Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/e89af216-578f-3c6f-a210-0db1bf082023.roa
File:                     e89af216-578f-3c6f-a210-0db1bf082023.roa (raw, json)
Hash identifier:          2kdvUUpJEjU4yx9n8EFt0RlXfDlJE3Nf6m/GntGxQrk=
Subject key identifier:   5E:3D:F4:F1:C8:7C:18:91:1C:E6:FE:05:32:46:84:15:68:0A:1B:EC
Certificate issuer:       /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial:       010D0C9F4328584EC01EF19754D2961C96DE2A40
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/e89af216-578f-3c6f-a210-0db1bf082023.roa
Signing time:             Thu 06 Aug 2026 20:26:04 +0000
ROA not before:           Thu 06 Aug 2026 20:26:04 +0000
ROA not after:            Wed 04 Nov 2026 21:26:04 +0000
asID:                     6939
IP address blocks:        64.74.124.0/23 maxlen: 24
                          64.95.62.0/23 maxlen: 24
                          209.191.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1e:f1:97:54:d2:96:1c:96:de:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
        Validity
            Not Before: Aug  6 20:26:04 2026 GMT
            Not After : Nov  4 21:26:04 2026 GMT
        Subject: CN=ef236d66-64ac-4403-88c4-0d7e9382dd09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:eb:61:81:c9:71:ae:ba:5b:4f:1f:ec:e7:
                    9e:03:3c:39:a7:2b:77:37:a9:a6:ad:06:49:f4:a1:
                    9a:84:f1:51:a6:f0:88:eb:d8:1b:bd:c6:74:d9:9e:
                    87:3a:f5:01:88:c2:70:cc:ae:69:cc:0a:ef:e2:85:
                    55:8d:6f:f1:33:69:77:f2:a6:e0:43:d3:86:07:aa:
                    98:a6:c0:2c:fe:b6:02:e7:0e:34:96:73:58:6a:5a:
                    19:a2:fb:d5:18:54:35:5b:28:7c:3f:27:94:4c:86:
                    87:40:70:48:fc:eb:cb:b5:34:b8:d8:ee:5a:69:57:
                    a8:ec:71:06:01:af:14:6a:8f:c8:3f:65:70:a0:d1:
                    87:1d:d9:04:62:8d:45:b1:bc:f4:02:7c:80:11:ab:
                    54:d7:90:3a:83:f7:68:10:42:53:f4:c7:5a:a1:8a:
                    58:da:5c:54:15:d1:00:8d:b6:8c:37:fe:e0:d6:d2:
                    e8:b9:f0:1a:c8:00:c6:2d:95:f4:87:0e:85:fe:11:
                    d2:71:7f:a8:7e:a4:a2:f4:01:bd:4b:d7:7c:3b:b8:
                    a4:13:52:29:e1:7a:f7:c4:34:00:89:e5:11:64:f4:
                    3b:77:30:cd:f0:9d:c0:ba:69:39:24:dd:09:47:19:
                    8b:44:b5:9b:df:97:b9:51:48:91:88:fa:50:ee:e1:
                    a2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3D:F4:F1:C8:7C:18:91:1C:E6:FE:05:32:46:84:15:68:0A:1B:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/e89af216-578f-3c6f-a210-0db1bf082023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl

            X509v3 Authority Key Identifier:
                keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.74.124.0/23
                  64.95.62.0/23
                  209.191.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d4:5f:7a:4b:a2:ca:4c:af:2f:57:6b:c3:8a:07:46:6b:f6:
         f3:1d:d4:12:9f:88:67:3f:75:c4:4a:9c:a8:21:c4:20:32:06:
         ee:37:5a:23:a3:ab:3a:84:21:13:e6:03:a5:bf:72:15:12:56:
         6a:53:36:fd:b0:b5:65:8f:a0:3a:d7:c3:b3:11:a8:25:0f:a1:
         b6:bb:0d:0e:4e:2c:94:c0:84:e1:cb:14:e7:bd:19:25:6e:24:
         ce:4e:9f:19:62:8e:97:03:97:b9:fc:a2:4d:5b:8f:de:d6:1f:
         d6:4d:be:83:a8:36:f8:8c:49:41:96:74:1a:38:a6:da:3a:b8:
         44:5b:7b:40:6e:56:bf:c3:81:b3:cb:fc:ac:72:90:b4:c5:ce:
         a8:ab:74:6e:40:f6:a7:8e:45:83:85:61:6b:e3:8d:31:96:4c:
         f1:40:61:13:80:f3:f7:d5:b8:1b:9a:8d:82:d5:a1:7f:86:2b:
         06:fb:01:1f:19:80:16:a0:ca:8b:a0:ba:99:99:9e:92:cb:b9:
         0a:0d:b2:97:a9:1c:ae:29:cb:91:19:ed:94:6c:e4:51:d3:6e:
         f0:3d:5a:57:a6:c9:eb:10:73:af:01:27:75:55:18:c0:be:52:
         9c:53:7d:59:61:ca:5f:6f:83:32:1c:2b:5f:e6:50:61:5b:06:
         40:d6:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:22:52 2026 by rpki-client