Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/54f8feb3-42e3-383a-b549-0b869d66e268.roa
File:                     54f8feb3-42e3-383a-b549-0b869d66e268.roa (raw, json)
Hash identifier:          f08QgEbTTKE0DfbTO8S6d7YgPRRqqhoYVolQgu5+6d4=
Subject key identifier:   F2:FE:30:50:11:6B:FE:63:8F:5B:92:4B:91:EA:D6:DD:9B:1A:C6:8B
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584F3CE2B8359077453331244100
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/54f8feb3-42e3-383a-b549-0b869d66e268.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     13213
IP address blocks:        64.145.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b8:35:90:77:45:33:31:24:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=b348ce55-e1bd-4cf4-859d-8a882c1f146f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:1f:3e:96:f7:28:93:53:86:85:54:da:3a:
                    e7:6d:43:f7:1e:11:e1:1b:69:25:42:b6:4c:4f:0a:
                    ea:a7:82:87:65:8a:27:d6:96:ca:5b:a7:25:ee:8f:
                    ee:d9:1b:71:00:11:e5:a5:91:bf:97:8f:88:95:2f:
                    4f:4d:87:e7:7a:be:e7:17:8f:ff:99:57:0b:86:57:
                    1c:65:0b:e7:b9:fd:be:83:82:51:18:23:35:ab:8c:
                    ab:47:30:a2:05:de:23:b0:13:59:05:e8:c5:d2:53:
                    8e:25:0f:93:56:7c:94:08:82:a8:51:74:5c:26:35:
                    e5:1e:2d:69:df:19:99:a9:10:03:71:16:35:d2:90:
                    b3:fd:0a:34:ce:6a:5f:80:25:9a:40:3a:55:15:fb:
                    b1:cc:00:74:32:82:83:63:5c:50:a6:01:41:0b:3d:
                    de:52:11:a8:5f:e1:e8:30:f8:fa:7d:d6:6a:9e:49:
                    ed:ae:a7:fa:c6:43:87:f6:6d:93:27:36:03:29:7c:
                    01:5d:d5:dd:d9:47:59:c6:fb:a5:74:46:f0:99:69:
                    f9:63:37:f7:03:4b:17:57:ca:b6:b4:5a:db:da:a0:
                    53:d2:d5:44:8e:03:b2:33:63:04:e0:e2:bb:94:2e:
                    ca:f5:07:e5:a9:93:72:ea:55:c6:ad:71:22:00:f5:
                    6b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FE:30:50:11:6B:FE:63:8F:5B:92:4B:91:EA:D6:DD:9B:1A:C6:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/54f8feb3-42e3-383a-b549-0b869d66e268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:4a:f1:22:f8:80:af:ab:ce:76:d1:51:1c:3c:10:30:40:f7:
         bd:3c:40:54:1e:a4:30:87:08:6e:c6:26:b4:bc:fe:2f:e0:0e:
         88:91:c7:a0:72:49:04:24:c8:08:70:01:e9:56:30:c0:8b:c0:
         68:d2:b9:4e:ce:4c:f7:61:3a:37:18:41:0a:b0:61:e6:47:ed:
         e1:24:1e:b3:1f:eb:ed:db:da:f6:3a:46:10:10:c2:54:0a:92:
         4a:a7:96:cf:cc:bb:8d:ee:0f:78:99:36:07:43:10:2e:16:1f:
         bf:fb:ea:cf:af:79:be:76:05:fa:50:4d:4c:34:a9:27:a0:14:
         5e:41:f5:53:3f:2d:84:0f:d7:aa:76:11:5e:9e:49:01:b0:e9:
         f1:72:5e:1e:a5:19:d3:98:80:19:85:cd:77:df:bd:59:5f:f5:
         bc:89:ae:ad:83:ae:95:d8:5b:6b:dc:72:0b:29:7f:e2:a4:5e:
         e4:b9:af:a9:99:6e:3e:20:5e:52:c0:7f:8a:e5:87:44:a8:e7:
         e5:a2:d2:c9:7f:dc:b8:d6:00:d7:c0:16:e1:33:db:13:26:6e:
         db:62:66:35:cd:5b:0f:d5:eb:ad:37:50:be:be:e9:a1:0a:4d:
         3f:97:46:51:b1:f1:33:41:35:0a:2f:d7:46:bd:e3:61:5b:b3:
         bc:81:19:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:17:54 2026 by rpki-client