Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f/387e81cf-72de-335e-a1f1-b6963c672673.roa
File:                     387e81cf-72de-335e-a1f1-b6963c672673.roa (raw, json)
Hash identifier:          GgNvdwI7R+poX7/Hfl9hTfG1FU66uvGXhNWkDADVKKQ=
Subject key identifier:   99:D5:47:CC:B8:79:6B:5F:C4:8C:C1:A4:6F:EE:43:97:97:0A:B0:CA
Certificate issuer:       /CN=e4579364-52ff-4f59-afc0-cd179b0ddb0f
Certificate serial:       010D0C9F4328584EAA520A01BCC8F53C8BEF6100
Authority key identifier: 5D:B7:A4:0D:79:6C:9C:C1:03:19:F5:3E:5C:0B:96:68:8E:A1:75:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f/387e81cf-72de-335e-a1f1-b6963c672673.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     23443
IP address blocks:        192.64.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f/e4579364-52ff-4f59-afc0-cd179b0ddb0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f/e4579364-52ff-4f59-afc0-cd179b0ddb0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:52:0a:01:bc:c8:f5:3c:8b:ef:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4579364-52ff-4f59-afc0-cd179b0ddb0f
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=282eee17-56d8-47e3-933d-f382c1008b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:cf:69:6a:6e:4e:74:53:2d:eb:d0:08:ca:
                    3c:c6:af:40:ac:e4:ae:5c:c5:e6:5b:c8:dd:ee:21:
                    d5:01:9b:ba:3a:7c:9f:b2:04:b4:0f:f3:f4:90:24:
                    91:64:5f:91:1f:08:f0:dd:41:00:1c:55:cb:be:26:
                    86:48:bd:25:1f:62:61:f0:e4:69:30:4b:a7:e1:3b:
                    ec:fa:6f:c9:6d:5b:2e:ff:e6:33:27:e0:ae:09:0e:
                    d3:e8:c8:61:49:1b:c3:a1:9d:06:78:5e:6e:00:ff:
                    b6:51:2c:72:5e:1a:08:53:a4:f4:ce:eb:a7:7b:85:
                    9d:33:2c:6c:a1:4c:d4:5a:0c:5c:8b:94:6f:40:ba:
                    63:51:70:e0:c0:fd:a7:01:aa:97:a2:7e:21:bd:55:
                    65:19:4c:50:90:4e:bc:c5:97:cd:cc:1a:02:a7:31:
                    0a:e1:5d:cc:ff:61:8c:fd:61:c9:4d:41:20:43:30:
                    3b:8d:2e:06:a0:d3:e0:bf:16:b1:7c:50:b2:f6:a6:
                    83:b2:2d:81:a9:31:b8:99:1a:26:50:c9:4e:4a:55:
                    e8:c2:4c:55:b4:5f:1d:01:88:f7:a8:9c:a2:5f:93:
                    c0:48:25:26:04:16:a7:5f:e6:1d:f4:bb:9c:fa:81:
                    0e:b7:79:3c:3b:c2:12:76:69:86:9f:85:15:89:17:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D5:47:CC:B8:79:6B:5F:C4:8C:C1:A4:6F:EE:43:97:97:0A:B0:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f/387e81cf-72de-335e-a1f1-b6963c672673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f/e4579364-52ff-4f59-afc0-cd179b0ddb0f.crl

            X509v3 Authority Key Identifier:
                keyid:5D:B7:A4:0D:79:6C:9C:C1:03:19:F5:3E:5C:0B:96:68:8E:A1:75:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:91:d8:9f:97:54:68:90:29:0b:6f:78:f9:0e:51:3e:84:93:
         e8:7c:cc:3d:fa:50:c5:d0:aa:e2:bb:37:4e:a3:47:81:8e:4e:
         66:9e:66:4e:88:06:55:ac:c8:56:30:8c:02:09:2f:77:6d:8e:
         c9:07:0d:73:3a:54:70:53:7a:3b:cf:28:d1:ff:c1:18:45:84:
         56:00:ac:81:04:99:f8:a4:05:32:7c:2f:a1:6f:56:11:17:38:
         e5:36:f2:50:38:ee:ee:e0:5a:a4:24:9c:68:28:40:96:23:b1:
         d4:b1:12:4d:8c:ff:d2:98:47:59:56:16:49:8a:57:99:16:3c:
         6b:df:02:96:11:c2:f7:c8:12:5d:bc:fb:b9:41:a8:ad:1e:15:
         9f:e3:da:3a:6c:b6:0c:59:be:15:48:26:62:78:55:4e:03:d5:
         95:7e:c2:ab:47:88:e1:45:61:38:a7:38:0f:da:dc:9f:eb:67:
         65:bc:3d:8d:ac:f3:0a:69:1c:1a:af:aa:90:72:4e:6e:57:6e:
         e9:1b:dd:fc:05:1a:cf:e3:60:10:f2:aa:d8:ee:9e:21:45:6b:
         ef:b1:22:0d:66:1e:a0:60:66:fb:81:44:fe:2d:28:1e:95:c3:
         61:e0:4b:09:23:cb:d5:4c:c2:48:a6:21:77:c5:37:bb:5a:01:
         94:ea:98:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:50 2026 by rpki-client