Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/556c32cb-56ac-3007-88c8-3f234c1b45af.roa
File:                     556c32cb-56ac-3007-88c8-3f234c1b45af.roa (raw, json)
Hash identifier:          H5tUKPDJZFDVdl4cdn255+HYNxFMmSYdPIT5xD+iGbI=
Subject key identifier:   7F:0F:8B:39:35:14:07:75:3D:F8:50:48:25:74:76:3A:AB:4F:07:E7
Certificate issuer:       /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial:       010D0C9F4328584EF44CB3A29ED905A63259F580
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/556c32cb-56ac-3007-88c8-3f234c1b45af.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     18888
IP address blocks:        64.42.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:b3:a2:9e:d9:05:a6:32:59:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=063b84d4-7c0a-4b05-8470-16d3651c0a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6c:56:8b:b9:b3:b5:cf:63:99:97:43:28:95:
                    1e:d3:35:4d:03:24:78:b9:55:e1:f6:eb:93:fa:03:
                    a1:6c:3b:29:a3:2d:85:92:06:68:de:17:1a:cc:16:
                    92:01:fa:b7:5f:b4:72:c7:fe:48:2b:2c:8f:4d:d1:
                    25:0a:fd:22:d5:66:46:be:f4:85:10:be:9b:3a:1c:
                    bb:c9:48:55:ce:a2:f3:62:0a:ed:74:e0:a5:59:77:
                    ab:3f:59:42:59:3c:86:fe:f7:d8:d4:3a:29:b6:d4:
                    d2:d8:aa:b0:81:b8:2e:c5:a2:bc:e7:9c:2a:d9:bf:
                    ce:13:90:7a:5c:06:da:3c:bc:6b:12:18:99:e4:90:
                    22:69:e7:89:d2:23:f5:7b:53:d6:06:b0:f7:d3:45:
                    09:6b:b2:c1:ae:f7:2b:ff:ea:d9:76:f7:58:ab:7d:
                    b3:7c:f0:42:d8:a5:98:0e:09:4a:54:a7:ef:7a:70:
                    f6:32:71:1c:ad:3d:b9:56:54:04:c5:9f:4a:c9:6f:
                    54:f2:65:3f:27:e5:17:59:87:80:c1:68:39:a5:72:
                    cf:34:41:b7:2a:7e:78:ec:a6:1d:43:6a:25:c3:94:
                    d0:3a:57:53:be:f4:83:1f:60:99:06:5e:2e:1a:6e:
                    56:4e:f0:d5:6d:91:53:79:35:6f:ec:30:0d:2b:ce:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0F:8B:39:35:14:07:75:3D:F8:50:48:25:74:76:3A:AB:4F:07:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/556c32cb-56ac-3007-88c8-3f234c1b45af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl

            X509v3 Authority Key Identifier:
                keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:b7:98:5e:d1:99:12:c2:5c:9c:60:42:e5:d4:25:b0:36:
         c9:82:a1:52:6d:3b:6e:f9:99:17:74:f7:fb:d3:19:21:da:c7:
         17:4d:c2:53:f9:62:47:47:85:67:08:c8:cb:4f:b5:da:7d:fc:
         4b:28:0c:b1:8a:28:71:de:3b:bb:03:27:64:bc:29:9e:18:24:
         85:e5:ae:d8:3a:b8:fa:59:3c:2b:02:6c:50:46:7d:c7:32:27:
         22:78:46:30:ae:d5:cf:5c:13:e6:1d:85:94:f1:77:d1:dd:ea:
         0e:26:b2:92:63:36:f5:60:2e:9d:9f:47:f1:42:09:4e:af:82:
         7e:4d:21:fe:b5:f9:e9:ce:5b:e0:86:a4:05:3c:b5:95:ce:e3:
         a5:e3:a6:04:09:b2:ad:8d:ae:27:12:ae:1d:be:9c:7a:e1:05:
         04:35:43:e3:9a:c5:b5:d3:09:cf:08:67:d7:bf:68:b0:03:e5:
         72:16:de:38:3e:fc:b9:40:92:dc:53:98:66:ce:11:bb:a5:5c:
         0a:b4:fa:f4:d2:85:9f:2b:7d:02:a0:f0:81:f0:4f:87:52:d9:
         cf:99:1a:22:64:ac:52:69:1a:3f:26:71:a3:fb:1c:85:db:0f:
         97:c7:e6:51:cb:09:8d:96:cf:16:d2:f1:ff:9c:fa:c0:63:08:
         30:b9:b3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:20:29 2026 by rpki-client