Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/dab53f12-6091-3a8e-a9cc-39060d3d39cb.roa
File:                     dab53f12-6091-3a8e-a9cc-39060d3d39cb.roa (raw, json)
Hash identifier:          hrbqWwWh17opVyfJDXWqmUk5dsmx2Qca1zgkvDiO1MM=
Subject key identifier:   46:5E:D1:EE:9E:85:62:D0:A8:69:14:9E:41:33:EC:2D:24:4C:78:DB
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F4328584EDDF74785B86827A495217180
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/dab53f12-6091-3a8e-a9cc-39060d3d39cb.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     214640
IP address blocks:        64.112.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:47:85:b8:68:27:a4:95:21:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=d7abebdb-b5dd-4560-b809-ea9c8a324cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:0c:c0:7f:9a:91:67:8a:33:88:15:77:05:
                    ac:ca:26:06:d3:9a:47:2d:e5:00:3a:ff:c9:12:97:
                    2b:62:d1:4d:7f:a4:38:f4:bd:e9:33:10:ee:1b:b2:
                    e1:a5:28:18:2a:e6:5a:f8:cb:34:d8:97:78:1b:52:
                    95:29:46:8a:70:68:4e:61:55:d1:a9:96:4b:5e:8f:
                    dd:3e:e4:9e:74:74:b2:ee:54:d1:b5:50:d7:7a:b8:
                    46:97:34:17:d0:ec:3f:a1:26:0b:0b:05:30:9c:4d:
                    6b:09:85:81:dd:6b:72:de:01:f6:36:c0:c3:b2:95:
                    01:5b:ed:48:cd:2c:43:c4:a6:f7:81:e5:77:34:63:
                    d8:5e:5d:5e:3b:c7:da:a9:e2:d0:a2:af:0f:68:a5:
                    f8:f9:22:69:a5:92:99:38:f8:e4:e1:35:28:d7:2a:
                    78:ca:81:cd:70:ef:01:57:4b:9c:00:ad:26:6e:bd:
                    09:d7:04:52:f3:5b:30:85:bd:96:0d:2b:5c:d1:5a:
                    f0:37:61:1d:a2:94:39:3a:78:7f:49:88:1d:c2:d4:
                    48:9f:08:d6:3a:58:48:3e:41:ad:3e:f8:1f:03:ac:
                    dc:73:77:67:c9:66:ad:b6:5f:1a:3d:4d:00:5d:5c:
                    56:72:40:0d:d4:7b:fc:24:53:c8:df:48:2d:94:44:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5E:D1:EE:9E:85:62:D0:A8:69:14:9E:41:33:EC:2D:24:4C:78:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/dab53f12-6091-3a8e-a9cc-39060d3d39cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:1d:ad:d1:f8:5d:26:3b:6e:2a:29:64:7c:42:e0:9f:67:4e:
         02:a4:98:69:37:da:18:5e:3e:ad:97:55:a4:1a:e5:16:fb:1e:
         1d:12:ca:bb:21:a5:4b:fb:e1:1e:9f:70:a7:5f:7e:c0:bf:11:
         dd:50:1c:10:d6:79:5f:37:47:84:9d:29:de:d4:2d:6a:73:b5:
         6d:0a:66:70:0e:68:ab:7a:4d:9b:62:0e:8d:a0:91:80:00:8b:
         1b:c7:95:d2:30:ed:e1:0e:a5:f9:bc:a1:bc:a5:75:59:c7:dd:
         53:4d:ab:49:29:fe:63:6d:9b:2d:75:b9:d0:a1:68:98:f3:53:
         e1:e7:a0:bd:d9:0f:c1:99:97:8f:7e:90:78:1e:a2:26:f1:3c:
         df:da:0a:b2:7a:8c:39:1e:cf:bd:35:a8:12:09:aa:27:8f:c7:
         1e:34:d2:23:8d:d1:d6:31:2d:f0:c2:d0:bf:f9:e0:bc:fb:82:
         30:e3:58:61:31:70:6f:fa:cb:a2:af:d2:bb:a0:1b:74:8a:9d:
         e4:fb:95:44:9e:5a:c4:84:7f:b6:da:22:2a:42:d0:3a:b1:6e:
         23:56:d0:8b:b1:cf:ea:4f:a8:3c:d9:ac:3e:28:4a:e9:92:4a:
         31:a1:83:06:93:3d:78:5f:4d:a4:37:bf:8a:df:77:05:f0:6e:
         e9:7c:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:21:43 2026 by rpki-client