Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/406bba27-aec8-32cb-a6ad-f6bdeb97db98.roa
File:                     406bba27-aec8-32cb-a6ad-f6bdeb97db98.roa (raw, json)
Hash identifier:          UhR8RJuDgE3d3+VnAwnerRQ4ZEaTMa/yU9nQXGvH9Ms=
Subject key identifier:   39:62:D8:D5:0A:D3:23:9B:83:A2:47:0D:48:F7:B8:82:A6:BA:6D:D9
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584F119CDB637ECE4E54300F4380
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/406bba27-aec8-32cb-a6ad-f6bdeb97db98.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     62549
IP address blocks:        64.150.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:db:63:7e:ce:4e:54:30:0f:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=8d546839-4aab-46b1-b053-85d1d2338856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:e3:4e:a8:ff:21:40:1d:0f:ce:a6:1c:4c:
                    c9:81:5d:cc:30:e9:15:08:04:d4:9a:25:43:0c:29:
                    7e:fc:a4:a5:af:f5:25:f4:8e:07:e0:fe:d8:6d:1b:
                    bd:93:ed:e0:6b:b0:0c:eb:3f:c6:69:a8:80:1f:80:
                    0f:3e:67:e1:02:f1:2e:58:b2:ca:c9:4f:d2:16:47:
                    5e:6c:62:ef:13:0c:d6:7b:c8:24:34:c1:47:33:c1:
                    36:70:18:b8:20:11:88:d0:d4:fb:b2:bf:f4:d1:a2:
                    7f:15:5e:79:3b:a8:9a:3d:7b:10:8c:56:7f:d4:9c:
                    b1:d6:12:bb:14:44:cf:ae:cd:4c:84:75:a0:b5:a1:
                    0a:a6:80:37:b0:9a:50:bc:bf:1e:c4:b9:47:8c:08:
                    27:75:90:91:f9:9f:29:2b:13:ae:73:eb:68:a9:c5:
                    46:d3:49:bc:68:ed:07:d3:07:07:ab:7e:db:1b:6e:
                    14:a8:8f:17:29:1d:6d:a4:ec:e7:58:50:19:d0:e5:
                    e9:27:bf:11:d5:6f:41:98:63:1b:ef:a2:a4:e9:66:
                    e1:a2:47:ad:83:b3:4a:92:c8:23:6f:3a:72:05:d4:
                    d2:8b:16:61:76:fb:b2:c3:18:1b:94:c1:16:02:00:
                    be:a9:46:be:53:f9:b6:5e:d1:37:63:ff:00:1f:7f:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:62:D8:D5:0A:D3:23:9B:83:A2:47:0D:48:F7:B8:82:A6:BA:6D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/406bba27-aec8-32cb-a6ad-f6bdeb97db98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.150.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:bb:8a:9f:e0:63:c3:14:b6:cb:55:59:69:e5:f3:bc:53:0b:
         03:6d:e4:1a:bf:ef:4b:3b:a7:de:95:df:71:e5:11:91:ad:1e:
         b9:32:07:54:11:5e:e2:2a:15:02:65:f2:1e:6d:57:a7:6b:c2:
         70:8b:ae:03:e1:bd:73:63:d8:5d:a1:58:59:cd:bd:2d:6e:c1:
         f7:47:f4:5e:af:b1:3c:ea:a8:86:7f:d3:5e:ff:18:a2:dd:c0:
         57:b5:56:3d:cf:83:9c:78:b0:d5:5e:dd:5e:1b:f7:16:fa:9f:
         3f:1b:90:67:5b:87:15:10:af:bc:3b:c4:58:80:e7:5d:72:a3:
         7f:a7:13:f9:0e:91:1c:d0:8a:16:90:8e:af:98:cd:3d:65:ce:
         19:1c:5d:86:22:f0:41:0a:aa:55:78:61:65:8d:4a:dc:9a:16:
         51:d0:ba:6f:fb:71:bd:24:91:39:9b:03:fb:26:d3:fe:96:03:
         fd:5f:00:89:a7:a3:a2:87:12:44:c2:cc:25:cc:86:44:0a:fc:
         52:79:7e:df:d0:a6:29:2f:f6:20:21:fb:ef:24:56:d9:d7:67:
         72:5c:15:f5:4c:48:d1:4e:d0:16:51:8d:8d:3d:ab:f7:80:e8:
         bb:f1:0f:7e:e3:81:05:ec:60:b4:62:ad:60:08:38:56:2e:c7:
         35:31:77:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:45:27 2026 by rpki-client