89:db:3d:60:00:52:b4:0d:7a:66:5a:bd:
         c1:84:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:48 2026 by rpki-client