Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/a2b21db6-eaa6-338d-9a0c-498e8bb096cb.roa
File:                     a2b21db6-eaa6-338d-9a0c-498e8bb096cb.roa (raw, json)
Hash identifier:          31c7YN1XGXefAUHUWgNGRTSBosgbujMOVqBfFG/ynvU=
Subject key identifier:   EE:6F:36:70:7A:C9:9C:2C:7A:D5:0A:45:BE:27:8D:93:C1:7F:61:70
Certificate issuer:       /CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
Certificate serial:       010D0C9F4328584FD3C13DFE2AFDBC5E8975B480
Authority key identifier: A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/a2b21db6-eaa6-338d-9a0c-498e8bb096cb.roa
Signing time:             Fri 13 Nov 2026 14:00:14 +0000
ROA not before:           Fri 13 Nov 2026 14:00:14 +0000
ROA not after:            Thu 11 Feb 2027 14:00:14 +0000
asID:                     136258
IP address blocks:        64.31.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d3:c1:3d:fe:2a:fd:bc:5e:89:75:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
        Validity
            Not Before: Nov 13 14:00:14 2026 GMT
            Not After : Feb 11 14:00:14 2027 GMT
        Subject: CN=3da35087-743a-4c1e-983c-586eb393146b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b9:1a:6a:08:ae:13:35:bb:1b:f1:9b:7a:44:
                    98:9a:c6:26:bb:3a:b9:47:f4:da:5c:8b:d6:ef:09:
                    9e:46:a1:e3:0b:a7:0f:be:78:e7:d1:ef:94:e2:28:
                    75:36:92:91:a8:94:f9:48:3f:92:64:14:54:b3:c3:
                    75:6d:e8:ef:f5:21:3a:f4:a2:10:26:95:33:3c:b2:
                    94:4d:50:da:a0:44:eb:c3:0a:7d:4e:04:dc:3b:9d:
                    13:76:c4:27:c5:ff:c7:26:ea:12:e6:2c:6f:7e:1a:
                    55:ef:a9:89:5f:2e:54:29:34:ff:f8:5b:bf:9d:0f:
                    ca:13:d7:86:e3:38:9a:15:f6:7c:1a:f9:05:90:f3:
                    41:7a:66:79:df:9d:02:c1:94:8c:06:87:89:9f:48:
                    2f:26:d3:ae:4e:fd:c8:dd:6e:12:f8:42:6b:8e:68:
                    e3:24:09:58:03:c8:87:27:6f:0f:36:9b:d7:c3:37:
                    71:64:7c:8c:22:c6:49:4f:b3:c7:36:dd:00:68:86:
                    7a:e3:f0:c4:f5:1e:35:8e:ab:cf:b5:af:b0:85:db:
                    7b:3a:c7:0b:54:5b:8e:f1:08:42:5b:7c:af:96:1c:
                    0f:99:13:c7:87:fe:37:b6:2c:08:a0:40:d8:f9:58:
                    ff:6f:06:34:66:64:a7:bc:ab:cc:4c:12:70:3a:ca:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6F:36:70:7A:C9:9C:2C:7A:D5:0A:45:BE:27:8D:93:C1:7F:61:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/a2b21db6-eaa6-338d-9a0c-498e8bb096cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.31.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ba:b9:ab:25:02:e0:25:a1:96:fb:7f:3f:df:e2:50:a8:2a:
         55:74:ca:52:85:f7:ee:29:25:bc:17:86:8b:80:f0:1e:00:27:
         1c:71:8f:46:51:0e:95:df:6f:02:93:4b:7f:cf:2e:39:41:90:
         5b:b1:fc:1b:73:e7:19:49:43:c4:3e:35:2c:a8:57:69:39:44:
         f1:ad:a9:eb:66:0f:b7:b6:ef:52:a2:d1:85:37:7f:10:95:82:
         9e:b5:d3:c1:5c:0b:aa:03:08:24:9b:95:e7:32:aa:9a:1b:9e:
         c0:a5:83:3d:29:51:29:d2:2f:93:19:24:91:2d:4c:e4:e0:8d:
         db:13:0a:34:13:47:4a:36:2d:80:cb:98:a5:1e:2c:78:fb:3f:
         b8:2a:8f:0f:16:a7:02:26:ff:75:79:e3:99:80:8d:a7:e1:00:
         46:8a:36:4a:ec:ce:3f:9b:34:25:dd:ee:41:6c:c5:7c:20:cf:
         ad:3f:63:f7:66:57:64:22:35:d6:19:99:57:1c:68:8a:30:bc:
         0a:c7:be:4a:fc:ec:df:fe:92:6a:eb:f2:be:cd:8e:4e:19:c7:
         91:43:21:24:e5:a0:29:36:61:0b:15:04:d6:ec:e9:7d:f0:a2:
         b8:02:63:6e:0c:31:1f:70:32:28:96:e0:3a:c4:55:02:bc:ef:
         1a:e1:f2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:30:35 2026 by rpki-client