Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/be1bace1-e30b-339a-b6e9-cc05aa9090a7.roa
File:                     be1bace1-e30b-339a-b6e9-cc05aa9090a7.roa (raw, json)
Hash identifier:          Qr8YINkTfVDv84Pt6XiYZdUGba0bcQ2XkV55YJvpS/0=
Subject key identifier:   DD:74:1B:21:14:C6:96:DF:4A:44:3E:41:7A:D9:CB:E1:E2:BA:75:2F
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584F82ADB282D7D7891252DD4980
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/be1bace1-e30b-339a-b6e9-cc05aa9090a7.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     397894
IP address blocks:        204.83.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:b2:82:d7:d7:89:12:52:dd:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=6d46e0df-9be2-4637-b52e-e3d5e189dd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:70:26:f3:e6:1d:92:00:74:be:37:f0:f3:
                    be:4e:6b:0a:ff:e7:c9:8c:20:57:35:1c:03:60:71:
                    06:c1:fd:8d:ab:34:17:5f:fd:3c:11:fb:af:37:0e:
                    d2:1b:1a:2e:db:cc:fb:0c:8f:4b:2a:b7:dd:88:4d:
                    e5:55:be:a7:45:a9:eb:a2:d8:b3:09:c5:0d:52:4b:
                    85:c4:2e:3d:e3:f8:53:c3:df:e3:24:f3:93:1f:9b:
                    71:12:6b:ce:6b:f9:df:19:f2:6f:12:30:a8:bc:d7:
                    59:ca:b5:71:5a:db:62:d4:ea:18:50:b8:65:29:23:
                    40:ba:23:e8:ca:4a:e9:df:d5:1a:74:28:36:a0:c5:
                    33:51:f0:db:50:ff:1e:77:0e:da:c6:b2:7f:c0:30:
                    15:65:6b:bb:61:c8:13:22:b8:52:30:2b:19:89:b3:
                    6d:ac:ab:1e:89:38:fd:73:94:6f:19:0e:05:28:28:
                    b7:4a:d1:24:e4:7d:b0:ae:0c:e4:03:66:9f:5c:2d:
                    d7:5e:86:84:8a:f0:1d:64:cc:7a:16:ea:28:d0:f1:
                    20:3d:57:59:48:d4:37:04:77:78:77:21:18:e9:35:
                    84:45:80:3d:7a:15:d6:1b:7f:4b:d4:bb:57:18:2b:
                    86:6e:1f:98:1b:dc:5a:b4:bb:c4:c7:ea:1f:cc:6e:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:74:1B:21:14:C6:96:DF:4A:44:3E:41:7A:D9:CB:E1:E2:BA:75:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/be1bace1-e30b-339a-b6e9-cc05aa9090a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.83.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:2c:d6:fc:ec:f3:76:66:29:c8:e5:3d:a7:fd:de:da:a6:
         a9:63:43:2f:b2:2b:1d:88:a2:4e:02:ea:a7:16:ff:4f:de:68:
         ee:05:8f:9c:c7:39:b9:58:3e:57:22:85:c4:da:54:2f:d6:66:
         bb:7b:0a:8b:16:47:8a:31:c4:c9:10:03:92:fa:da:02:91:74:
         92:9b:53:a9:43:b1:d8:d9:8c:fb:4e:46:8a:18:76:38:33:9d:
         01:ac:ee:df:4a:0c:1d:da:58:2f:20:c2:c8:1d:67:b2:eb:4d:
         89:cc:bc:72:c9:39:8c:b2:67:59:9b:53:dd:48:16:f1:0e:e3:
         72:47:c3:0d:99:c7:ef:63:50:b1:7e:23:eb:c9:35:66:5a:1f:
         74:cc:2d:1c:6f:46:86:a6:a6:2a:a6:48:5c:4d:5e:35:97:a9:
         70:32:34:75:f3:48:cc:a7:cd:4b:db:f5:1b:a8:af:f2:a3:ba:
         bf:46:c8:50:a6:6c:85:32:f4:03:63:77:1d:9f:e3:c5:06:fc:
         62:b0:95:bd:86:02:73:11:96:f3:ef:34:11:97:97:f1:5d:ae:
         67:9d:98:ab:07:0f:8b:e0:bd:cf:a4:f4:1c:27:78:72:90:00:
         2f:e8:cf:04:0d:49:3c:b4:71:e3:bd:10:32:eb:d3:99:d8:f3:
         4c:c1:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:10:43 2026 by rpki-client