Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/5e319387-600c-3e75-9d33-6de1beb6b0d9.roa
File:                     5e319387-600c-3e75-9d33-6de1beb6b0d9.roa (raw, json)
Hash identifier:          X9DysH9qU1bVhXIq0lH0EwF3c9nTqPSBZ1hRR+BGgpk=
Subject key identifier:   6E:86:42:72:17:0B:A3:05:4F:CE:79:E1:5C:AA:CE:E7:00:AF:F3:4D
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584F49733D17B3346245572DC65C
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/5e319387-600c-3e75-9d33-6de1beb6b0d9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53959
IP address blocks:        64.178.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:3d:17:b3:34:62:45:57:2d:c6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6f4b202a-31a0-4c7a-a3ea-a015461d425e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:4c:ce:57:60:43:35:38:e8:16:41:f4:1a:
                    b0:2f:c6:68:f4:5d:c2:b7:d4:ec:96:e0:1f:51:38:
                    35:b5:4a:94:d5:39:07:b5:91:08:76:d0:ec:9c:b5:
                    b8:f4:2a:6f:70:1f:96:3f:e5:c9:58:16:0a:51:f0:
                    1b:f3:e9:da:96:2a:0f:f9:47:19:77:5a:31:33:a0:
                    83:ea:be:7d:6a:6d:bf:9c:41:23:f9:01:27:44:d5:
                    90:cf:df:aa:72:97:93:c7:2a:5c:e5:79:b3:e7:c9:
                    2e:5b:a2:6f:3d:ed:50:6e:c4:2d:5c:32:d4:66:d3:
                    b0:1d:ec:5b:d7:87:a0:91:79:10:51:62:f2:9e:e1:
                    46:57:d2:56:f7:ba:16:34:5f:4a:6b:b8:ae:7d:58:
                    1e:78:97:0d:58:1f:4a:04:e3:93:2e:b2:01:24:50:
                    4b:46:3c:1b:ad:bb:fe:76:d8:e3:8d:ab:68:05:83:
                    77:e5:a4:28:65:9e:2d:ff:73:ae:92:a3:d4:aa:bf:
                    fd:41:1b:4e:aa:a1:f3:5f:9c:b2:23:e4:d5:d0:00:
                    80:a2:e2:fd:7e:07:72:eb:a0:85:12:98:06:c7:a4:
                    94:3d:87:17:d4:1e:08:c1:df:66:59:d2:0f:a2:f8:
                    4e:2a:86:55:d2:b2:13:aa:d2:6e:d7:ef:c6:58:d6:
                    e2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:86:42:72:17:0B:A3:05:4F:CE:79:E1:5C:AA:CE:E7:00:AF:F3:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/5e319387-600c-3e75-9d33-6de1beb6b0d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.178.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:91:1c:ca:33:f8:02:3d:eb:12:3b:2a:98:46:a8:27:37:
         aa:d4:61:00:ba:1a:5f:24:b7:5d:83:49:e8:04:d3:b4:80:48:
         6a:6c:06:0e:26:be:e4:1e:cf:3e:84:80:7f:0b:f4:5c:dc:cf:
         e9:3b:49:25:ae:3e:65:3c:eb:d5:d4:1f:f9:f8:c2:44:fc:0e:
         39:db:aa:63:b7:88:6f:bf:76:c6:cd:ee:fc:cb:61:61:97:c0:
         aa:b7:ba:47:45:9d:04:1d:d7:56:e3:95:51:09:c8:0b:40:66:
         ca:5c:70:72:47:68:d4:74:cd:f1:d5:40:ee:9f:84:e8:e2:28:
         05:bd:09:b9:4f:12:b7:92:05:74:1c:49:ac:e5:ac:50:10:51:
         fa:c9:31:87:d2:be:fb:2a:72:e0:ec:68:53:37:ce:1c:4d:29:
         93:82:88:09:46:5d:b2:72:b5:95:86:26:cd:1c:29:f1:a3:64:
         98:ed:fe:8b:a7:3b:37:dd:60:f2:e3:a0:3d:f6:3f:c2:a3:48:
         26:0e:cc:f8:d7:9d:72:46:fd:69:d6:fc:43:58:cd:50:c5:d9:
         10:3c:b9:62:c7:50:83:d6:2e:51:57:72:46:f3:97:b3:ba:3c:
         4e:c8:41:a8:76:79:e9:b1:3a:40:41:e3:fd:96:16:c9:6e:38:
         34:87:4c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:42:03 2026 by rpki-client