Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa
File:                     d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa (raw, json)
Hash identifier:          8O+6CJUXSti3bi0psvhTgn3DhgmAhIYodjBesLUw9+8=
Subject key identifier:   53:A2:78:42:B6:97:DB:41:3F:94:A1:AB:AF:71:37:8A:1E:C9:FD:AD
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584F4982F8923B922E174AFC8060
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        64.53.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:82:f8:92:3b:92:2e:17:4a:fc:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c28c73e7-5aac-4107-8544-2b5e9d4141dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:23:ff:b3:4a:2f:99:f5:8a:53:34:c8:f9:
                    c7:b0:be:2b:47:33:21:95:4b:5a:06:23:ca:bb:5c:
                    4e:02:6c:ea:f3:24:e3:4c:01:eb:76:ea:b0:34:cd:
                    e9:61:d4:49:cf:21:da:8b:c7:e1:94:e1:f7:ba:aa:
                    31:58:57:fc:09:c8:df:0c:68:56:33:43:11:2f:57:
                    ce:a0:57:86:e6:77:4e:76:d2:a4:1c:0f:55:ca:3f:
                    63:c1:3c:8e:35:43:a3:45:fc:e0:4f:74:12:b9:18:
                    f7:9f:17:31:3f:2f:c9:40:67:86:3c:aa:a5:c7:0e:
                    f6:34:05:23:6c:9f:37:92:97:a3:24:81:2a:49:85:
                    47:22:f8:e5:e3:53:8a:ba:30:6b:ed:ce:59:b0:a8:
                    43:a5:2e:15:bc:61:b3:17:2d:f3:d2:7b:95:24:34:
                    78:e6:aa:63:82:2c:99:f7:23:ba:8c:42:ed:b7:02:
                    9d:ea:ff:9c:b8:d0:22:27:fc:79:42:e5:6b:8b:08:
                    0f:ee:cb:12:e8:0a:28:14:85:f2:8d:b9:7b:8d:28:
                    53:51:a6:bf:78:95:56:54:1a:bd:5d:d9:5d:dd:6d:
                    55:07:7c:53:05:b6:a9:6a:3c:61:31:3c:6c:6c:cb:
                    30:73:a3:39:ce:3c:b8:bc:e4:fe:07:10:12:f2:84:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A2:78:42:B6:97:DB:41:3F:94:A1:AB:AF:71:37:8A:1E:C9:FD:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.53.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:f5:ad:9d:3c:f8:5d:fe:7a:b9:cc:db:19:4c:3b:49:0e:
         19:91:14:a3:25:75:41:1c:55:4f:c5:b0:2a:75:b3:88:80:f2:
         21:60:6b:1f:c2:4c:b3:a4:62:8d:03:92:17:f5:a4:12:00:4e:
         70:c9:b4:28:af:7e:d8:11:6e:32:24:b8:dd:be:8d:e7:77:98:
         e8:b7:00:2f:81:4a:e6:97:cd:43:8d:d4:a2:d6:60:5c:50:38:
         a5:6c:01:44:3d:e7:a5:56:73:4e:26:72:82:69:63:47:61:fa:
         67:e5:c2:81:d6:03:b2:f1:68:5e:1b:ad:73:f0:c2:8a:4a:93:
         42:0b:c4:b2:cc:f2:3a:c9:a4:cb:3d:88:14:60:01:e2:f4:f9:
         51:dd:57:c0:86:37:6d:74:9a:17:9d:3e:e8:07:45:1b:17:d4:
         a0:da:92:d2:7c:33:e1:21:59:58:8a:e5:11:d9:f9:0b:c2:0f:
         31:5e:60:4d:43:87:b4:c5:a5:a6:06:bc:52:c9:56:d9:90:b1:
         02:7a:36:78:af:12:49:c0:1f:26:42:2b:e8:51:24:7d:87:5f:
         82:83:78:17:62:bf:fe:b6:4c:a4:4e:f5:35:6c:6a:c1:22:23:
         63:46:94:f8:91:ab:27:ff:91:1e:0e:4c:f7:18:5a:61:48:7d:
         77:4b:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:06:07 2026 by rpki-client