Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/4a3b1f6b-3cf2-397c-8e4a-6aeda2d4e4bf.roa
File:                     4a3b1f6b-3cf2-397c-8e4a-6aeda2d4e4bf.roa (raw, json)
Hash identifier:          1nr+7Lgary0OCw09SLBaC+iURUatikDxvyhDxmkBJnc=
Subject key identifier:   BB:DA:8B:91:DC:95:0E:96:8C:14:11:5E:E4:76:12:3F:7B:7C:38:35
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584FA8A8EB69626C903D0B76E6F0
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/4a3b1f6b-3cf2-397c-8e4a-6aeda2d4e4bf.roa
Signing time:             Thu 29 Oct 2026 03:31:36 +0000
ROA not before:           Thu 29 Oct 2026 03:31:36 +0000
ROA not after:            Wed 27 Jan 2027 04:31:36 +0000
asID:                     11696
IP address blocks:        64.45.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:a8:eb:69:62:6c:90:3d:0b:76:e6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Oct 29 03:31:36 2026 GMT
            Not After : Jan 27 04:31:36 2027 GMT
        Subject: CN=c29075b7-14d2-4c33-890d-43ebf1572ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:df:52:2d:5f:de:3d:11:4c:48:ef:bf:21:4d:
                    90:7d:c4:8a:d9:b7:ed:6a:3b:51:c3:57:f4:5a:f3:
                    19:26:a1:b9:9b:65:4c:2a:b3:33:8a:45:08:ef:3d:
                    91:ea:07:e3:fa:a7:33:b2:2a:08:cb:ba:c7:41:5d:
                    fd:04:bb:62:c4:cc:76:5d:2f:08:54:ad:ec:01:7b:
                    f4:8e:da:a8:8e:cf:55:90:ae:1b:54:c4:2e:90:3a:
                    cb:f9:6b:58:41:76:b4:d1:8b:af:f2:88:b6:cb:a0:
                    b8:2c:68:c3:77:b9:4a:d1:ed:f3:f3:3b:61:51:49:
                    fb:5b:38:ba:84:8f:2c:f4:54:58:ce:9d:a9:03:70:
                    80:7e:da:ab:7c:bb:92:38:df:e0:eb:17:96:fb:a8:
                    df:4b:eb:a7:b0:c5:6e:03:93:2c:6f:41:55:d6:e5:
                    61:95:68:dc:66:44:c2:d2:e4:89:f9:01:4c:a6:84:
                    7b:13:f9:26:78:b0:ed:42:cd:5f:3c:ad:f5:bd:97:
                    40:fc:d7:37:8f:a2:c7:70:48:93:5c:7f:11:b3:59:
                    fa:7b:04:8f:dc:15:e3:48:ef:c2:db:92:53:98:08:
                    e3:8f:86:8c:e9:f1:f4:b4:64:6e:66:10:a7:de:4c:
                    5e:16:3e:90:ad:8b:4a:b0:60:e5:e4:48:09:c9:cb:
                    71:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DA:8B:91:DC:95:0E:96:8C:14:11:5E:E4:76:12:3F:7B:7C:38:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/4a3b1f6b-3cf2-397c-8e4a-6aeda2d4e4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.45.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:08:e3:fd:5d:13:bf:99:b8:dd:a3:1f:c1:e5:20:cc:be:dc:
         65:85:aa:69:44:c5:17:44:3c:f9:3b:85:cf:a2:c4:78:78:9c:
         e1:42:2b:a7:3e:c7:67:a1:3e:d1:9c:b2:b0:b4:aa:0c:c1:99:
         ee:55:d3:26:b8:a0:d9:87:a8:8f:b3:0f:96:5f:78:0d:eb:84:
         ca:fa:22:62:0b:f8:16:3f:36:77:84:1a:df:3d:6c:bd:ef:ef:
         69:8e:0d:e8:c4:b5:ca:f9:9a:2b:71:db:08:6f:2b:ad:e6:be:
         31:5c:42:51:84:b8:db:60:4f:65:ec:14:32:28:c9:0e:1d:44:
         12:ab:6f:8e:4a:54:49:f7:21:96:3e:78:43:24:76:94:7a:09:
         b6:0c:69:ca:dd:eb:13:6b:78:7c:35:b0:dc:f9:0d:13:59:b7:
         0e:d2:4c:ca:6d:af:5e:06:05:f9:4f:d1:41:70:4d:0c:23:db:
         79:15:4e:4f:90:3d:ce:8a:97:cf:3c:6f:83:d1:a1:79:3f:26:
         30:2d:40:3f:bd:d6:cc:b7:45:3b:e1:f9:b7:c9:13:f2:25:c7:
         92:2e:2a:fe:4b:df:98:15:07:3c:4d:56:04:ce:8d:5f:cb:38:
         cc:32:09:39:80:bf:ef:e1:57:67:23:f4:74:bf:dc:06:5a:5f:
         c3:3c:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:41:00 2026 by rpki-client