Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21fadce9-af41-3162-a003-b584e038e418.roa
File:                     21fadce9-af41-3162-a003-b584e038e418.roa (raw, json)
Hash identifier:          qiwHkFwJq/8k/CBTyGqzgdT7fw+QpkWSE98gbfpoTRA=
Subject key identifier:   29:21:9C:D3:CF:3E:5C:D5:7A:BE:F0:6A:F6:D1:48:79:3D:3B:AC:1E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC921A7FF1613470C1E5FA18
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21fadce9-af41-3162-a003-b584e038e418.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     394996
IP address blocks:        64.62.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:1a:7f:f1:61:34:70:c1:e5:fa:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=fdbcc0b9-d615-440b-8958-d7575a3d2dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:95:f0:46:ab:79:cc:94:b3:db:dd:cf:d8:e0:
                    e2:43:8b:6f:59:3a:f0:47:1a:91:f0:ca:ea:2a:f1:
                    2f:5f:f2:ba:ce:2a:47:27:10:33:6c:75:74:b3:46:
                    f5:b7:e9:cd:80:b9:21:03:75:36:c3:96:66:85:c7:
                    0a:81:52:1e:cf:c9:61:18:71:a9:ea:98:6d:ab:a8:
                    af:a8:cc:90:66:a2:40:cb:3c:90:17:f7:d6:cf:5d:
                    66:70:c0:51:14:a9:36:1d:72:ad:de:6e:0f:85:f9:
                    08:79:a8:fb:a4:a3:9d:d1:a4:de:45:70:1d:15:fa:
                    4b:a0:63:d9:1d:ef:60:64:30:9d:64:ec:2b:e1:7b:
                    48:57:87:80:da:08:cf:ca:25:ae:b2:8f:ca:3c:48:
                    f2:d9:36:b8:e6:5f:de:ee:e0:b7:76:87:f1:2a:6c:
                    30:95:42:ed:d4:b7:7e:35:04:91:a2:96:ac:70:39:
                    f6:bd:63:de:1c:1f:56:a0:0c:f9:ac:03:c4:41:db:
                    da:c6:e6:81:4e:42:14:07:6a:1e:fa:d9:05:7a:5d:
                    2b:39:be:d5:1f:57:c4:4d:22:e1:89:01:2a:d8:33:
                    b9:1f:e0:3a:59:d0:13:c1:7d:66:9d:94:7a:b7:94:
                    5c:7f:2d:fd:f3:5d:47:f5:7d:e8:a1:5b:fd:c3:3f:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:21:9C:D3:CF:3E:5C:D5:7A:BE:F0:6A:F6:D1:48:79:3D:3B:AC:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21fadce9-af41-3162-a003-b584e038e418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:43:56:4d:3d:bd:fb:79:92:33:80:03:1e:cc:98:f9:31:8c:
         11:29:af:a0:dc:2f:de:d4:d8:e1:87:85:7a:a6:de:04:d3:7f:
         57:b8:90:dc:87:e4:ab:38:98:52:1d:91:8f:23:11:1e:79:17:
         10:db:1c:12:56:0a:96:3a:7b:fc:89:59:4d:b2:a3:6c:86:52:
         48:89:5c:7d:d2:75:4e:59:dd:78:c5:df:47:9e:34:e0:ea:b5:
         d3:f0:1f:29:84:6a:6c:fd:d5:f2:b4:63:24:04:c3:ec:8f:05:
         2b:1d:2b:d4:51:5c:2a:47:fa:a2:26:3b:00:64:3a:a0:24:14:
         fe:ed:8d:a9:16:9e:da:97:51:2d:64:00:88:23:09:fe:a6:f4:
         1a:d2:0a:01:25:63:50:ce:2a:f7:f1:df:38:94:9a:52:4e:ef:
         7d:32:8e:a2:b2:1f:cd:79:ac:e8:c7:aa:18:a9:87:f2:1a:1d:
         0b:67:2b:04:91:bd:28:cb:f2:ef:15:a5:ad:d0:6e:5b:00:82:
         76:f7:ed:4b:34:51:f2:33:9b:66:44:c9:4e:bb:3e:48:8e:c8:
         51:60:ec:e1:0f:8b:c2:93:3e:d9:f5:1f:1c:0a:2a:11:6f:16:
         31:99:f1:18:74:1c:6f:68:80:66:9b:e8:4f:60:6a:b0:6d:32:
         fc:d8:1b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:53:08 2026 by rpki-client