Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0d488a29-f39a-3465-a1ab-f01ea2f550b2.roa
File:                     0d488a29-f39a-3465-a1ab-f01ea2f550b2.roa (raw, json)
Hash identifier:          4QPmqJTeeo31ZGlqgk9N7KDxXfFnjPxxR4m11aOugLM=
Subject key identifier:   48:01:39:D2:5B:3C:B4:F5:40:6F:0E:A2:B0:3F:5E:4B:42:FD:95:F3
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292AFCE1A0CAAB6FDB81FC0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0d488a29-f39a-3465-a1ab-f01ea2f550b2.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396190
IP address blocks:        64.120.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:af:ce:1a:0c:aa:b6:fd:b8:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=6d3a1ff2-8bbb-432f-8c1b-4cfa30357142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:7d:a0:e8:2a:b1:8c:36:8a:d3:56:40:3b:
                    5b:5e:91:27:ea:01:a3:36:9a:b4:9f:26:80:08:5a:
                    8a:75:d0:e8:d9:01:95:89:8b:c2:30:95:fa:b2:78:
                    8a:0a:c4:88:ca:bf:8d:d3:64:98:56:82:d9:69:1b:
                    35:4f:37:21:66:96:c3:94:3f:3e:0a:db:35:45:2b:
                    c6:22:4b:aa:4a:38:e1:48:39:68:e2:bf:16:30:e9:
                    c3:32:48:c3:2c:d9:21:e7:f2:45:1c:a4:e6:d3:25:
                    16:e6:0c:75:6b:0d:eb:ae:9b:a4:de:a1:59:d5:9d:
                    df:bc:0d:d5:bf:c2:1a:b8:35:5a:4e:9f:b3:b6:9b:
                    f7:92:3f:db:82:25:aa:ac:46:93:95:29:bc:4f:8b:
                    de:a6:4e:cd:d5:61:31:d2:a7:9a:6f:fc:03:77:a0:
                    57:63:10:45:15:93:58:d8:60:04:78:c6:c0:18:4e:
                    3d:e2:18:b5:db:5f:40:2c:51:19:b8:58:50:86:4d:
                    39:49:de:92:92:07:fc:39:67:37:8a:49:0f:e5:59:
                    6b:c4:6b:b2:e3:bc:3f:9c:ee:72:45:b6:c4:35:45:
                    26:f0:9a:f7:47:67:ec:2f:56:08:07:21:1f:94:8d:
                    61:f3:17:c8:58:04:02:7f:b6:56:fe:52:67:f5:ac:
                    a6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:01:39:D2:5B:3C:B4:F5:40:6F:0E:A2:B0:3F:5E:4B:42:FD:95:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0d488a29-f39a-3465-a1ab-f01ea2f550b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:a1:5e:44:0b:cb:26:92:e3:bc:75:5d:29:fa:6d:ab:60:
         16:56:29:76:a1:8b:fa:06:25:49:e0:25:b2:1b:3f:ed:b5:76:
         d9:68:fb:dc:ad:d6:e8:4c:30:fc:26:5e:81:a7:04:62:a4:08:
         a6:79:f9:f5:84:fe:ef:ea:13:24:3a:8d:c5:1f:eb:f6:b8:66:
         99:d4:33:9e:d2:f5:73:35:24:03:fe:b6:38:c4:57:57:7f:e0:
         9b:f1:ae:2c:18:55:ae:12:22:06:e6:74:f7:a5:1d:ab:5b:47:
         3e:cb:81:b3:40:5f:c6:50:4e:9e:44:99:c9:d6:36:b1:2d:1a:
         ff:6e:9c:ba:a7:bf:e1:a7:06:b5:8e:48:c1:75:b4:b9:b3:52:
         70:1b:a7:19:b7:3d:f0:57:78:fb:14:6b:9a:39:1b:3b:78:03:
         21:2a:d1:38:e3:c3:58:28:a9:2e:3a:81:84:0b:22:7a:bf:1e:
         00:14:af:62:ce:2d:1f:17:ad:7c:70:fb:d5:8c:2f:d1:79:32:
         79:cf:ac:a0:3e:5f:9b:2c:22:9e:64:90:b5:5d:e4:41:5a:16:
         a1:81:ef:7c:81:da:d5:d8:d6:41:6f:64:ca:0c:55:dd:af:97:
         13:59:8d:53:f3:e3:47:1e:2d:13:bc:4c:05:e7:e9:c9:b6:46:
         80:02:85:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:00:49 2026 by rpki-client