Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/dab53f12-6091-3a8e-a9cc-39060d3d39cb.roa
File:                     dab53f12-6091-3a8e-a9cc-39060d3d39cb.roa (raw, json)
Hash identifier:          Niu1NfYZHl4m3W16SETYnVmP07ZO0RR1CCT/jSpxBJo=
Subject key identifier:   59:34:1B:3F:B3:96:02:87:3D:66:FE:0F:64:8C:E5:92:79:DA:B3:B8
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F4328584F7FE2F5E0BD4AE5A910B15B40
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/dab53f12-6091-3a8e-a9cc-39060d3d39cb.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     214640
IP address blocks:        64.112.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:f5:e0:bd:4a:e5:a9:10:b1:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=ed795d6b-61f6-4971-a1c2-c0a46ffb8e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:83:58:b8:f6:38:8b:cd:c5:18:db:17:0f:fd:
                    d8:76:fe:40:73:f2:72:c3:35:20:de:eb:73:7a:98:
                    ee:1b:68:b7:b7:f6:6f:94:fc:d0:3f:97:27:b9:02:
                    1c:88:dc:ae:95:db:0e:3b:66:b2:9a:11:0f:bb:fa:
                    cc:c4:0c:26:2e:05:e2:e3:db:b3:5a:cf:e5:36:d1:
                    44:68:b3:6d:1f:e2:d8:1f:77:12:03:0c:41:2d:35:
                    c8:58:5e:51:8f:b3:d6:46:ff:69:5b:5b:29:96:f5:
                    e1:58:86:3c:e4:d8:56:c3:fd:bc:73:c5:47:43:2f:
                    f7:e0:99:89:e6:a6:2b:9e:cd:28:fe:4c:5d:a9:45:
                    07:7a:99:d5:98:96:63:61:ee:9e:67:f2:ef:da:60:
                    b1:62:17:aa:3b:cc:56:1f:c5:14:26:9a:06:b5:c9:
                    51:73:3f:2c:0f:7e:13:3e:48:be:8a:c2:49:88:3b:
                    da:32:53:d6:15:50:7e:9b:de:0f:13:4b:1e:d5:81:
                    14:ec:e8:43:0d:3a:6e:17:60:88:b4:1e:4e:27:3d:
                    6e:c9:ed:f3:04:4a:23:88:a5:4f:18:7b:37:f6:a6:
                    5a:ab:f2:67:fb:89:94:aa:41:fc:e1:0c:71:9a:20:
                    ad:d5:07:f6:9d:43:2c:dd:b6:7e:4c:7c:fb:a2:ee:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:34:1B:3F:B3:96:02:87:3D:66:FE:0F:64:8C:E5:92:79:DA:B3:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/dab53f12-6091-3a8e-a9cc-39060d3d39cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:61:03:c8:82:89:43:bf:c7:d1:ed:e9:1f:ec:df:26:e2:
         c9:d1:46:13:4e:3e:fa:c0:81:46:29:16:22:4c:3b:be:9d:f6:
         34:12:56:18:48:7c:bf:64:8b:58:4d:7d:30:98:39:7f:01:d0:
         94:2a:b5:23:b9:5a:9c:de:50:19:7e:49:95:66:6d:58:d1:14:
         6b:d9:c8:88:65:f0:9d:c2:6d:e4:7a:e0:d7:ec:2f:6c:1c:6e:
         80:9d:b1:ea:87:ac:ee:db:3b:48:64:4d:29:a8:8c:f5:d7:36:
         ad:bd:7e:3c:7a:53:a0:a4:4c:e8:3f:63:3b:3d:d0:af:2f:ef:
         d2:27:12:cf:60:03:6c:50:07:b8:52:95:10:36:34:94:ba:06:
         bf:88:58:c4:d1:b6:0c:58:d9:0d:c7:92:d5:63:6e:69:0e:95:
         60:ca:7a:4e:5b:54:74:78:9a:de:52:ff:94:f0:51:ae:73:24:
         f1:ad:82:32:74:22:0c:08:fb:d5:af:09:c5:4c:54:48:d1:6e:
         c4:d5:be:e0:68:0f:07:3a:58:ab:6c:9b:2a:8c:f7:63:c1:6c:
         3a:e9:08:02:75:90:d1:2d:41:4b:4b:a3:db:db:f5:78:db:c0:
         f1:2d:c4:50:c9:32:8f:25:ed:b1:be:8c:92:e9:1f:c7:5b:9e:
         72:9d:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:46:59 2026 by rpki-client