Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/5a3f55b8-fb47-3774-b6cb-f37dbe4d0072.roa
File:                     5a3f55b8-fb47-3774-b6cb-f37dbe4d0072.roa (raw, json)
Hash identifier:          6LjGn398KuVpb9mjWGA1U7QplOQES/MrAcU16gZbPQ0=
Subject key identifier:   EB:20:98:B4:14:AF:F2:CE:CA:5B:D0:B6:54:37:66:28:31:6F:85:F5
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584F7BB2FFC2AC8CDB148B29A000
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/5a3f55b8-fb47-3774-b6cb-f37dbe4d0072.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     399844
IP address blocks:        207.195.114.0/24 maxlen: 24
                          207.195.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:ff:c2:ac:8c:db:14:8b:29:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=4bb17acc-dd49-4aa6-a831-2e2e42bc6f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b1:45:af:2e:e3:0a:a1:6a:21:b2:ea:72:90:
                    54:47:44:9a:3e:df:c5:a9:b3:c0:41:0d:1c:6d:10:
                    59:52:13:b6:59:b8:cd:2e:27:99:73:6c:95:be:26:
                    bd:fb:8e:a3:90:e5:62:fc:e4:fa:d0:0d:03:92:a7:
                    db:39:82:ae:e9:38:61:da:c2:58:d2:27:e2:10:de:
                    32:4e:3f:ca:41:4e:ad:07:d3:4c:da:24:03:66:eb:
                    a6:2d:0c:bf:b9:ee:cf:d5:66:1f:35:88:a2:26:17:
                    d5:27:53:9d:4b:22:af:71:a0:d2:47:91:b6:a0:b3:
                    64:24:f9:23:64:cd:a5:43:cb:3c:33:b7:fc:f9:f0:
                    cb:09:c6:18:5a:a3:3b:db:32:19:05:fa:a8:f8:0b:
                    1d:6f:42:12:b0:dd:c6:3a:41:da:06:87:36:c5:21:
                    f6:b1:7c:0a:27:ee:a7:95:af:d3:42:0d:b2:d4:77:
                    f6:cc:21:c9:a7:2e:ee:00:6a:d3:3e:a3:c6:75:63:
                    6b:d5:06:e9:5b:b1:7a:e6:50:df:80:9f:34:c9:b8:
                    f0:7a:58:97:7e:b4:94:35:68:b1:f1:e2:1b:51:7f:
                    dc:b4:9b:83:80:fd:c8:80:84:ec:02:47:31:9e:f0:
                    c5:14:47:05:49:4e:01:3b:7a:6a:22:d3:89:0a:f4:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:20:98:B4:14:AF:F2:CE:CA:5B:D0:B6:54:37:66:28:31:6F:85:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/5a3f55b8-fb47-3774-b6cb-f37dbe4d0072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.195.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:af:c7:08:6f:eb:31:45:02:4a:57:57:98:49:da:cd:45:3e:
         26:4a:6f:7e:17:0b:d3:15:cb:b6:f5:8f:7a:33:27:b2:44:9c:
         38:7f:da:e2:48:92:62:6b:01:dd:5c:7c:ae:1f:d5:ed:57:7b:
         af:6e:54:2c:a1:e4:bf:86:63:42:5b:fd:9c:63:98:f2:23:b5:
         bf:af:27:a8:5f:a6:35:6e:bc:f0:88:0b:12:fe:9e:37:c8:99:
         21:67:df:0e:14:3d:d6:71:35:55:80:88:98:00:8b:8a:11:7f:
         c8:c6:88:ec:31:00:18:67:cd:2d:82:31:0a:39:95:c1:a3:9c:
         83:e7:70:54:8e:a7:67:ee:89:a9:11:0e:8e:0e:74:ea:b9:6f:
         3f:7a:cb:58:65:8e:81:ec:e7:dd:0b:2e:45:ef:7a:41:de:61:
         11:9a:0b:47:2b:c9:8e:eb:60:aa:1e:6f:29:04:3d:49:d2:4f:
         38:5c:78:d7:2d:09:81:d0:be:c7:fd:22:fe:5b:8b:7c:29:25:
         54:2f:d6:2e:4e:92:3c:d6:2a:68:eb:84:0e:51:79:8c:79:3a:
         79:f1:a8:2f:76:fe:2f:f1:21:17:c4:7a:68:3b:0d:8f:b8:de:
         a7:34:78:64:a9:cc:e8:3c:1f:92:ad:e1:23:47:85:8b:01:4d:
         2a:7b:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:10:53 2026 by rpki-client