Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/b5985cb8-9a90-35e0-8dcd-032ac1635309.roa
File:                     b5985cb8-9a90-35e0-8dcd-032ac1635309.roa (raw, json)
Hash identifier:          RqlR+XOAdyfk9VYVPTPXEjTLyeitEfjeum0htKMx4/I=
Subject key identifier:   E5:41:9C:C3:DB:9B:54:53:FD:DA:13:37:F8:EF:C0:CA:73:51:1D:E3
Certificate issuer:       /CN=64ec5258-02d3-4bd3-af76-7496ec09cb15
Certificate serial:       010D0C9F4328584F2ABD30E5F362F965D96C8D60
Authority key identifier: 3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/b5985cb8-9a90-35e0-8dcd-032ac1635309.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     1097
IP address blocks:        216.146.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:30:e5:f3:62:f9:65:d9:6c:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ec5258-02d3-4bd3-af76-7496ec09cb15
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=4e37cc5f-5d0e-4d15-a110-2b242b976d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:49:f1:84:60:3a:c2:ae:6d:bb:bd:b2:6d:
                    a3:eb:9e:ad:cf:c8:dc:9d:79:31:bb:15:1e:fe:e6:
                    63:f0:82:e2:af:1d:97:3e:be:7d:ac:d1:12:9a:3d:
                    90:d8:e8:9e:12:ae:e9:f7:03:e0:6d:93:82:2f:ac:
                    db:9e:c3:6b:1b:5e:c9:5b:a4:e7:fe:02:c0:52:7a:
                    af:de:36:41:93:2f:bf:d3:c2:08:a1:bf:60:11:bf:
                    89:93:6e:3d:ac:d2:4d:c1:ef:9d:c4:c9:8a:d5:5f:
                    f7:db:cb:01:eb:20:72:8b:07:e0:4b:68:c7:e1:0e:
                    7e:ad:38:54:61:9f:2c:74:5d:16:70:90:00:d0:0b:
                    e5:ed:fb:7a:de:f9:97:3f:53:5a:d5:59:78:7e:f9:
                    94:d8:dd:12:71:a1:f0:eb:86:61:dc:ca:0f:ff:61:
                    f2:cb:12:a0:d5:39:5e:d0:ce:dc:ca:77:90:d5:db:
                    2e:fc:33:be:c3:dc:77:85:cf:ff:e0:b7:9b:5f:67:
                    7e:d7:01:a2:7b:53:b4:ad:b6:09:7d:7d:be:32:ad:
                    33:03:52:11:63:b3:3d:85:53:fb:08:e2:04:f0:7b:
                    2d:59:f7:f9:e3:e1:16:77:ac:21:bb:95:24:11:f7:
                    02:d2:1f:f2:d2:7e:99:2d:80:29:53:7a:7f:98:4e:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:41:9C:C3:DB:9B:54:53:FD:DA:13:37:F8:EF:C0:CA:73:51:1D:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/b5985cb8-9a90-35e0-8dcd-032ac1635309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl

            X509v3 Authority Key Identifier:
                keyid:3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:9b:00:bb:02:49:21:ee:85:3f:e2:b2:7d:81:f4:65:ba:2f:
         ad:8e:fc:d4:64:95:10:d3:c2:e1:e2:3a:8c:f9:9b:15:14:47:
         2c:3e:f3:89:a9:98:ee:f0:7e:23:61:71:fb:f7:43:cd:2b:47:
         18:7f:0b:8e:99:2f:a1:3f:8b:67:b4:68:11:f2:61:63:3a:7e:
         01:55:cb:9f:85:47:74:53:5f:a7:e5:69:c6:8c:83:2e:ae:1c:
         e5:09:58:ca:1d:7f:97:e2:34:a0:9a:8d:07:ae:c3:f5:84:c9:
         ea:68:ce:f1:58:b3:33:23:8a:b1:9f:3f:99:ac:7f:ea:dc:b6:
         ab:3d:ed:a1:70:9d:bc:bf:91:f1:c5:73:b5:3c:5b:24:27:d5:
         6a:07:cb:6c:5b:09:1e:16:3d:d7:e6:db:3a:85:40:d3:d8:02:
         3d:b3:55:00:bc:db:ab:3c:f0:7b:14:c8:cc:64:46:29:0d:1c:
         34:98:98:a7:1e:c5:94:87:c8:3d:8a:a1:c4:4f:a3:c6:d7:05:
         d4:7d:f6:f8:c2:d6:c6:ad:78:5a:e8:3a:b5:d6:f8:f8:26:9b:
         b9:51:ff:83:cc:32:c2:6b:fd:4b:7e:f6:fe:3f:92:50:98:be:
         29:b6:80:2e:1d:08:2f:45:f7:d5:a4:0d:9c:3d:b3:85:23:e1:
         c2:f4:99:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:21:35 2026 by rpki-client