Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c585ec50-6f80-3a72-a29d-e39559cca778.roa
File:                     c585ec50-6f80-3a72-a29d-e39559cca778.roa (raw, json)
Hash identifier:          fDYnLvohF7beVxPy3ZN/XKTO8NDA1yt56ADMz8Q7L5Y=
Subject key identifier:   EC:79:06:DE:29:94:CB:4B:41:28:16:84:D3:3F:FD:69:0A:3A:89:C9
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584F498BACBCED08290486677FA0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c585ec50-6f80-3a72-a29d-e39559cca778.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7346
IP address blocks:        64.22.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:ac:bc:ed:08:29:04:86:67:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d416dafb-7398-4ee6-a172-e56dbddc608d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:75:13:3a:d9:3d:01:28:b2:a8:8b:f1:e3:
                    1f:ae:dc:9f:7b:67:89:0e:fd:95:87:7e:cd:06:06:
                    0e:5e:72:84:0c:7e:7f:f2:43:b2:d1:6d:d4:03:2a:
                    fd:b0:b5:6a:ef:e1:25:3a:3a:93:90:54:f9:da:1c:
                    e1:77:6b:94:e4:92:30:6a:aa:82:96:8d:42:3b:0b:
                    67:49:0a:05:9d:3a:41:79:d1:bb:60:b0:19:49:33:
                    40:60:aa:45:b6:5f:cb:54:d8:16:50:25:0b:d9:f1:
                    e3:67:bb:a5:37:2a:ef:c7:6b:c5:c4:19:03:e5:fa:
                    97:04:75:b9:82:da:ff:62:3f:18:b6:e4:86:f9:ae:
                    72:df:4c:a1:e8:10:33:e4:46:07:3f:a7:13:68:29:
                    cb:1b:77:17:b9:2f:86:43:a1:8e:c1:15:59:50:1d:
                    cc:b4:27:40:89:9a:f8:75:87:d3:a6:fc:bc:34:69:
                    42:98:8f:b1:22:d6:de:0a:cf:23:6d:37:16:75:d7:
                    14:b9:00:03:fd:c8:be:43:b6:69:0c:0b:a9:dc:31:
                    54:bb:06:e0:2f:b4:ff:2b:da:9d:b7:33:fd:a0:1c:
                    39:99:7b:7b:6c:17:f5:db:f4:02:b7:84:14:7f:da:
                    3c:a0:9a:e2:69:33:c2:4d:e2:22:ff:43:c8:44:07:
                    79:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:79:06:DE:29:94:CB:4B:41:28:16:84:D3:3F:FD:69:0A:3A:89:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c585ec50-6f80-3a72-a29d-e39559cca778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b9:72:dd:33:ea:2d:40:ff:8e:4f:e8:fd:06:a2:0a:69:70:
         16:f9:64:8c:76:bf:92:e5:f5:52:d3:65:29:b3:7b:04:4c:74:
         9a:4a:b0:4d:5e:c1:14:7f:ad:cf:5b:63:61:4e:46:e1:b9:38:
         e2:fc:76:14:d0:64:10:36:94:85:a4:de:1b:28:81:47:fc:a9:
         2c:72:ff:2f:57:b2:3a:3e:f2:39:31:c9:f2:88:8a:6f:5a:0b:
         b6:8e:5c:ec:36:36:45:85:ea:b9:77:6a:0c:a8:37:84:10:17:
         ec:33:e8:4d:46:e0:3b:97:24:f3:a1:c9:c1:29:8c:d8:c5:71:
         a0:12:16:67:dd:93:e4:d9:f8:30:37:29:60:ed:be:d2:99:ed:
         ae:55:7d:ff:59:be:0c:a2:94:05:5f:4c:8c:71:34:e2:65:5e:
         67:dd:a7:45:79:0c:d0:c9:69:58:11:5b:1e:7e:39:8e:95:ab:
         3c:e1:58:c5:87:3c:90:97:0f:73:68:ae:79:4c:b5:e0:3f:2c:
         e9:41:6b:4a:1d:97:2e:56:9e:c0:d0:10:81:ca:08:55:4c:20:
         13:cd:c3:44:12:7c:d8:3a:97:8a:53:a3:80:a7:5b:4f:cb:cf:
         9c:b5:15:d1:80:3d:82:14:d7:db:0d:8d:44:72:e9:4e:45:1f:
         bc:9d:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:20:46 2026 by rpki-client