Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/7a67e906-100c-3249-bd40-ed2077ab4e1d.roa
File:                     7a67e906-100c-3249-bd40-ed2077ab4e1d.roa (raw, json)
Hash identifier:          TNsS/CR4yuADcpSOXZSNczJCrXhI8WI3UYg0BQb8ruo=
Subject key identifier:   1E:07:0F:20:DE:F2:7D:08:3A:A7:75:63:C8:62:A9:D7:7E:72:BA:C1
Certificate issuer:       /CN=aed16f9a-e18e-4208-b0e0-80650f76a403
Certificate serial:       010D0C9F4328584EE38CA010CCDEF06AF20D6600
Authority key identifier: 5F:13:6E:CA:A7:4B:D0:BE:2F:AA:82:A5:0D:79:C6:92:7B:4A:F2:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/7a67e906-100c-3249-bd40-ed2077ab4e1d.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     55003
IP address blocks:        64.74.54.0/24 maxlen: 24
                          69.25.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/aed16f9a-e18e-4208-b0e0-80650f76a403.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/aed16f9a-e18e-4208-b0e0-80650f76a403.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a0:10:cc:de:f0:6a:f2:0d:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed16f9a-e18e-4208-b0e0-80650f76a403
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=787f87ef-edf8-416b-bda4-3e8e3fc03daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:89:95:21:b3:71:46:13:77:a1:f1:54:b6:
                    67:40:d4:52:c7:3a:3d:ba:3c:09:6c:40:8c:fd:1c:
                    2d:fe:c4:36:03:41:1b:26:40:dc:76:1e:b3:df:cd:
                    30:d9:f5:9e:f5:0c:67:7a:57:ae:39:e9:aa:e8:ae:
                    fe:62:70:17:db:08:ca:f8:ea:e1:ee:5d:52:69:76:
                    6a:1c:b0:8e:ac:aa:08:65:bc:22:a0:08:20:5e:55:
                    ca:62:9f:f0:a7:d2:c2:20:54:de:fe:57:8b:d9:12:
                    4b:76:d9:ca:7e:86:83:36:09:93:8a:5b:62:8f:22:
                    8e:e9:83:03:04:6d:13:4f:51:e9:a3:a3:fe:c0:f9:
                    7c:95:de:4b:df:6f:28:e3:96:8b:63:d4:09:af:3f:
                    c5:10:10:36:f5:ad:87:52:1e:0b:4a:a5:6a:04:2d:
                    63:a6:06:f6:aa:29:34:93:54:05:04:7b:8f:69:c0:
                    9c:9e:e7:2f:20:85:2d:e0:f4:14:71:19:36:8d:68:
                    70:7e:cb:9d:96:f6:c5:27:a8:14:14:6e:a5:34:20:
                    78:01:e0:2c:82:8d:3d:13:ae:55:05:2b:0a:d4:4c:
                    c1:d0:bf:6e:35:55:c0:6a:b0:80:d3:22:2e:8b:34:
                    86:e1:0f:46:b3:c7:37:c5:37:1c:48:f2:5e:fe:7f:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:07:0F:20:DE:F2:7D:08:3A:A7:75:63:C8:62:A9:D7:7E:72:BA:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/7a67e906-100c-3249-bd40-ed2077ab4e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/aed16f9a-e18e-4208-b0e0-80650f76a403.crl

            X509v3 Authority Key Identifier:
                keyid:5F:13:6E:CA:A7:4B:D0:BE:2F:AA:82:A5:0D:79:C6:92:7B:4A:F2:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.74.54.0/24
                  69.25.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:7f:ae:91:cc:b9:0b:66:20:1e:4e:f3:ca:24:69:ed:8b:16:
         69:cb:6d:b7:fa:ad:49:b8:6e:c2:3c:0b:11:17:b9:c6:cc:63:
         f6:40:71:c6:ca:34:1e:39:6e:29:4e:ad:80:58:11:3d:43:bc:
         07:e4:bd:4a:50:ef:17:58:4f:d3:85:48:53:eb:61:b3:94:d0:
         d6:f1:a6:3d:68:a0:5f:d5:71:8d:fa:6c:d9:e1:cd:74:f0:85:
         d4:2d:f4:38:f5:6f:1c:a4:1a:94:68:fd:ce:f6:e4:b2:a7:f5:
         04:c6:5b:13:03:71:87:7c:7e:1a:a9:e2:79:ff:c6:51:8c:95:
         86:eb:e9:31:ce:07:6a:b2:a6:e9:f0:2d:e9:ff:c8:e6:9e:c9:
         14:21:f8:72:57:82:0c:fb:4c:fb:96:68:06:db:90:fd:02:ea:
         47:77:db:cd:56:14:1f:45:66:8b:1e:0b:dc:78:91:43:b5:a9:
         78:e1:6f:eb:3d:69:60:05:89:5b:a6:10:78:8b:15:08:54:99:
         22:a4:c8:45:11:34:2d:49:e0:b9:54:95:e7:c1:b4:4f:33:6f:
         ab:1e:3d:ea:3c:88:84:85:49:ec:e4:48:84:7d:f6:f3:20:f3:
         a2:55:2a:37:0d:30:bd:4c:c9:99:2c:b7:a9:fc:df:33:1d:67:
         89:02:2a:6b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7jjKAQzN7wavINZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWVkMTZmOWEtZTE4ZS00MjA4LWIwZTAtODA2NTBmNzZh
NDAzMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk
Nzg3Zjg3ZWYtZWRmOC00MTZiLWJkYTQtM2U4ZTNmYzAzZGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8uJlSGzcUYTd6HxVLZnQNRSxzo9ujwJbECM
/Rwt/sQ2A0EbJkDcdh6z380w2fWe9QxneleuOemq6K7+YnAX2wjK+Orh7l1SaXZq
HLCOrKoIZbwioAggXlXKYp/wp9LCIFTe/leL2RJLdtnKfoaDNgmTiltijyKO6YMD
BG0TT1Hpo6P+wPl8ld5L328o45aLY9QJrz/FEBA29a2HUh4LSqVqBC1jpgb2qik0
k1QFBHuPacCcnucvIIUt4PQUcRk2jWhwfsudlvbFJ6gUFG6lNCB4AeAsgo09E65V
BSsK1EzB0L9uNVXAarCA0yIuizSG4Q9Gs8c3xTccSPJe/n9PIwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFB4HDyDe8n0IOqd1Y8hiqdd+crrBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZWQx
NmY5YS1lMThlLTQyMDgtYjBlMC04MDY1MGY3NmE0MDMvN2E2N2U5MDYtMTAwYy0z
MjQ5LWJkNDAtZWQyMDc3YWI0ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWVkMTZmOWEtZTE4ZS00MjA4LWIw
ZTAtODA2NTBmNzZhNDAzL2FlZDE2ZjlhLWUxOGUtNDIwOC1iMGUwLTgwNjUwZjc2
YTQwMy5jcmwwHwYDVR0jBBgwFoAUXxNuyqdL0L4vqoKlDXnGkntK8rEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZWQxNmY5YS1lMThlLTQyMDgtYjBlMC04MDY1
MGY3NmE0MDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQEo2AwQA
RRk/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAKt/rpHMuQtmIB5O88okae2LFmnLbbf6rUm4bsI8CxEXucbM
Y/ZAccbKNB45bilOrYBYET1DvAfkvUpQ7xdYT9OFSFPrYbOU0Nbxpj1ooF/VcY36
bNnhzXTwhdQt9Dj1bxykGpRo/c725LKn9QTGWxMDcYd8fhqp4nn/xlGMlYbr6THO
B2qypunwLen/yOaeyRQh+HJXggz7TPuWaAbbkP0C6kd3281WFB9FZoseC9x4kUO1
qXjhb+s9aWAFiVumEHiLFQhUmSKkyEURNC1J4LlUlefBtE8zb6sePeo8iISFSezk
SIR99vMg86JVKjcNML1MyZkst6n83zMdZ4kCKms=
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:36:50 2026 by rpki-client