Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/d28b11c3-e000-3cd2-99bc-9f0af4ac43f9.roa
File:                     d28b11c3-e000-3cd2-99bc-9f0af4ac43f9.roa (raw, json)
Hash identifier:          T4rnuFLtOu7av64gw3Ip280IPbR7HeAmrvnd1Oj/MzY=
Subject key identifier:   CE:67:F3:49:B0:AD:7F:CB:34:C6:55:90:8D:9B:D7:3C:21:3D:FA:C2
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F4328584EE7BCABC9F416F13169513200
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/d28b11c3-e000-3cd2-99bc-9f0af4ac43f9.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     10929
IP address blocks:        64.15.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:ab:c9:f4:16:f1:31:69:51:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=597620e7-7463-43fb-a33c-6eb65003cb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e1:63:b8:14:08:8b:ba:df:e1:bb:65:73:30:
                    91:13:89:d6:6f:c2:0f:99:5b:c8:96:1a:84:cc:f3:
                    3f:e1:cc:fd:3b:61:c2:a2:69:9c:b2:24:a1:7c:bc:
                    ee:f9:fd:5a:41:b0:6e:52:41:2e:8d:86:54:7d:d6:
                    33:6c:cd:d1:ac:f4:09:44:92:4a:5b:46:63:a9:c3:
                    14:9f:6f:88:a0:29:c7:8e:d9:74:c8:6c:13:6e:56:
                    10:33:60:1b:be:80:d1:78:c7:91:ab:b7:22:09:6d:
                    90:5c:a4:2c:f2:12:06:6c:1b:3c:29:bd:be:cb:ae:
                    5c:40:fb:1f:22:d0:ad:f5:5e:d3:c6:1e:34:8e:69:
                    1f:9f:05:a9:16:f5:af:e8:17:3b:69:8c:56:39:9b:
                    d7:fa:9e:ba:06:62:08:40:4d:45:6e:dd:06:82:03:
                    e0:4e:ef:7d:78:74:24:0c:04:11:25:ea:43:a4:fc:
                    a1:93:4c:f0:fc:e8:65:47:d4:b5:bf:6e:bf:32:4a:
                    14:fb:59:ab:93:5f:09:5c:13:2a:a3:ea:4a:6c:1f:
                    55:a7:a5:75:5e:01:9e:fd:fd:c7:f5:31:09:a6:23:
                    eb:c0:f7:1f:be:20:2f:78:39:b7:fd:b9:2a:6e:2f:
                    d4:2b:85:d8:d3:4c:d9:f8:8e:75:95:c0:55:a4:67:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:67:F3:49:B0:AD:7F:CB:34:C6:55:90:8D:9B:D7:3C:21:3D:FA:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/d28b11c3-e000-3cd2-99bc-9f0af4ac43f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:73:33:fd:55:f4:75:97:18:05:41:6b:31:b0:d0:4d:ea:9e:
         39:db:7c:8b:d5:06:2c:dc:de:f8:79:23:55:4c:53:25:5a:f3:
         46:74:aa:59:c3:72:a6:fa:b1:d9:ec:ce:1b:e8:f6:02:d8:4a:
         8d:94:4f:30:57:2c:ee:1f:fb:cb:78:23:ed:97:45:f8:b5:59:
         82:c2:2e:ec:38:4d:2d:92:78:55:01:72:79:ea:13:a8:1f:b2:
         71:5b:c5:df:15:d7:55:8d:1d:d5:c5:2e:90:bb:3f:7b:e2:ae:
         c9:8b:07:0b:28:13:a4:1e:f3:b2:d5:20:b3:f6:67:c4:f8:e1:
         18:8a:3b:dc:78:50:9e:99:4d:58:d8:5a:10:01:27:04:66:7d:
         a7:3c:69:bf:f9:f5:38:ea:fe:b6:4b:58:2c:ab:f8:71:7e:1a:
         83:b9:86:e3:f2:0d:a8:f5:19:9c:32:9d:e7:61:00:6b:b3:ca:
         98:78:ab:cf:78:2b:42:ae:97:18:b8:1b:77:ff:63:27:9c:f6:
         f9:fa:dd:fc:53:eb:cc:02:51:d7:64:79:9c:18:73:b7:72:8d:
         7a:64:f1:f1:f2:d7:12:db:69:2b:f8:c3:c7:92:73:cb:08:af:
         e4:67:d8:c1:55:66:df:21:f2:af:4b:a0:6b:f8:b7:fb:25:a5:
         6c:ea:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:19:24 2026 by rpki-client