Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/2e8acbff-1552-3529-94f8-0a925c87a027.roa
File:                     2e8acbff-1552-3529-94f8-0a925c87a027.roa (raw, json)
Hash identifier:          MRPqTm/r2SCJQQqOP7U8+8IEX6ND9SBAITynSFm2/FI=
Subject key identifier:   CD:FE:31:FB:52:A7:AF:E3:E7:64:BC:23:63:BE:34:9C:2B:CC:67:F8
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584F1897A951802D77836335B730
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/2e8acbff-1552-3529-94f8-0a925c87a027.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     58182
IP address blocks:        64.7.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a9:51:80:2d:77:83:63:35:b7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=511182ea-4d4d-41a3-a337-2b5c777bd1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:d0:56:0a:a3:7f:31:71:24:2d:e0:bb:44:
                    6f:0a:af:f4:d7:2c:72:b5:25:65:42:a4:39:4a:4e:
                    e4:40:2c:ba:a7:41:10:ac:8d:33:d1:6a:9a:29:a7:
                    be:32:8d:8f:18:4a:bc:36:64:34:34:e6:10:75:c0:
                    0b:ff:88:1b:5f:71:b7:a3:c2:01:24:51:d1:d8:f0:
                    03:6c:be:64:c3:7e:fe:77:c2:69:87:de:c5:90:c9:
                    f8:f4:ee:95:e7:a1:8a:a4:c5:01:cc:fd:1d:4a:41:
                    01:36:88:40:ef:df:1a:82:3d:f2:92:85:13:f9:1b:
                    22:fc:88:30:8f:5d:bd:ca:9b:d5:20:21:05:2c:ab:
                    8d:ce:93:c0:28:23:de:9e:0b:e8:49:22:8d:32:a0:
                    a8:af:08:b0:2d:1f:5d:39:20:09:c8:97:19:3e:e0:
                    56:3c:19:84:0e:a5:66:b1:71:55:8a:ef:a3:e0:a7:
                    02:c9:f4:09:d2:91:32:29:ad:dc:28:03:cc:c4:fb:
                    a2:f0:67:a7:68:c6:3e:84:6c:1e:04:33:88:c9:b2:
                    89:b7:fa:57:ae:24:a8:f2:6c:44:5a:dd:69:d7:a1:
                    58:64:67:f0:62:d3:6c:bd:b1:9c:10:aa:4e:ae:09:
                    ce:0e:79:83:88:2b:34:96:39:14:24:7d:4e:06:d3:
                    b4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FE:31:FB:52:A7:AF:E3:E7:64:BC:23:63:BE:34:9C:2B:CC:67:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/2e8acbff-1552-3529-94f8-0a925c87a027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:dd:23:b1:67:aa:4f:6b:96:cf:9c:e5:92:c6:f5:94:e0:
         ec:d3:98:6c:09:c0:df:30:e1:b0:84:56:44:6d:86:12:82:68:
         f2:cb:10:4b:2b:da:51:98:a9:00:cf:b1:b9:5a:0b:4b:d4:37:
         a3:f7:2f:45:f5:fc:17:92:ae:05:ef:a5:f8:d5:d9:7a:4f:69:
         2a:b2:ac:7f:f7:c0:bd:7a:93:77:bf:23:db:80:ec:72:0b:ed:
         a1:16:ed:6a:8e:a9:17:24:4c:a8:08:59:b1:bf:b4:0c:70:be:
         6e:9e:c2:a3:01:67:d1:ee:ce:50:a2:6a:e3:f1:9f:9b:71:76:
         86:ba:3a:55:6c:16:c4:49:b1:98:ff:12:cc:f1:de:fd:4c:8d:
         9e:5d:91:6d:49:61:1d:c6:48:81:e8:1a:f8:61:d0:51:0c:d2:
         30:df:99:e1:47:03:c9:7e:ea:be:a4:0f:4b:23:5c:52:22:6e:
         e7:1d:c1:e5:c4:9b:86:88:6f:2f:e2:05:ad:6c:88:14:b1:ef:
         6b:93:eb:92:ee:95:55:f8:1b:ef:00:8c:4c:79:59:c5:7d:a2:
         0c:bf:f7:cd:3d:3c:5d:b4:2f:a5:2c:cf:df:f7:31:73:62:b7:
         d3:5c:2b:42:e5:f8:b0:e0:81:63:9c:8c:bb:56:c8:b4:01:7e:
         12:3d:9b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:33:08 2026 by rpki-client