Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa
File:                     e62e48d2-4883-349d-8f20-db0ec148275e.roa (raw, json)
Hash identifier:          7dadA1TLEaWs5nak2HkRapQPN0KlcpaNE9+Pqer9R5A=
Subject key identifier:   E2:FB:9B:12:75:04:DD:5E:71:DD:D7:E9:36:26:93:0B:5C:0F:16:8B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DF48FF8B35B894FC15680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     394993
IP address blocks:        64.62.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:f4:8f:f8:b3:5b:89:4f:c1:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=a0470304-0e75-404c-8141-0187cff3b3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b0:f6:3d:1b:c8:a7:85:1c:e5:c7:35:2e:ab:
                    ea:49:94:e2:bb:4e:97:ca:86:f0:96:08:b1:cd:75:
                    3c:98:c7:55:85:4a:cb:b3:c9:7f:e0:6f:8a:24:3e:
                    2d:83:44:76:7c:fd:d1:58:4e:b1:5f:02:82:0b:e2:
                    c7:d1:41:98:e6:40:26:2f:95:c2:c1:da:8d:fa:f2:
                    42:6c:12:4d:2d:5e:12:52:08:48:f9:71:aa:12:43:
                    08:b1:7c:03:fb:78:1e:c6:e1:a0:c2:46:09:5f:01:
                    b5:65:53:80:5c:c9:02:b0:1d:27:19:49:53:72:12:
                    c6:16:4d:a4:ee:07:17:76:ef:8c:00:03:df:53:a4:
                    55:8f:9d:9e:54:ff:4e:35:9d:a5:cc:ff:f9:e9:32:
                    12:ef:48:59:c1:65:92:4a:78:9e:6e:54:34:e2:d8:
                    ae:40:4b:78:14:bf:d7:25:05:5d:aa:6e:0c:6a:6e:
                    2a:8e:74:4b:93:d3:7b:38:e0:d7:17:c6:c7:1f:c7:
                    c6:79:24:99:c4:c6:08:ed:9b:62:d8:70:7f:7a:cb:
                    1f:7e:57:c1:fd:fa:ad:f0:6c:d0:4f:32:d1:e8:83:
                    ae:0c:e7:cf:9b:c8:ec:6a:ec:16:f7:75:ba:23:5a:
                    d9:fd:79:ee:ff:ea:5f:4e:1d:78:7d:db:db:b4:a2:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FB:9B:12:75:04:DD:5E:71:DD:D7:E9:36:26:93:0B:5C:0F:16:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:30:76:56:b5:f0:48:f7:50:53:d2:dc:e0:21:84:41:a9:dc:
         20:ba:fe:17:1e:c7:e7:5f:e5:f8:22:d0:16:1b:c5:54:b3:3b:
         c8:7a:b3:d8:c5:d0:38:a7:c6:23:be:83:30:ec:e7:81:42:01:
         d1:2e:db:19:13:c2:4f:85:45:95:83:91:9c:41:87:d4:66:4b:
         01:95:42:55:b2:00:ba:7c:6b:aa:47:11:64:61:61:6b:ba:a2:
         2b:98:6d:ab:6a:33:5e:9e:e2:d9:22:bb:ee:bb:9a:da:86:4f:
         53:e9:05:b4:cf:c6:d0:ca:7a:f5:c5:3a:c0:51:f8:60:bb:bf:
         73:56:08:be:86:79:87:cb:91:f2:7d:11:b8:b9:70:59:d8:ff:
         92:f4:d4:a4:c0:04:6f:b1:aa:e1:38:a2:be:c8:5c:0c:f4:df:
         d9:33:59:64:0b:f9:79:38:81:46:fa:7d:c4:94:56:fb:51:56:
         01:c6:be:d1:47:a8:71:5b:9f:c7:34:ff:c8:26:0a:53:56:d0:
         80:2e:74:83:e1:ce:1d:90:ab:56:31:a1:12:3c:8d:36:c5:09:
         44:b6:0d:7a:f6:83:f2:67:7f:30:f2:9f:7e:c4:11:5e:a3:0d:
         70:b6:ef:ea:af:5c:ad:a0:6f:bb:bc:d6:db:ef:9a:11:6d:db:
         05:bc:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:48:53 2026 by rpki-client