Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/af703076-c254-3a5a-84d6-6afc2cfb865f.roa
File:                     af703076-c254-3a5a-84d6-6afc2cfb865f.roa (raw, json)
Hash identifier:          LJWQqAc8zvSYa9Zean+hNwFw++4P1slr0j4rAhzgqHM=
Subject key identifier:   A7:7C:4C:41:A9:01:B0:69:30:46:EF:42:39:A3:21:14:1C:53:0A:31
Certificate issuer:       /CN=4936e456-c9b5-43ef-8bdf-475338747125
Certificate serial:       010D0C9F4328584F2C225A519452F5F9C5093D40
Authority key identifier: 96:44:FC:2E:15:E6:90:83:4E:9A:85:53:91:B8:1A:E2:8C:4A:35:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/af703076-c254-3a5a-84d6-6afc2cfb865f.roa
Signing time:             Mon 14 Sep 2026 13:00:12 +0000
ROA not before:           Mon 14 Sep 2026 13:00:12 +0000
ROA not after:            Sun 13 Dec 2026 14:00:12 +0000
asID:                     32415
IP address blocks:        64.139.128.0/24 maxlen: 24
                          64.139.142.0/23 maxlen: 24
                          64.139.145.0/24 maxlen: 24
                          64.139.150.0/24 maxlen: 24
                          64.139.193.0/24 maxlen: 24
                          64.139.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:22:5a:51:94:52:f5:f9:c5:09:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4936e456-c9b5-43ef-8bdf-475338747125
        Validity
            Not Before: Sep 14 13:00:12 2026 GMT
            Not After : Dec 13 14:00:12 2026 GMT
        Subject: CN=62cf1b69-28cb-4f53-8824-6971864a83a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:34:41:a8:39:2a:25:05:ed:7b:8d:cf:ca:5f:
                    ed:de:ba:cc:30:e7:94:48:24:c9:7b:85:7f:69:01:
                    2f:b9:70:a5:28:19:7f:8e:c4:3a:a9:fc:87:f2:7e:
                    56:c9:10:8f:12:02:d7:15:ea:5f:0d:65:ac:76:09:
                    5e:05:ba:73:71:6b:30:0c:94:bf:08:ed:6e:67:a0:
                    80:35:a6:f7:61:45:bc:de:0f:93:32:d2:30:c1:18:
                    b6:df:4b:5d:f2:6b:03:3d:af:34:5c:aa:b1:be:60:
                    ed:20:c9:43:91:cc:16:f4:44:6f:79:22:6d:5b:05:
                    95:9a:96:fb:59:94:04:e1:95:34:37:1c:ed:8b:58:
                    7e:80:0b:8c:ce:f0:88:0f:f7:7c:dc:b5:be:61:6a:
                    c7:0c:13:ef:a5:82:17:92:51:7c:5c:d2:cc:17:ec:
                    63:91:0f:33:12:a1:1e:a8:ca:95:2e:f7:76:d9:c9:
                    1f:35:9b:7b:a2:8e:9f:fb:bf:3a:0e:14:09:1a:e5:
                    59:ee:04:3c:cd:29:04:c3:8e:03:40:57:b4:8b:f9:
                    50:77:9f:fb:bb:83:99:09:2d:3c:b5:55:05:21:4b:
                    ba:83:53:5e:a6:25:c1:12:c7:14:25:dc:c0:f1:72:
                    d9:3a:7f:7f:ea:e8:10:cd:8d:1f:f9:43:af:70:a4:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7C:4C:41:A9:01:B0:69:30:46:EF:42:39:A3:21:14:1C:53:0A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/af703076-c254-3a5a-84d6-6afc2cfb865f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.crl

            X509v3 Authority Key Identifier:
                keyid:96:44:FC:2E:15:E6:90:83:4E:9A:85:53:91:B8:1A:E2:8C:4A:35:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.139.128.0/24
                  64.139.142.0/23
                  64.139.145.0/24
                  64.139.150.0/24
                  64.139.193.0/24
                  64.139.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:81:5d:cd:04:6b:14:f3:33:96:06:02:b8:a8:1a:92:3b:76:
         10:0e:9c:6f:fe:69:fc:b6:0f:65:81:ab:ab:9c:31:65:2e:ee:
         46:62:22:d7:f3:f3:f3:17:7b:2b:b2:45:0b:e2:d7:cf:5a:43:
         ea:67:be:d2:a3:e8:8b:ac:73:4c:47:37:cb:c4:27:16:ef:37:
         b1:36:5a:95:d3:85:ee:0f:1f:e4:76:96:54:6f:52:cc:f6:1d:
         27:c9:c3:79:cd:ca:4b:eb:0a:8f:aa:c8:f7:62:65:da:95:1f:
         2e:1a:f0:58:b6:40:91:f5:32:c2:0f:d8:95:2b:93:ef:0e:eb:
         11:6c:6c:94:a8:b7:79:28:87:d7:06:cb:98:44:bd:77:a6:ba:
         62:88:90:1c:0b:57:c7:e7:93:4e:bd:fd:bf:fa:80:78:13:40:
         b7:15:ab:c0:b7:49:b1:43:1c:53:d7:16:1d:79:67:d0:69:1d:
         ed:f4:04:82:72:4e:98:9d:94:8f:3e:c4:b1:2c:93:cf:af:8d:
         b6:6d:a2:88:20:c9:19:88:8c:9c:71:30:ac:cc:d9:f3:6e:f9:
         6d:d3:57:bf:9a:f2:69:e4:35:87:fb:65:0d:12:4d:6d:b3:10:
         44:e8:6d:2b:73:3a:1c:ed:36:6a:f2:8c:9a:0e:4b:75:c7:3b:
         2e:75:f5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:12:44 2026 by rpki-client