Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c9943e1c-0771-3001-8f59-325240c48013.roa
File:                     c9943e1c-0771-3001-8f59-325240c48013.roa (raw, json)
Hash identifier:          vCfXq97k2Z7tJARgtCmwPj8KNdRSoqGiCA5cnedf0lk=
Subject key identifier:   6C:9E:57:05:42:40:79:C4:09:C0:5B:84:8A:F7:4E:D7:C0:AE:24:1D
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584F698D97429AFCE354FBBD53F0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c9943e1c-0771-3001-8f59-325240c48013.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     54900
IP address blocks:        64.64.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:97:42:9a:fc:e3:54:fb:bd:53:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=b7cfb8c3-14aa-4242-8bb6-f7d9afb087d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:1c:7e:80:83:2b:0e:c4:7a:2b:fc:31:cd:
                    e4:e2:d9:86:c0:ec:40:2d:2e:d5:7c:cf:62:01:ef:
                    fb:3b:3e:fe:24:82:a0:2c:67:bf:17:c3:9a:d1:3b:
                    28:38:c9:93:a1:dc:3b:99:ce:9c:41:aa:ff:c4:d2:
                    c0:ff:0e:e0:b2:20:62:dc:d3:37:de:7f:2a:b8:8e:
                    c2:e0:8e:af:97:97:64:8f:4c:7a:6f:03:dc:e3:6e:
                    8d:db:ef:12:1e:c9:08:39:e4:36:ce:57:f7:64:cb:
                    f0:83:cb:3c:8f:ef:4b:fc:c2:53:70:82:ee:19:15:
                    51:b7:8a:a0:a7:73:d7:59:95:7a:41:92:10:e9:b4:
                    d4:1e:dd:0f:fe:be:4d:3f:a7:4b:3e:62:06:70:6f:
                    ab:fc:37:86:44:29:cc:f4:1a:73:8a:10:5d:da:65:
                    fc:85:60:0c:13:df:ed:35:f3:b6:56:1f:94:a4:4c:
                    04:97:61:c8:68:1b:07:55:cc:98:1b:cc:8b:50:56:
                    e7:36:23:49:c3:87:4f:5c:cb:b2:00:b0:d1:e6:89:
                    1a:be:84:eb:8e:60:cb:2b:3c:e4:0e:c1:57:49:f9:
                    90:d1:ac:c5:c9:fa:62:cb:db:11:ac:10:04:3d:e7:
                    1c:6b:7d:65:3d:db:ec:48:16:0a:5b:39:68:e7:d9:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9E:57:05:42:40:79:C4:09:C0:5B:84:8A:F7:4E:D7:C0:AE:24:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c9943e1c-0771-3001-8f59-325240c48013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:62:26:a7:be:ba:59:58:0e:f7:39:63:9a:66:7c:12:27:60:
         88:f5:c0:d3:86:53:3f:d8:24:4e:67:29:70:f1:4b:83:0c:da:
         b5:92:41:9a:dd:7e:f8:9f:0c:16:e8:07:66:49:83:7c:d6:14:
         c0:f1:fb:63:fa:94:28:a9:df:89:df:ef:eb:de:82:bf:57:1a:
         db:5b:58:2a:85:08:d9:e1:ee:c9:5f:02:b3:40:f6:9a:b3:c9:
         51:ed:60:fd:d9:bb:c2:84:ea:b0:b9:c7:f6:fc:1f:e2:d9:ee:
         69:db:5c:67:c6:f5:52:29:0d:70:0e:5f:6b:ea:d2:21:a6:91:
         43:5d:c5:cf:0b:16:0a:08:55:e7:a5:36:d1:1d:0d:49:3f:7f:
         a1:32:6c:21:32:75:5b:b9:e8:e0:38:80:0e:1b:b5:f7:39:71:
         c8:78:8a:cb:e0:d5:00:82:be:9c:82:6b:de:4a:3f:3e:ae:23:
         82:c9:19:83:be:88:f7:d5:c4:03:a5:2d:f4:e8:ea:a1:17:22:
         0d:92:10:15:8a:fe:45:29:ba:8f:b4:f6:79:22:4a:f1:f1:42:
         98:73:cd:7c:63:5a:d5:b0:79:d9:3e:b9:69:dd:5d:ef:dc:cb:
         8d:d4:05:2b:b6:ae:88:5b:b4:c0:b8:c8:bd:cb:19:f0:84:e5:
         82:8c:34:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:49:39 2026 by rpki-client