Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/46bc93dd-2d2d-3a7b-8837-053957c750fa.roa
File:                     46bc93dd-2d2d-3a7b-8837-053957c750fa.roa (raw, json)
Hash identifier:          DpT6dH7UwfcpJiokVCzUvCoHtXM6BJ+WRRupRZqYQU4=
Subject key identifier:   B2:CE:86:7B:89:DA:8F:06:92:AE:DB:85:AF:06:35:D6:E3:08:AD:FF
Certificate issuer:       /CN=5c24b227-71d8-4de3-9a17-e538fd673530
Certificate serial:       010D0C9F4328584EC371C7102DE44AD636B73860
Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/46bc93dd-2d2d-3a7b-8837-053957c750fa.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     22418
IP address blocks:        64.118.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c7:10:2d:e4:4a:d6:36:b7:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=791783bb-902d-4ba7-883b-c4adbd147264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2c:0b:2f:74:8e:34:43:ea:47:b0:54:86:40:
                    43:78:44:33:ee:c4:bb:b4:c1:72:73:2f:6c:21:a7:
                    d1:99:d8:61:02:4a:27:5b:9a:b2:60:47:0b:a0:3e:
                    d5:51:c0:b6:ae:39:ea:3a:d4:a0:06:ea:10:36:48:
                    1f:ad:58:89:c8:46:cf:32:27:1f:6c:af:ac:7a:8f:
                    ec:e2:69:e9:6d:02:e0:d7:0b:07:db:63:c3:4e:66:
                    c5:31:ad:ff:f7:e4:0f:8e:27:7d:09:8c:73:1e:67:
                    c5:f7:c4:eb:54:4f:79:11:ff:0c:dd:aa:e5:0f:8e:
                    ca:63:c0:b1:5a:71:40:e7:02:82:e7:fa:20:45:5a:
                    d7:c8:e8:62:60:7c:12:42:be:e4:d7:af:c9:7c:aa:
                    73:fa:0f:27:32:f3:55:b7:dd:48:52:46:15:62:d1:
                    7a:b0:1d:ab:ba:30:b8:7a:eb:32:a0:50:d1:1c:4e:
                    be:3c:67:f2:2a:f5:d3:3f:41:86:c1:94:ac:44:84:
                    27:3c:0a:5e:ac:12:93:18:d4:6b:b5:de:05:fe:cd:
                    07:18:fd:b6:ff:9c:a3:ed:2d:aa:e1:59:fb:d2:51:
                    79:89:f5:77:43:be:fd:37:f1:5b:e1:d1:86:63:a6:
                    bf:5e:63:b9:be:62:2d:82:81:74:5c:48:9c:e5:f7:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CE:86:7B:89:DA:8F:06:92:AE:DB:85:AF:06:35:D6:E3:08:AD:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/46bc93dd-2d2d-3a7b-8837-053957c750fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl

            X509v3 Authority Key Identifier:
                keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.118.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d8:cc:f2:58:f9:5b:b1:42:84:85:2e:6a:d5:91:48:76:d4:
         69:2f:af:69:95:58:21:55:e7:84:8e:30:da:5b:54:44:b7:2c:
         82:06:97:42:f6:43:ef:dc:11:bf:bd:f9:33:9a:fd:78:74:6b:
         16:32:ed:0c:e7:fa:19:ad:88:e0:1c:6c:7b:65:cb:1b:cc:27:
         ec:4d:5e:73:6e:e9:53:0c:76:5a:4f:fb:0d:04:58:d7:17:ce:
         fe:ae:2b:ff:86:b3:da:34:fb:e7:1e:9c:72:d4:d7:22:f0:42:
         19:41:5a:45:6e:6c:61:11:e5:f2:fd:74:71:d3:f6:7e:5e:2e:
         04:bd:7b:47:e8:3c:9e:43:3d:fd:6a:86:b9:99:e3:48:3a:bd:
         28:61:2e:38:04:1f:b4:45:9f:a1:a5:0e:16:09:1c:df:7e:c0:
         a6:22:36:9b:90:d9:8f:94:72:d6:ba:05:c1:49:16:5b:8f:14:
         76:05:35:48:11:3b:e8:2a:4e:93:1e:78:49:4e:ea:72:1b:92:
         df:1d:7f:4f:2f:17:7e:85:8c:c1:4e:4c:9c:f7:40:66:24:3b:
         6f:34:2a:a0:72:63:d6:66:c0:4c:73:b5:ca:f2:aa:25:e9:6d:
         eb:23:7b:00:e7:c5:35:8f:5d:7a:4b:5d:26:02:fb:19:bf:49:
         78:f0:bf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:18:01 2026 by rpki-client