Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/55a98cb1-5eea-3533-bf72-72797bf95b64.roa
File:                     55a98cb1-5eea-3533-bf72-72797bf95b64.roa (raw, json)
Hash identifier:          bLQjLNi4WyRMbyD24AmUIj/9cmV1ueP/RSoomCx64qA=
Subject key identifier:   CB:AB:C1:6A:7C:1A:9D:6A:4B:7B:89:F7:60:C4:7E:14:A7:67:90:C2
Certificate issuer:       /CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
Certificate serial:       010D0C9F4328584F4987142E80E732DFE9E0B640
Authority key identifier: 9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/55a98cb1-5eea-3533-bf72-72797bf95b64.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400633
IP address blocks:        64.119.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:14:2e:80:e7:32:df:e9:e0:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=112c24a9-93f1-4d8c-90bd-591ca02150dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:03:55:07:e3:0f:9c:08:86:40:82:7b:d2:
                    26:03:55:e9:53:63:fa:31:d1:ea:67:11:d3:fa:04:
                    9a:be:4c:ad:44:4e:c1:c7:0b:6a:ba:bc:25:cf:0d:
                    a9:c2:ff:33:a5:81:4c:33:46:63:ca:f3:15:a3:97:
                    74:0c:19:37:ac:87:1e:55:71:19:66:5b:f7:a3:1b:
                    d4:f0:c7:82:7f:79:5a:ff:d3:54:6c:a4:ef:aa:2b:
                    c4:d5:60:2d:c3:7e:81:d5:08:93:f5:84:94:27:99:
                    42:e1:01:ee:d1:c0:9b:a2:66:4d:ff:9d:5f:4e:0d:
                    7e:80:5e:dc:94:4c:ef:98:5c:94:f3:99:81:26:b6:
                    c9:68:63:fe:8c:92:d4:e4:7b:c3:9e:aa:56:0e:0c:
                    8c:f2:7f:21:f1:b3:5a:5f:79:99:dd:48:ab:d4:89:
                    29:e5:77:7c:b3:ca:0d:1f:71:7d:24:4e:7b:ee:32:
                    fe:61:81:2d:20:d5:12:83:1b:27:de:af:11:2f:85:
                    9d:b2:95:87:d5:cb:e2:e6:84:1a:7c:9e:40:2e:43:
                    e3:b2:5a:20:cc:2a:84:c4:8e:dc:18:19:47:38:e4:
                    13:b5:51:12:b0:27:3b:dd:70:64:e6:ae:00:da:32:
                    c1:f9:0b:e3:48:47:18:05:60:1d:83:77:dd:50:1c:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AB:C1:6A:7C:1A:9D:6A:4B:7B:89:F7:60:C4:7E:14:A7:67:90:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/55a98cb1-5eea-3533-bf72-72797bf95b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl

            X509v3 Authority Key Identifier:
                keyid:9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.119.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fc:be:0f:20:33:4a:cf:3a:d2:3a:a5:e9:17:cc:1e:f8:25:
         69:42:42:b2:70:f9:34:28:67:2e:31:7c:44:06:ee:a4:3c:08:
         18:99:a8:f8:ad:ef:a7:6e:90:d2:6a:69:aa:3e:e6:8d:2a:b5:
         ec:fc:7c:fd:c5:80:05:af:5c:f9:d9:eb:34:3c:a1:74:52:e6:
         42:83:e4:77:25:0e:56:60:cd:68:9e:e7:ec:74:83:e8:a3:e6:
         8d:e7:5d:71:07:0d:6a:9a:fc:0e:84:23:1c:5d:a0:3d:f2:9f:
         52:4b:cf:17:2d:ea:e2:53:02:b8:bb:5b:58:d5:b4:4c:6e:31:
         93:eb:49:27:e1:90:88:da:7d:8e:65:5a:c5:b3:85:33:87:64:
         6b:9f:d3:7a:7d:49:e0:36:fd:8c:19:44:20:16:74:05:93:b3:
         84:cb:73:ee:55:91:fb:07:82:2c:7a:88:65:78:5a:5a:95:00:
         2c:cf:06:b5:27:7b:47:87:85:82:2f:74:3f:aa:3f:e0:2e:c0:
         fc:91:d3:de:2a:44:bf:2f:00:19:4a:ef:64:e8:bf:b6:22:6b:
         9c:d6:b3:4c:32:c3:88:03:ae:cd:d0:f2:4e:bd:8b:31:d5:69:
         b8:71:8d:85:cb:41:07:16:80:2c:e7:8a:51:3d:22:67:f7:59:
         09:22:02:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:20:46 2026 by rpki-client