Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fc1bd825-bd50-3ffb-b380-d672fc1b9b82.roa
File:                     fc1bd825-bd50-3ffb-b380-d672fc1b9b82.roa (raw, json)
Hash identifier:          Ja7UCxLOz8Ek8acG+cdK5qYzUbpx44CNoxkmMlflp5I=
Subject key identifier:   DB:96:C2:AD:69:86:94:8A:93:C1:4E:A1:0D:5B:3D:09:F2:48:E4:E1
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584EF3C22FBB58F47DA71FD37900
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fc1bd825-bd50-3ffb-b380-d672fc1b9b82.roa
Signing time:             Tue 25 Aug 2026 08:21:12 +0000
ROA not before:           Tue 25 Aug 2026 08:21:12 +0000
ROA not after:            Mon 23 Nov 2026 09:21:12 +0000
asID:                     402887
IP address blocks:        164.152.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f3:c2:2f:bb:58:f4:7d:a7:1f:d3:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Aug 25 08:21:12 2026 GMT
            Not After : Nov 23 09:21:12 2026 GMT
        Subject: CN=97ed7474-7c2b-46f3-9afc-f0674b9e6771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:19:67:b5:61:c9:6a:3d:ff:78:18:42:f9:1b:
                    c9:a3:37:8e:9c:b4:94:de:92:e1:e5:78:6c:24:d5:
                    b9:61:b9:98:45:23:33:6d:6b:7f:d6:38:9b:f6:86:
                    d3:ab:48:86:a2:9c:df:b8:00:0f:23:ee:bf:ed:a6:
                    a8:81:f6:93:6c:32:1d:34:97:42:fe:d6:eb:dc:cb:
                    37:89:eb:f7:78:1a:75:af:ec:0f:96:86:16:bc:72:
                    ab:f8:6c:15:6d:29:25:88:2c:f5:6f:e3:ec:c7:fe:
                    6c:e9:aa:91:e9:b0:0a:7c:e9:47:74:99:97:1e:bf:
                    aa:7e:bb:14:ec:8e:f0:12:98:80:1f:5f:8e:e5:a6:
                    64:08:c4:8c:69:0d:86:22:f0:40:61:bf:d7:b5:d8:
                    ab:bc:bf:4c:b8:10:ae:da:72:fd:fc:39:27:ef:95:
                    77:f4:ca:29:5d:11:46:b8:44:58:dc:d4:0b:c7:31:
                    f6:a9:2c:92:c8:f3:55:5b:80:5f:1f:6b:ca:26:2c:
                    3d:7f:81:c9:20:74:cd:b7:f5:6b:e8:0f:41:3e:a9:
                    af:03:d2:d6:8c:c9:cc:b1:60:9d:90:4f:dd:47:25:
                    3b:6a:a4:e2:5a:1e:52:e0:66:10:7e:ea:ba:7b:73:
                    49:d0:be:12:d3:4f:1b:f2:14:bd:dc:e2:b0:10:9d:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:96:C2:AD:69:86:94:8A:93:C1:4E:A1:0D:5B:3D:09:F2:48:E4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fc1bd825-bd50-3ffb-b380-d672fc1b9b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.152.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2c:6c:fa:5e:61:d7:0a:97:53:fe:84:b7:eb:c5:64:b2:83:
         5b:34:eb:00:71:c3:87:01:25:0c:96:19:d9:3a:6a:1d:e4:07:
         be:68:0b:8c:17:e9:b7:7f:cd:86:3a:90:2c:7b:d2:ef:29:f2:
         27:df:76:45:89:e0:fa:43:0a:a2:41:79:9b:a7:f9:45:14:f2:
         d4:d0:0b:be:dc:92:b4:74:40:a7:58:22:92:75:1a:f0:31:22:
         0f:5d:5e:61:70:ed:d6:e1:86:8a:c5:26:ae:a6:5f:14:7b:e9:
         cd:02:84:51:81:a1:0b:b5:2b:1e:9a:19:61:2e:bf:e4:86:5c:
         19:23:47:8f:d9:8e:2d:dd:29:b9:fb:4d:b8:8e:d0:ac:e0:f0:
         46:73:61:46:ef:4b:34:ed:c2:3c:2d:6f:2b:fd:04:0e:61:b0:
         83:a6:93:71:84:42:e5:b9:29:1b:8a:84:83:05:a6:70:d7:64:
         f3:73:fb:f5:df:a9:17:27:10:2a:2f:77:79:fd:94:70:bc:7c:
         da:00:ae:df:c8:c3:e8:a7:9e:7d:0b:e8:7c:aa:b2:50:82:56:
         35:01:25:08:cb:45:8b:a8:c3:e4:0f:76:b8:c6:84:5a:91:05:
         e7:9c:36:98:4a:9a:7b:fd:36:a1:0e:6e:d5:1b:e5:d9:82:3f:
         ca:09:ab:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:30:35 2026 by rpki-client