Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa
File:                     ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa (raw, json)
Hash identifier:          nQgvdjfEfZq0ruPPqZzQF8JVJdd18NSEnidSW20GEcY=
Subject key identifier:   58:3C:DB:AA:E0:1E:02:85:F5:64:07:2B:8B:9C:B0:CC:1F:5A:B9:B3
Certificate issuer:       /CN=8335f7cc-1a69-4b40-8900-117660939363
Certificate serial:       010D0C9F4328584F49756D55C38B399D01EC39F0
Authority key identifier: 0D:1A:4E:3F:8C:01:64:8C:90:49:62:E4:5F:91:CC:C8:57:4F:65:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395865
IP address blocks:        64.93.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/8335f7cc-1a69-4b40-8900-117660939363.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/8335f7cc-1a69-4b40-8900-117660939363.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:6d:55:c3:8b:39:9d:01:ec:39:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8335f7cc-1a69-4b40-8900-117660939363
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7245222d-706c-43f5-9986-3d509904769a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:7d:a6:46:ac:ba:4c:19:a3:8e:b2:b5:6a:
                    dc:b5:9e:06:bf:82:ec:d1:83:52:5b:56:b3:b5:d4:
                    f2:a5:86:89:8e:6a:c5:a3:af:e8:b7:e4:00:1b:96:
                    30:ae:21:bc:36:fa:6a:d4:b0:96:af:1e:69:57:ee:
                    f4:fb:33:6e:2c:fc:06:89:9a:d3:da:1e:98:81:6a:
                    c1:91:40:95:48:37:f0:1e:8b:2c:10:cb:ee:72:60:
                    c4:09:4d:70:44:71:f7:8f:84:19:6b:13:8b:3e:20:
                    59:59:f9:30:92:60:da:b7:de:65:b4:13:11:00:c9:
                    9c:77:ca:91:a7:20:6d:91:68:31:5d:15:31:39:5d:
                    4a:7a:6f:f5:ad:27:89:5e:a9:9e:93:2a:b8:be:71:
                    96:9b:e5:d0:11:b0:df:d4:40:9e:f6:09:62:a4:3e:
                    43:08:bc:cd:72:d4:ff:c8:2a:e0:85:42:a9:64:92:
                    42:b1:32:9c:81:1d:54:69:ee:e3:5c:71:c2:eb:5f:
                    4f:b6:29:ce:70:28:12:e2:0f:10:fb:15:0e:1f:25:
                    10:53:db:f0:dd:14:6c:e6:32:2a:47:2d:ca:38:a5:
                    60:8e:f3:11:88:2e:c1:32:69:fa:31:8b:83:01:5b:
                    ee:23:26:fd:74:64:80:f2:e5:fa:c4:2d:6e:7b:b3:
                    9c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3C:DB:AA:E0:1E:02:85:F5:64:07:2B:8B:9C:B0:CC:1F:5A:B9:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/8335f7cc-1a69-4b40-8900-117660939363.crl

            X509v3 Authority Key Identifier:
                keyid:0D:1A:4E:3F:8C:01:64:8C:90:49:62:E4:5F:91:CC:C8:57:4F:65:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:f2:70:3f:ac:47:5c:f1:80:56:4e:4c:66:f4:4a:dc:49:d2:
         d2:3e:9b:77:ac:15:4e:f8:02:34:2e:b2:e7:a5:97:d5:9b:5e:
         27:58:b6:99:11:34:96:21:ae:76:af:18:18:57:ea:66:8d:d8:
         40:17:9d:7c:4e:ac:d8:f1:5a:a3:d6:1b:f8:1a:7e:88:a1:ee:
         8c:f6:9f:c6:21:d9:04:db:92:33:71:be:38:4b:eb:cc:61:13:
         04:35:c3:0d:aa:f2:29:38:f3:66:2c:35:4e:9d:c7:26:65:72:
         cd:c1:ea:5c:9a:15:57:13:6b:1c:11:84:38:8a:b2:74:a2:b0:
         43:e9:77:1d:b4:88:33:de:12:00:63:46:40:35:b2:5b:bb:06:
         e7:4e:75:1d:68:e9:a2:54:f1:9e:7c:2d:fd:6b:fc:c9:c2:05:
         a8:4a:64:fc:54:2c:ae:bd:11:a9:7a:7c:0e:c7:b0:de:ed:6e:
         de:53:ec:66:a6:93:29:1d:92:91:8d:88:75:2a:01:6e:49:8b:
         83:8c:1c:1d:d8:a7:82:5e:63:b1:4e:ee:32:3b:21:35:cf:1e:
         5c:72:54:51:5a:67:a7:3b:46:46:a4:7c:09:6c:92:15:62:c0:
         09:67:ec:14:76:6a:16:41:d6:fc:a6:2c:18:bb:b3:1e:de:28:
         0f:15:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:43:18 2026 by rpki-client