Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/80f4523d-df61-349c-826b-8a11749205be.roa
File:                     80f4523d-df61-349c-826b-8a11749205be.roa (raw, json)
Hash identifier:          tlKZ4R9by0vPUOi31EYhW8UZP2q4J2VOvXFL48jh/vA=
Subject key identifier:   18:0C:09:5E:A1:D9:76:56:77:4F:56:C9:64:A1:BB:A8:23:E2:F2:A8
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584F498ADB99F1502313515B0E80
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/80f4523d-df61-349c-826b-8a11749205be.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14955
IP address blocks:        64.68.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:db:99:f1:50:23:13:51:5b:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ce4242d8-f5dc-43ce-9575-dbdbb9bdf2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4a:7b:50:07:8c:ae:7a:67:c3:22:04:21:33:
                    d6:91:e2:9c:15:5a:9e:bd:fa:10:da:6d:45:2c:7b:
                    c0:b9:2b:bb:71:11:b6:ee:e2:c1:da:2a:22:73:30:
                    82:50:a1:b2:39:16:52:cc:ee:04:fa:2c:ed:00:fa:
                    f6:a3:86:ce:89:f3:56:c4:8c:6a:5c:3d:4c:bc:e1:
                    03:af:be:e4:5a:20:3a:ea:5d:04:9f:75:45:ba:f4:
                    f7:f9:23:e9:7d:1a:7e:5b:23:f8:c8:d7:37:e9:44:
                    a7:f8:cf:85:7a:ff:30:dc:01:31:5a:5b:bc:bc:e4:
                    0a:85:2b:a7:59:6d:7b:1a:77:0a:85:55:28:69:17:
                    82:e1:bb:8e:e2:e3:7b:24:86:f0:8b:99:44:00:5d:
                    90:11:0a:dc:73:38:bd:23:49:59:56:c4:cf:7d:cd:
                    4d:b2:05:d8:08:90:6e:19:f0:f4:53:c0:46:a1:a8:
                    bf:89:19:82:34:9f:02:76:70:00:2f:89:c5:80:24:
                    53:92:a3:86:f6:8e:9e:3e:f1:1d:93:12:b8:4d:1a:
                    82:a3:54:c2:26:e0:49:05:5a:3b:3f:fc:2a:0c:47:
                    7f:7f:3b:73:43:85:19:4b:5f:15:bb:39:05:3a:45:
                    d5:88:26:2c:eb:6b:71:36:fc:dc:18:a2:5b:b8:2d:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0C:09:5E:A1:D9:76:56:77:4F:56:C9:64:A1:BB:A8:23:E2:F2:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/80f4523d-df61-349c-826b-8a11749205be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:28:ac:f9:72:0d:06:7e:a0:65:ee:f8:7d:f6:bd:74:65:75:
         e8:c8:4e:78:71:58:4f:bd:49:c8:56:4e:6b:ac:d1:d7:3d:6c:
         ec:02:1b:af:e3:a1:5f:7c:26:f2:93:2d:81:23:a0:fd:ea:74:
         b1:ac:66:1d:40:dd:eb:9f:a6:43:09:ae:b3:7d:5d:06:76:57:
         6d:0b:29:fa:ec:0e:5a:4e:e9:3b:93:be:f3:f9:55:e0:44:af:
         d8:52:d5:23:91:e6:30:74:8c:41:0b:69:81:35:14:9f:17:e2:
         d2:d2:25:88:ca:d7:37:1e:9b:b1:02:00:b2:72:bf:04:44:a2:
         4c:3c:83:fc:a0:bd:d5:45:f0:e5:11:1e:fe:7f:1b:dd:a6:de:
         af:0d:67:70:31:de:ac:06:1f:13:a4:bf:5d:56:14:c3:94:61:
         84:cb:fa:b4:00:df:aa:0e:a6:6f:80:1f:80:6f:6d:2d:7f:72:
         a9:d8:25:8b:11:a0:b9:2c:05:8c:43:18:28:68:b2:e3:d6:42:
         b8:b0:6a:06:52:5f:70:1e:3f:f2:4c:5e:92:d3:ea:b1:cb:2a:
         75:fc:09:ce:c9:8f:a2:f9:bb:97:76:77:e1:32:ab:cd:a8:a1:
         96:c9:4f:a6:aa:e4:5b:ef:a5:d7:e0:0a:2a:b6:56:40:94:6f:
         92:e3:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:47:58 2026 by rpki-client