Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/0c31095a-f221-3a40-954f-4edf440bb06a.roa
File:                     0c31095a-f221-3a40-954f-4edf440bb06a.roa (raw, json)
Hash identifier:          jY9A9K1oTAL21rBCAPtI0jCZud2X4+iMMhAD53Av53s=
Subject key identifier:   3E:6F:0A:D0:8E:8A:72:F4:B0:00:33:18:C8:71:FF:A7:BF:57:8B:82
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584F1467A9AE2B82F36615743C00
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/0c31095a-f221-3a40-954f-4edf440bb06a.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     398465
IP address blocks:        64.84.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a9:ae:2b:82:f3:66:15:74:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=70289d8d-906a-4f0a-b664-fb4fa67a2449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:01:d4:73:2b:16:71:64:3e:5d:1c:ed:f1:
                    e2:3c:99:4f:33:0e:cb:91:c9:bc:8e:90:92:44:46:
                    62:e8:38:6f:07:11:87:19:9b:59:e5:a3:af:7e:23:
                    9f:33:28:30:35:a7:db:25:c5:bd:72:2a:bf:66:0b:
                    76:68:6e:f2:c7:02:95:78:be:18:03:3f:6b:f8:27:
                    eb:3d:60:3d:6f:0c:48:fb:f1:c9:35:b2:c8:20:65:
                    95:a3:d1:5d:42:7a:37:58:97:92:c8:22:9a:0e:bc:
                    01:86:ec:6e:f8:9e:12:61:cd:71:22:7d:59:6a:87:
                    fd:16:6d:25:71:1d:f0:4e:db:71:cf:af:28:6e:70:
                    7f:9b:39:e2:35:cd:8e:c0:64:ef:d9:c7:b5:e7:47:
                    2e:43:3b:3e:7c:e1:22:06:ff:3c:4f:af:59:aa:33:
                    6b:f4:bd:e3:cf:7e:47:44:83:a9:ff:83:b8:a0:c9:
                    ee:fb:48:0d:2f:ff:b6:60:50:c7:1f:75:0a:91:49:
                    19:bb:70:4a:18:7f:86:da:62:3d:d7:41:b3:fa:e6:
                    2e:c7:b4:3d:e8:3e:08:52:87:3c:d3:39:25:18:7c:
                    a9:9f:df:82:12:4c:1a:5b:d9:59:e5:1b:e7:20:a0:
                    b3:91:98:66:23:51:e8:a0:30:ca:a2:5c:4e:82:50:
                    bd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6F:0A:D0:8E:8A:72:F4:B0:00:33:18:C8:71:FF:A7:BF:57:8B:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/0c31095a-f221-3a40-954f-4edf440bb06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d8:4f:e7:5a:67:61:f6:ca:6f:ef:b6:d6:8f:f5:d0:67:a6:
         66:e9:68:97:5d:9f:93:19:21:d5:4b:4c:f2:9a:d1:6d:68:82:
         dc:f2:ee:98:8c:35:a3:e2:01:0f:ec:70:52:63:5f:9e:ac:6f:
         0e:19:c5:cc:cd:a2:dd:21:03:32:a4:0a:7f:bb:29:81:88:18:
         b1:d7:e7:a5:ed:8a:11:e9:c6:e1:a3:07:47:a9:f1:86:cf:fe:
         f0:bf:c7:f9:46:73:f7:c9:82:ca:ea:f1:0d:70:86:e9:e2:44:
         e6:d0:7d:12:45:3c:ed:e3:22:93:d8:1f:70:25:ef:af:1c:1e:
         ae:57:7d:56:bd:46:e1:47:8d:e1:6b:58:7b:7c:90:17:66:26:
         57:98:3c:20:8a:5c:2e:24:ea:22:8a:df:e5:26:c1:11:d3:68:
         f8:f4:cc:a2:05:dd:e4:32:69:1c:8d:2c:09:7d:2b:b7:82:31:
         de:4a:66:c4:d8:8f:73:c0:8f:f3:b8:81:db:9d:a7:a0:fc:ff:
         d8:4f:fa:f0:1e:0e:15:28:b9:63:78:0b:2b:ca:1d:6c:ec:af:
         52:64:d6:9d:2a:f7:a7:e4:36:dd:63:4a:e1:c7:f3:cd:f8:57:
         29:eb:fd:24:2a:6b:7f:42:12:35:38:e5:57:8f:31:77:26:76:
         d4:b5:a5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:43:41 2026 by rpki-client