Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58c3e818-a6bf-3b5c-8479-55b40e2aca04.roa
File:                     58c3e818-a6bf-3b5c-8479-55b40e2aca04.roa (raw, json)
Hash identifier:          X2hQaahtuUZC9HUr1xNLrEINDdaaI0fDpblpuoYyvKY=
Subject key identifier:   E3:DE:85:34:D4:AD:5D:81:88:43:B5:40:A6:EB:97:C4:A5:95:21:C1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F3FAD3A00D76235EAE3D8A580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58c3e818-a6bf-3b5c-8479-55b40e2aca04.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     395329
IP address blocks:        64.17.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:3a:00:d7:62:35:ea:e3:d8:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=e170cfee-aa38-418d-890f-b519dfc3157e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:a3:26:5f:1b:0b:3d:5b:ed:c6:87:4b:74:
                    8f:45:16:39:72:46:dc:96:ad:da:1a:c5:d9:d4:49:
                    e1:75:51:7d:b9:3a:30:79:1b:ec:3c:1f:a5:49:ad:
                    24:74:6e:44:5b:2b:e6:4a:12:33:6b:39:22:43:a9:
                    7d:57:c9:b2:4a:ae:d7:d8:d8:9b:26:dc:00:41:56:
                    ae:58:63:7e:a6:e4:7f:24:af:78:9a:fc:cf:ed:30:
                    4f:9d:b7:73:29:16:ac:99:24:36:93:5d:3b:31:7c:
                    19:4c:2b:16:9b:bb:a2:1d:aa:1f:87:c7:c9:50:b2:
                    ee:30:92:88:f1:af:4b:18:80:b4:a0:b9:1d:e5:2e:
                    48:71:66:15:76:de:d4:ee:f6:d0:3d:6c:08:cc:32:
                    0a:fa:51:4a:2c:62:1e:23:d0:10:d4:04:25:b4:9d:
                    e2:91:c8:87:7c:f9:d0:3b:4b:bf:41:42:c0:26:49:
                    5c:0b:7f:6e:6d:1f:d5:fa:0d:55:34:34:02:91:16:
                    8e:56:71:74:24:fc:e1:5d:5e:f0:ee:23:f9:1a:70:
                    41:21:b0:34:ee:71:d1:5d:70:72:82:6c:25:e8:95:
                    3f:60:c0:20:58:26:36:9e:24:ba:fe:13:40:a5:4b:
                    26:40:8d:98:af:02:c4:77:9e:de:cf:77:d4:75:a8:
                    9b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DE:85:34:D4:AD:5D:81:88:43:B5:40:A6:EB:97:C4:A5:95:21:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58c3e818-a6bf-3b5c-8479-55b40e2aca04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:45:cb:5c:b4:fc:fd:8b:d9:5b:19:c4:34:5a:a2:12:7d:3d:
         eb:6f:fb:a1:f5:8c:88:f3:52:a0:11:bd:08:e2:ae:e9:d6:c5:
         81:f5:e3:e6:fc:d0:5d:2d:d1:79:96:de:54:2e:8d:c1:42:e5:
         11:09:59:1d:60:b9:b9:ec:1e:31:0c:45:01:5b:fc:2c:1a:43:
         dd:b5:82:5a:9a:34:61:c0:a6:a9:22:90:14:c4:ff:ba:9c:89:
         19:11:29:9c:36:a4:c7:08:20:9d:92:fd:4a:12:94:c6:f2:b5:
         20:a5:96:1d:2a:27:c0:ac:a7:0f:18:9c:fa:52:69:73:fd:b3:
         62:1c:9a:d1:9a:63:75:8b:a2:a9:f0:e3:82:ee:8a:a7:a2:e0:
         86:31:6f:73:7d:16:78:a7:fe:b1:41:bc:79:77:dd:2e:d0:b0:
         49:7f:f9:7b:73:b6:c3:dc:79:a2:53:c4:e0:a4:a5:9d:ec:ed:
         12:8e:87:1a:88:81:89:01:bb:59:8f:a3:15:b5:fa:ee:17:e8:
         1e:f5:a3:c3:33:9d:d9:7d:05:0e:dd:05:15:76:d0:65:30:3f:
         4e:b9:1c:c4:10:d1:56:02:dd:fe:a5:d1:e9:33:7b:22:0f:fd:
         df:88:f2:f6:c5:d6:c0:41:fd:1d:96:ec:9c:97:c0:6f:85:2e:
         7e:28:50:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:39:18 2026 by rpki-client