Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/81c3bd46-2def-3974-a875-35b801acf0c7.roa
File:                     81c3bd46-2def-3974-a875-35b801acf0c7.roa (raw, json)
Hash identifier:          J5NrhZQnNEkGOhQNGB3zHX6sWM6IHs6JqWyqsSQjH7c=
Subject key identifier:   BF:7C:54:B3:6F:E4:9D:39:01:11:30:7A:A1:18:DD:AA:70:75:CD:A6
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584F0C077E904D5E2A1D5E6D9300
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/81c3bd46-2def-3974-a875-35b801acf0c7.roa
Signing time:             Thu 03 Sep 2026 01:00:12 +0000
ROA not before:           Thu 03 Sep 2026 01:00:12 +0000
ROA not after:            Wed 02 Dec 2026 02:00:12 +0000
asID:                     8987
IP address blocks:        64.40.134.0/24 maxlen: 24
                          64.40.135.0/24 maxlen: 24
                          2607:9240:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0c:07:7e:90:4d:5e:2a:1d:5e:6d:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Sep  3 01:00:12 2026 GMT
            Not After : Dec  2 02:00:12 2026 GMT
        Subject: CN=f0599030-878c-4ff6-976d-57f191a300a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:af:fc:98:c8:32:16:de:14:8c:aa:43:16:
                    35:5c:4a:56:77:29:68:56:76:28:d9:e9:38:6a:69:
                    92:72:d0:32:e8:85:12:c0:32:5a:9e:ee:5e:f1:3f:
                    d5:a2:ed:c3:18:eb:6b:72:0b:69:41:03:17:d9:44:
                    31:c3:ed:09:9a:bd:6e:21:a6:ec:10:db:4c:0b:39:
                    8d:45:dd:dd:5e:20:10:90:07:c5:8e:7c:6c:5c:73:
                    59:7f:ed:e3:e0:36:44:e4:b1:35:49:cc:3d:e8:86:
                    1b:87:cd:76:1c:8a:5a:83:95:a3:fa:c2:99:6a:20:
                    ee:17:15:71:38:a8:82:49:52:12:48:5c:5d:5c:c4:
                    1a:bf:ab:3e:89:56:ec:c5:91:92:ef:3d:b7:48:2b:
                    e5:2d:2a:77:79:5f:11:c8:0b:c0:d6:01:94:90:9f:
                    7e:4b:49:30:3a:f9:5f:61:e0:2b:37:66:dc:d7:04:
                    ba:df:fc:e9:b9:da:c4:4e:db:75:48:7a:21:66:fd:
                    ab:fd:70:f2:ce:07:1e:30:5d:08:63:4e:fe:24:dd:
                    0e:7f:4a:d6:27:1a:fb:b3:0a:56:60:3e:c9:92:9f:
                    3b:1a:1d:ff:42:0c:0c:82:75:e5:63:c4:9d:3c:fe:
                    b0:e0:62:97:96:1c:d4:80:34:17:ec:39:59:11:4e:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7C:54:B3:6F:E4:9D:39:01:11:30:7A:A1:18:DD:AA:70:75:CD:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/81c3bd46-2def-3974-a875-35b801acf0c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.134.0/23
                IPv6:
                  2607:9240:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:0a:6b:7a:4b:a0:a9:0c:b8:eb:5c:62:77:51:cd:c5:93:b1:
         2b:fa:85:39:fa:1a:91:a3:72:25:13:88:95:aa:f5:0f:28:c6:
         e9:a3:b3:14:de:94:a5:09:a2:6e:c4:60:d8:44:a5:bc:2a:6f:
         bb:f2:54:36:e7:1e:17:95:89:0e:c0:a9:70:68:4b:6a:b5:dc:
         b9:b9:2e:ac:a6:5b:a5:a3:9d:f6:ce:e7:4d:48:a3:40:7e:5e:
         11:93:d4:79:3d:d4:7e:ab:12:ba:40:c8:7e:9d:fb:e8:dc:00:
         33:06:37:27:d6:42:13:ce:0e:91:5f:3b:27:dc:1b:6a:ae:93:
         b7:27:b9:93:9e:ff:75:26:a0:24:53:3b:19:5e:12:a5:a1:03:
         f4:40:50:db:03:e1:c5:cc:89:b0:12:7e:97:1b:54:dc:0d:cc:
         45:49:e7:a4:6a:07:dd:44:bb:20:8d:91:d0:e4:10:67:45:a5:
         33:ac:d7:67:60:96:6e:fa:28:7d:38:d3:b1:e4:ac:01:8b:0a:
         0f:b8:31:54:a0:00:0c:73:a2:7a:32:b7:a2:7c:83:e7:6f:a1:
         bc:43:4c:75:af:5e:d7:82:21:7d:75:3a:55:4b:e3:dd:aa:db:
         93:e3:2b:cb:d5:c7:49:3e:cf:e9:8c:d9:5d:75:6c:96:20:5f:
         b2:74:98:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:41:24 2026 by rpki-client