Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/af6dbd6a-8ead-37ca-97dc-034257a38308.roa
File:                     af6dbd6a-8ead-37ca-97dc-034257a38308.roa (raw, json)
Hash identifier:          e/R67TINrwUfQyMdZ0Xge8NkL12MgUENnfM779B+4FE=
Subject key identifier:   00:58:21:2E:11:A6:61:B3:4E:01:2F:BB:F8:CC:E4:16:00:91:C1:0A
Certificate issuer:       /CN=1a061c41-5c98-4c71-a150-7a7d7a2550e2
Certificate serial:       010D0C9F4328584F682810956C43D21D8F43B180
Authority key identifier: EE:99:26:64:1B:51:28:7D:44:A7:B0:65:7D:9B:44:8E:05:7C:CB:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/af6dbd6a-8ead-37ca-97dc-034257a38308.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     26288
IP address blocks:        64.184.192.0/19 maxlen: 24
                          66.165.192.0/19 maxlen: 24
                          69.71.64.0/19 maxlen: 24
                          206.188.96.0/19 maxlen: 24
                          2607:d80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:10:95:6c:43:d2:1d:8f:43:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a061c41-5c98-4c71-a150-7a7d7a2550e2
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=670c5ba1-104a-432e-b98d-271bbb421eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e5:2d:21:4f:1f:e1:65:cb:01:f5:aa:12:cd:
                    c9:20:2e:d0:c9:96:e9:04:bb:f2:e9:1a:e5:3f:96:
                    bc:72:34:f9:1c:83:30:0f:14:03:f9:3e:f1:ae:06:
                    d7:4c:4a:4a:6b:82:40:df:d0:42:c2:f6:a2:1a:e7:
                    de:db:f4:30:6b:66:09:9d:2e:20:95:0b:67:da:b9:
                    81:7a:99:0c:1c:87:c1:f7:e4:fd:9c:d8:1b:1b:81:
                    a4:fd:83:5e:2c:f2:04:06:9b:be:b8:8b:05:bf:80:
                    64:03:80:64:f3:2a:bc:68:83:9b:e1:a4:d2:96:e2:
                    22:e0:47:c8:a6:f8:3b:02:30:f2:f2:eb:54:dd:b1:
                    54:18:00:e3:69:e2:88:3d:25:84:6f:a7:eb:21:08:
                    b8:e7:52:53:34:8f:5a:3c:15:88:1a:62:f9:c9:cb:
                    05:3e:70:38:e4:16:99:d1:98:52:e7:06:bd:ca:e0:
                    f7:9e:14:9c:80:41:35:e6:02:85:63:50:5b:a3:d9:
                    5f:c2:b3:5d:28:73:2d:3f:50:5c:d7:0c:35:40:98:
                    7d:94:b6:75:77:dd:4a:ed:b6:f6:23:6e:4a:8e:f0:
                    c9:ce:57:6d:91:42:f1:f6:ca:ba:34:03:16:16:bf:
                    13:c5:02:0d:40:bf:e1:11:e9:cd:29:ec:ae:d0:e0:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:58:21:2E:11:A6:61:B3:4E:01:2F:BB:F8:CC:E4:16:00:91:C1:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/af6dbd6a-8ead-37ca-97dc-034257a38308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.crl

            X509v3 Authority Key Identifier:
                keyid:EE:99:26:64:1B:51:28:7D:44:A7:B0:65:7D:9B:44:8E:05:7C:CB:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.192.0/19
                  66.165.192.0/19
                  69.71.64.0/19
                  206.188.96.0/19
                IPv6:
                  2607:d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8c:98:18:de:95:a0:71:ac:16:6d:02:35:1a:ff:5d:07:32:
         da:20:1c:d6:55:be:17:a5:2d:d6:dc:58:e1:82:4e:4a:4d:a2:
         e6:6c:90:ba:c9:16:ac:16:94:20:f2:49:4d:07:53:e9:f0:86:
         ca:7f:4b:6a:7b:f2:f5:97:18:85:c0:b8:e0:aa:d3:6f:98:66:
         ab:f4:d8:49:6d:94:2d:70:6e:68:6d:6f:ae:08:1c:e0:72:02:
         44:cb:22:b2:82:d4:a5:26:e8:50:f5:f9:90:08:bf:13:71:ef:
         92:f3:69:a9:1f:3c:28:59:6d:a7:23:f2:69:b0:e4:85:a2:57:
         04:9b:c0:97:58:b9:51:3c:06:18:78:44:88:ce:d5:43:19:6e:
         9d:b2:86:66:42:70:ce:5b:e6:8f:a8:dd:64:86:e0:6d:f9:1f:
         8e:9e:76:3e:75:b5:d0:89:2a:b4:59:0f:f2:de:1c:30:06:2e:
         95:da:59:db:5d:bf:85:b5:8a:ba:e3:9a:03:05:2c:af:66:52:
         b2:97:25:7b:44:b4:0c:39:be:fa:9a:c6:69:01:3c:22:47:06:
         31:d1:8e:c9:3d:dd:2c:2c:57:d5:92:99:70:16:e7:56:13:b0:
         37:0f:b1:97:ef:d5:29:ca:47:f7:9b:1c:7b:41:ec:4a:06:a0:
         5c:a0:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:31:01 2026 by rpki-client