Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/3626c80b-bb52-3f25-8bf4-88ff371b212d.roa
File:                     3626c80b-bb52-3f25-8bf4-88ff371b212d.roa (raw, json)
Hash identifier:          TBxwCozkcBUnGlASSTOy/Pw2UgZZ4rqhS7SAY3lNBcA=
Subject key identifier:   12:72:CB:8D:DD:61:EA:96:77:67:9A:EF:68:33:AF:C2:E9:15:54:E5
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584FA8A8EB98926021AFA1357B00
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/3626c80b-bb52-3f25-8bf4-88ff371b212d.roa
Signing time:             Thu 29 Oct 2026 03:31:36 +0000
ROA not before:           Thu 29 Oct 2026 03:31:36 +0000
ROA not after:            Wed 27 Jan 2027 04:31:36 +0000
asID:                     11696
IP address blocks:        64.190.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:a8:eb:98:92:60:21:af:a1:35:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Oct 29 03:31:36 2026 GMT
            Not After : Jan 27 04:31:36 2027 GMT
        Subject: CN=fdfb23b3-6d0c-49fd-bdb9-887405ede291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:a0:1b:19:28:35:16:8f:f1:d8:49:12:93:
                    5d:bc:bd:53:b1:df:f2:89:2a:74:5b:71:fa:28:8b:
                    69:8a:c4:53:a0:4c:1d:a2:76:66:36:92:bd:8e:f3:
                    ff:ab:57:5f:08:b2:d9:fc:7f:32:4d:f7:b7:9c:2e:
                    4a:c2:0f:d6:9e:f1:fb:66:e8:b9:66:a6:ce:9b:81:
                    1e:8c:1f:ae:6c:44:84:f1:9d:ac:62:3b:18:df:78:
                    93:10:47:10:d3:23:ed:b6:57:4d:6b:61:a8:9f:12:
                    af:26:e8:a6:cb:32:65:2b:59:7a:50:47:fb:7e:68:
                    71:d0:5a:bb:6e:ad:7d:c6:35:55:bf:2a:1c:76:6c:
                    2a:31:5d:8e:36:72:34:61:32:cd:8b:6b:e5:2a:36:
                    4e:b0:35:57:b1:6e:4f:e3:e3:e1:a5:7d:79:81:4b:
                    47:f8:4d:41:63:7a:09:24:cf:0e:5b:53:30:b7:f4:
                    1f:fb:0e:41:27:09:97:4b:15:b8:12:ef:cf:1e:2a:
                    dd:bb:c5:75:c0:c7:48:df:79:8f:ca:e8:c2:e2:4b:
                    d3:9c:bc:94:2c:75:19:00:b3:aa:51:7c:15:92:a2:
                    52:ce:07:d6:ad:f0:b5:08:50:16:87:e1:b4:9a:31:
                    ae:a0:21:e9:bf:e0:0b:14:22:51:16:90:ba:d7:cb:
                    24:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:72:CB:8D:DD:61:EA:96:77:67:9A:EF:68:33:AF:C2:E9:15:54:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/3626c80b-bb52-3f25-8bf4-88ff371b212d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:83:4a:d5:60:f8:72:27:b5:3e:be:60:02:60:0d:d8:a5:57:
         d8:c5:bc:24:a5:06:1c:17:43:d7:e6:fb:6c:d3:1b:3d:ab:f3:
         e4:48:0b:35:c2:53:92:12:90:83:26:dd:aa:8c:b4:bb:4b:2c:
         2a:fd:b8:fe:40:9c:d3:f4:8b:9b:83:43:a5:cf:35:00:71:e3:
         b5:e9:25:2d:b8:11:c8:93:14:c8:33:ca:d7:84:04:ff:62:57:
         ad:8a:b5:a8:46:13:b2:3e:7a:d3:81:9c:63:e2:ed:46:e2:b4:
         00:06:61:7a:68:a7:43:44:6f:6a:f0:31:83:0d:c5:58:f9:94:
         bb:ab:f8:30:fe:b9:d1:92:f0:f6:99:82:d8:39:dc:40:cd:3a:
         20:d9:c3:98:3d:4a:41:33:78:df:fe:b3:b4:fc:8f:30:d6:7d:
         04:80:22:a2:05:c2:d8:87:7c:35:c2:f1:4e:f2:2c:99:f7:05:
         c5:97:98:0d:66:fa:fa:6a:4f:b3:a1:3d:8b:7a:c2:cc:06:d2:
         51:26:ee:cd:2a:76:3c:93:65:74:06:e1:8b:6a:44:a2:6f:83:
         b8:f6:b5:55:b9:9d:42:0d:11:d7:e1:81:c1:9c:fd:7a:73:0e:
         04:6f:ef:1f:e6:ee:95:45:33:fa:ed:ac:f4:0a:58:65:20:ed:
         8f:9d:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:07:53 2026 by rpki-client