Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/03bdce56-a5b3-3e8d-9dcd-d6b1327aa262.roa
File:                     03bdce56-a5b3-3e8d-9dcd-d6b1327aa262.roa (raw, json)
Hash identifier:          CW4SmlKz5yuAkqjOJIZMnzTjOqPnJ28G52TKHm3D/eo=
Subject key identifier:   FE:44:40:A3:42:A8:CD:9D:51:7E:C8:43:19:F8:9F:84:DF:92:92:3E
Certificate issuer:       /CN=f0dba087-0567-4455-9983-ac2ca8102281
Certificate serial:       010D0C9F4328584EF9E20FCFF628EB9556703800
Authority key identifier: 72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/03bdce56-a5b3-3e8d-9dcd-d6b1327aa262.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     397032
IP address blocks:        64.49.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:0f:cf:f6:28:eb:95:56:70:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dba087-0567-4455-9983-ac2ca8102281
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=8d1d58da-9581-4f36-a955-16e032ea39a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:01:9b:41:7e:a0:17:d8:b7:22:d1:27:1f:
                    72:31:38:52:ba:24:7c:35:78:f5:02:f9:8d:82:71:
                    9f:c9:41:04:10:5a:74:b8:13:82:c2:98:b9:cf:6e:
                    f7:f6:2c:a3:0c:31:24:70:f1:52:74:23:1a:ce:3c:
                    cc:5d:33:d6:33:dc:e5:b9:ff:90:31:df:ea:5f:c8:
                    c2:fb:c3:80:a4:44:2e:51:aa:26:03:e9:64:dd:e7:
                    b4:b2:53:f1:b3:ab:c6:e1:30:5a:ba:a8:2a:46:cb:
                    c4:f6:a4:f2:60:8b:3b:4c:f8:23:9d:9b:39:96:3e:
                    d9:32:6f:df:6e:bc:85:1b:0b:a6:17:1a:49:a8:ff:
                    2d:df:4b:d3:73:6e:15:4c:73:cc:63:2a:19:96:60:
                    a4:bd:e3:c4:03:84:94:2e:57:24:4d:33:f4:d9:79:
                    ce:2b:51:69:13:ca:f3:0a:5c:28:b1:c3:f6:c2:82:
                    e8:7b:da:6f:ec:5d:29:b3:0f:99:b5:49:04:9f:34:
                    cc:39:5d:41:e8:7f:3f:f8:b9:6b:1a:b8:65:10:52:
                    7b:69:51:8e:8e:81:6e:23:80:43:24:ed:3a:cd:e6:
                    d1:1a:16:a3:10:94:8e:dd:a7:73:db:a9:29:55:70:
                    62:bf:c5:0e:d2:d3:af:15:ff:67:34:b8:7e:b0:57:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:44:40:A3:42:A8:CD:9D:51:7E:C8:43:19:F8:9F:84:DF:92:92:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/03bdce56-a5b3-3e8d-9dcd-d6b1327aa262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl

            X509v3 Authority Key Identifier:
                keyid:72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e0:cd:9d:8d:f1:a4:be:ee:7b:89:03:4e:0b:87:ee:72:07:
         ed:b0:97:2a:23:fd:4a:f9:82:b4:cd:4d:5d:f1:5a:a1:e8:a8:
         b8:d5:1b:c3:b8:d9:d1:3a:7f:02:79:a4:70:06:35:73:85:0d:
         a1:8c:c0:2f:2e:5d:1e:c7:28:73:a3:ae:e3:bb:26:5e:3f:50:
         11:23:d6:d7:9b:8b:27:87:4f:1c:ac:9b:69:77:ba:c4:2a:54:
         14:60:b8:2a:ac:4f:f4:40:7e:bc:7e:68:e0:5c:67:4d:12:6c:
         33:54:21:c8:80:c9:fb:af:59:0c:d9:c7:65:c0:4e:db:e7:d9:
         3a:77:fd:52:ff:42:54:92:f3:ea:0a:4f:db:da:58:d3:9a:8b:
         eb:04:8a:1e:58:8e:d2:b7:15:54:f1:26:2a:e7:7a:b2:60:ce:
         fe:e3:b3:f4:9a:07:88:8a:1e:77:10:81:b0:c4:b9:a8:51:32:
         db:49:d3:46:ee:c4:ce:25:6e:28:8a:de:a3:be:b3:dd:48:fc:
         fd:27:21:41:6a:ff:cd:04:11:f1:72:af:07:d9:c8:44:68:cf:
         00:78:b7:f6:0a:ab:d5:41:8a:f2:96:e4:67:cd:98:0d:94:28:
         e7:da:da:0d:15:3d:4e:27:83:94:28:42:a9:fb:36:af:c3:b0:
         2e:c6:3c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:51:28 2026 by rpki-client