Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e19f540c-3b92-32c3-bafb-9fe1abcbb3d2.roa
File:                     e19f540c-3b92-32c3-bafb-9fe1abcbb3d2.roa (raw, json)
Hash identifier:          2hSFNd8WRD49U6Hm/eWDoqjF5kulq9aWpQbgwr/6prQ=
Subject key identifier:   37:87:3D:D5:73:89:C9:51:40:58:96:C2:4A:0F:ED:95:F9:67:53:23
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584F268D04BFA764667F768A5980
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e19f540c-3b92-32c3-bafb-9fe1abcbb3d2.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     10835
IP address blocks:        64.35.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:04:bf:a7:64:66:7f:76:8a:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=e3359c72-2337-4b50-afd0-6e9c53174740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:3a:ea:ae:b7:4d:1f:d1:3d:38:d2:8b:40:
                    8d:30:81:dd:84:56:64:85:c8:3a:4d:0b:8c:30:ad:
                    96:a4:e0:2d:dc:e0:80:d7:7e:4a:11:ed:51:c6:3e:
                    50:b3:ec:c8:6b:09:54:39:0b:fd:59:70:4b:3c:58:
                    e8:b8:e4:7a:8a:64:91:77:2f:c7:a7:99:63:e9:e9:
                    2b:f2:b4:ab:c6:e1:85:9f:31:76:12:28:19:45:28:
                    e8:0f:96:e9:0a:d3:03:65:eb:73:49:70:fd:71:b6:
                    42:e1:de:7e:6a:21:92:f1:4b:6e:a6:90:1f:a4:c0:
                    bd:6e:fa:38:ae:8f:77:28:d5:bf:17:53:a7:91:d7:
                    b9:66:22:a2:b4:b9:d4:9c:00:a8:8f:82:e2:a2:94:
                    49:dd:6b:a7:2d:35:3f:fc:0a:ff:9c:6e:65:19:d4:
                    3a:a7:fa:5b:35:8b:83:d5:da:61:bd:d7:d4:6e:d7:
                    98:41:ee:ac:09:1e:01:53:98:cd:46:63:65:1c:b5:
                    7f:90:0a:b1:b4:92:99:76:86:44:36:8f:12:8d:62:
                    a7:91:da:9c:23:0a:1e:a2:3f:5a:2d:d5:e8:0e:34:
                    aa:2c:5b:1f:e8:97:f2:27:04:bc:5d:44:b5:e0:0f:
                    ad:41:c6:20:3d:e3:71:b5:a2:ec:d1:41:d6:c8:83:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:87:3D:D5:73:89:C9:51:40:58:96:C2:4A:0F:ED:95:F9:67:53:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e19f540c-3b92-32c3-bafb-9fe1abcbb3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:75:fe:6d:62:41:bc:f5:a8:08:35:12:99:b6:f6:29:07:45:
         b2:b3:85:2f:47:bd:3e:9f:68:6b:76:7a:d4:cb:c9:79:1f:4a:
         92:0c:67:91:88:49:48:e7:dd:83:c6:5f:e6:de:b2:78:a5:b8:
         c7:d0:ab:4e:ea:d7:44:77:60:b4:df:51:d2:80:20:ed:e3:59:
         92:48:db:9d:b4:0b:83:12:69:cb:b0:5e:f2:0f:85:d1:1e:65:
         b9:43:1c:76:30:b4:c1:b8:07:b4:04:eb:14:d0:6e:f9:a9:34:
         e6:7b:aa:d4:17:10:6d:15:ac:c6:96:56:6e:80:f9:c7:3c:69:
         23:37:d1:d7:4f:61:59:4e:d6:5a:5f:50:e3:79:d1:0a:43:45:
         2c:3b:d2:e0:d3:8f:d2:0c:13:72:99:7a:09:b8:b3:52:6a:c7:
         e9:4a:16:72:80:de:ee:a5:c7:72:13:74:1d:c2:8f:92:eb:42:
         e6:2b:00:48:cd:00:8b:d5:db:80:62:b0:99:1d:de:9f:8c:8a:
         2d:0e:72:cc:12:7b:d8:31:d0:5c:a8:3b:d2:99:33:d4:a8:d7:
         21:59:bb:98:09:48:84:88:4d:a2:f5:bc:17:e3:0a:1c:15:fd:
         2c:77:10:a0:5c:9c:20:6c:b4:51:fa:c0:e0:45:02:f9:4a:e5:
         26:8e:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:35:48 2026 by rpki-client