Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa
File:                     8462c1ed-9529-306f-9950-18fd383eb4c7.roa (raw, json)
Hash identifier:          NKe7WDoexLVMWjdBX+/wVyZO5pSrJxCW607UOv9+Qig=
Subject key identifier:   7F:40:44:5B:F1:21:AA:51:36:C1:9E:15:E5:A4:3B:DE:C2:C3:6C:79
Certificate issuer:       /CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8
Certificate serial:       010D0C9F4328584EC7A1CA3BC81810E5BFF3C1C0
Authority key identifier: 37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     64223
IP address blocks:        192.251.56.0/24 maxlen: 24
                          209.94.85.0/24 maxlen: 24
                          2620:70:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:ca:3b:c8:18:10:e5:bf:f3:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=15173124-5465-486d-8e46-bc1438d55359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:47:41:37:71:9f:14:50:e8:4f:1d:7e:94:81:
                    b8:f5:b1:85:12:51:49:6b:e8:19:ca:ba:99:09:bc:
                    cd:d8:65:7f:67:07:b8:ef:88:1b:26:5c:67:4e:6f:
                    16:44:2d:e8:38:a5:6b:37:41:61:c0:b0:5f:0e:36:
                    f0:d9:2c:12:63:55:32:9d:92:2a:15:5b:20:b6:25:
                    5c:bf:87:05:7a:a4:f2:c9:87:fe:9b:0b:9c:1e:92:
                    22:97:a0:5c:40:98:7a:98:92:7e:23:5a:a9:29:67:
                    98:da:ad:79:c3:0f:ae:ae:f5:9c:eb:d1:78:52:28:
                    42:79:92:a3:f6:aa:81:0c:f1:c3:e7:dc:52:c8:b7:
                    f5:00:a4:0b:b0:cb:85:f4:96:30:7d:3c:fd:2a:aa:
                    86:3c:0d:43:0b:42:f6:d2:f8:b6:6a:4d:79:6e:93:
                    bf:47:7b:4e:b5:1d:24:42:9d:4e:87:b5:84:ad:c2:
                    7b:af:64:84:f7:0a:77:7c:45:b6:27:c7:c3:b1:4a:
                    7d:ee:d9:18:a7:b6:75:49:51:3b:a7:e5:3a:14:cd:
                    9f:70:98:74:0a:9c:a0:11:7e:f6:e1:e7:c3:70:d1:
                    8d:f8:59:36:1f:45:68:d8:31:b0:63:9c:1f:50:65:
                    3e:06:0a:56:96:0c:14:86:76:ca:a5:a3:64:13:87:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:40:44:5B:F1:21:AA:51:36:C1:9E:15:E5:A4:3B:DE:C2:C3:6C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl

            X509v3 Authority Key Identifier:
                keyid:37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.251.56.0/24
                  209.94.85.0/24
                IPv6:
                  2620:70:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ee:8e:4c:1f:e9:67:b9:52:e1:36:4b:37:bf:6d:af:78:c4:
         6e:cd:54:75:f9:25:fe:a1:5b:83:cd:c8:78:0a:2f:a8:44:28:
         d6:38:18:20:05:91:97:19:f4:25:89:09:29:ed:9d:c3:0f:33:
         02:18:70:19:5d:ae:12:f8:e2:64:64:3c:1c:11:32:8f:69:8b:
         0d:5c:a7:7a:0e:92:95:a4:14:71:bc:73:73:b9:e2:29:4a:9b:
         b3:fb:51:dd:8f:3b:f7:18:33:e7:ea:08:0a:66:24:23:11:81:
         52:1a:94:c2:51:8c:e8:5e:f3:7b:d1:85:23:5e:bc:bc:87:61:
         17:63:9e:be:64:71:61:9f:6a:e7:dd:3b:e8:70:36:6f:d5:bc:
         e3:35:66:c2:30:c8:0c:30:53:08:8a:3f:9f:d4:49:f9:a8:4d:
         81:bb:6a:48:00:14:16:ca:e5:68:35:9f:80:91:00:a8:44:00:
         3a:ea:23:bb:fe:8b:79:0a:b4:27:14:25:d0:6f:db:a3:98:52:
         42:ff:72:a3:de:99:af:c2:1a:ad:17:bf:4f:4b:37:ba:72:7b:
         45:46:4a:21:29:c4:49:9a:00:aa:53:eb:15:0c:65:35:5b:b2:
         16:03:a6:f7:67:30:c7:44:98:16:fb:86:85:a3:32:5a:e2:2b:
         ef:ff:d8:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 12 14:27:27 2026 by rpki-client