Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3795afcf-5858-3b52-83e5-2c52f0334582.roa
File:                     3795afcf-5858-3b52-83e5-2c52f0334582.roa (raw, json)
Hash identifier:          qDKIS/rfVqKj+eQrPJoPNlsdjO3Hw0GNnl6PWyLzeag=
Subject key identifier:   C5:0C:08:8A:CB:F3:EC:7F:AC:97:16:30:F3:1A:3E:31:31:61:16:AA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9240D1DAAFA6EF8F10EE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3795afcf-5858-3b52-83e5-2c52f0334582.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     400228
IP address blocks:        64.62.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:40:d1:da:af:a6:ef:8f:10:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=b7a94944-c155-4dd3-a1fb-3653beea918d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:16:b6:59:81:ab:07:b0:b6:16:9a:34:6c:
                    c5:d8:29:e0:0c:38:98:81:94:04:79:55:d8:af:bc:
                    2b:36:73:4e:ac:6e:22:39:57:99:df:5f:5e:24:b1:
                    78:89:c8:3e:7d:d3:f0:29:e0:b6:8a:74:5e:76:ea:
                    7b:be:e7:34:f1:bc:72:e7:91:44:43:43:28:11:22:
                    51:9f:75:57:91:77:34:c4:32:fb:30:25:52:52:22:
                    5a:a7:b7:62:73:73:14:6a:45:fb:26:96:37:d3:28:
                    0e:fe:a4:cf:cc:26:fa:ac:4f:34:77:9d:a2:22:68:
                    bc:b8:ee:33:62:6a:7d:0f:5d:2c:92:24:4c:d1:59:
                    35:a5:e6:58:58:c4:75:c4:63:2d:f5:c2:c4:b6:c2:
                    9d:c4:c7:2b:39:0e:06:0a:ec:08:36:88:3a:2d:a1:
                    8f:ac:cc:80:2a:85:fa:7a:b7:79:29:30:7f:95:af:
                    46:0b:13:fa:6c:29:3b:62:91:4d:b5:fa:45:22:40:
                    c7:15:4e:4d:37:ff:68:68:78:84:ec:e6:d5:8f:cb:
                    dd:26:da:db:2c:2f:f4:22:31:9e:99:dc:69:87:5d:
                    99:c9:23:d6:43:90:b1:b0:f6:f4:b5:e2:69:51:65:
                    eb:40:11:94:f1:82:d2:fa:54:06:e8:01:72:82:14:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:08:8A:CB:F3:EC:7F:AC:97:16:30:F3:1A:3E:31:31:61:16:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3795afcf-5858-3b52-83e5-2c52f0334582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:44:42:39:91:93:37:ef:9f:65:ea:49:ef:ea:dc:81:f2:a9:
         a0:c9:91:48:27:27:e2:8f:d3:06:24:95:69:8b:00:40:eb:b5:
         e9:77:d2:d6:1d:b8:51:ed:ba:7c:5e:bf:d9:a1:f2:1a:4b:55:
         39:df:08:9c:3a:fb:17:a9:3e:30:a2:3b:91:b1:8b:ae:00:56:
         c1:5f:92:d3:15:03:05:b4:32:0b:9f:55:9d:61:5c:28:25:c5:
         1c:f6:ca:0c:4f:db:46:3d:80:6a:24:50:af:03:6f:ad:91:d8:
         b5:1e:6f:13:27:56:3d:c6:64:a6:2c:e8:59:7e:ec:e8:7c:db:
         6f:9b:3e:b1:1b:5e:ca:70:fe:5e:b0:6d:b4:f7:52:4d:70:43:
         8e:0c:f2:d9:ec:03:d2:3a:1a:c6:df:ee:36:17:50:ca:31:d1:
         63:58:46:e5:61:0d:d5:9e:27:33:d1:c3:05:85:58:f7:62:c1:
         3a:bf:87:a0:f7:d3:38:72:ac:e5:d1:0b:59:0c:2c:db:07:de:
         28:9e:97:e5:31:a6:e8:5c:a8:33:26:51:7c:b1:5c:e8:2c:ca:
         20:1d:ea:14:d1:b1:78:13:a7:0b:44:f1:1d:ba:c4:ff:c2:83:
         04:7e:d2:fc:28:82:f4:a1:bf:9c:45:72:10:3a:3b:2c:1a:f3:
         d3:a9:1f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:47:29 2026 by rpki-client