Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5e280857-430f-428f-9330-bcafa8a5ef1e/9da8ef92-81de-38b0-be64-415532f21442.roa
File:                     9da8ef92-81de-38b0-be64-415532f21442.roa (raw, json)
Hash identifier:          aJAT4+kAtt5h36cQPbprOU88KFZSX0SrdjygveyuGEM=
Subject key identifier:   B6:52:78:42:96:C8:8C:8F:10:1B:80:7C:3F:DE:65:18:AE:53:F1:32
Certificate issuer:       /CN=5e280857-430f-428f-9330-bcafa8a5ef1e
Certificate serial:       010D0C9F4328584F4F07FDC576E6001C95F98D20
Authority key identifier: E9:65:0F:46:E3:06:C2:12:0A:11:57:07:3A:21:11:B5:D6:02:BA:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5e280857-430f-428f-9330-bcafa8a5ef1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5e280857-430f-428f-9330-bcafa8a5ef1e/9da8ef92-81de-38b0-be64-415532f21442.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     402795
IP address blocks:        64.95.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5e280857-430f-428f-9330-bcafa8a5ef1e/5e280857-430f-428f-9330-bcafa8a5ef1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5e280857-430f-428f-9330-bcafa8a5ef1e/5e280857-430f-428f-9330-bcafa8a5ef1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5e280857-430f-428f-9330-bcafa8a5ef1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:fd:c5:76:e6:00:1c:95:f9:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e280857-430f-428f-9330-bcafa8a5ef1e
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=0cf09af6-281a-4a58-b322-b77dea255943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8b:ec:b6:47:6c:10:81:d7:00:ba:a4:eb:c3:
                    67:42:b4:b0:63:2e:b4:b4:96:3d:92:46:46:b1:c1:
                    55:19:b9:bf:92:f5:a4:e9:b5:f2:be:84:ad:56:fb:
                    b7:26:c4:0c:e1:83:69:5d:54:5c:05:a1:e3:23:8e:
                    15:5d:9c:0f:b6:3a:bc:dd:39:7a:c2:2c:36:22:55:
                    d2:f0:16:2e:fd:82:81:a9:34:86:e6:10:58:06:7e:
                    76:56:f2:ff:e8:8e:8b:f4:56:2d:0e:30:bc:71:bd:
                    26:c0:77:e5:24:44:32:b3:94:3a:e2:7e:af:a0:f9:
                    ca:a1:87:7b:15:d2:c3:9c:45:f1:a6:5f:b5:6b:5d:
                    58:be:81:3e:53:86:ac:73:ad:cf:d3:c6:1e:78:98:
                    ba:52:b2:2b:30:1b:53:2d:4a:c4:07:5a:ef:a9:46:
                    29:56:19:1a:b7:48:b9:b4:44:da:19:aa:f5:f1:77:
                    20:6c:b0:1f:87:de:b2:ec:06:63:ad:dd:fd:59:48:
                    20:cf:8a:d8:e5:a1:64:dc:3d:29:29:a0:96:93:cd:
                    89:35:f1:e3:fc:e4:da:51:e4:e9:31:e8:d6:51:fa:
                    3f:c7:ad:3a:a9:c6:29:9f:52:45:fb:e3:a5:42:e0:
                    70:71:4b:4d:dd:53:58:d1:51:09:a9:7b:84:7d:6f:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:52:78:42:96:C8:8C:8F:10:1B:80:7C:3F:DE:65:18:AE:53:F1:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5e280857-430f-428f-9330-bcafa8a5ef1e/9da8ef92-81de-38b0-be64-415532f21442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5e280857-430f-428f-9330-bcafa8a5ef1e/5e280857-430f-428f-9330-bcafa8a5ef1e.crl

            X509v3 Authority Key Identifier:
                keyid:E9:65:0F:46:E3:06:C2:12:0A:11:57:07:3A:21:11:B5:D6:02:BA:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5e280857-430f-428f-9330-bcafa8a5ef1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:2f:5c:5c:a1:c3:83:50:a8:d0:37:8e:f0:50:30:62:8f:
         06:16:ff:be:38:ab:79:06:26:53:27:16:52:be:d8:e3:db:9e:
         a3:82:98:ac:97:f2:e2:b0:27:3e:bf:0f:f7:3b:00:10:21:2b:
         03:e4:ef:da:03:b1:0d:6c:36:ad:00:81:06:f2:b9:62:0b:5d:
         03:8b:5c:92:59:ca:fb:12:a7:ee:8c:0f:8a:c3:2a:91:97:52:
         36:9e:41:21:df:bf:0d:b1:57:5f:90:67:11:2b:66:bf:8c:68:
         cf:e8:4b:12:db:80:7b:00:90:ce:ea:46:61:12:25:c8:e7:64:
         68:dc:9c:d2:96:59:29:79:f6:22:0c:23:40:bc:54:da:b9:9f:
         37:c6:d8:8e:4a:b9:ed:48:ea:f7:77:69:a5:99:a9:27:4a:26:
         c1:49:07:ec:0b:1c:7c:7b:c6:31:07:92:3a:b9:c0:e8:86:01:
         47:95:6e:07:fd:ab:c2:7b:34:f2:ec:72:fa:13:2d:c8:3c:d2:
         0e:b0:cc:35:65:c2:96:8a:e2:65:ff:ba:4e:d8:eb:1b:b0:4c:
         6f:94:b7:90:27:68:bf:95:30:76:f1:bd:e9:9d:f5:63:14:41:
         00:30:8c:05:08:b7:24:47:e9:c8:ca:06:a2:fa:85:15:0f:ec:
         6e:cb:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:24:26 2026 by rpki-client