Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/20d5a523-92bb-37cb-873c-926d2e3e50c6.roa
File:                     20d5a523-92bb-37cb-873c-926d2e3e50c6.roa (raw, json)
Hash identifier:          gS+i5rwa0OJQhiaM/A0HLN2VkC+su5sJ9diz1Xm+DOc=
Subject key identifier:   74:FC:62:7C:06:CD:BF:C9:D3:32:6B:28:D1:52:CE:DD:EB:4A:8C:57
Certificate issuer:       /CN=12380a37-68ce-4e9c-9585-53cd09071ada
Certificate serial:       010D0C9F4328584FA9C320F1A4746AFEAC0EF540
Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/20d5a523-92bb-37cb-873c-926d2e3e50c6.roa
Signing time:             Thu 29 Oct 2026 13:00:12 +0000
ROA not before:           Thu 29 Oct 2026 13:00:12 +0000
ROA not after:            Wed 27 Jan 2027 14:00:12 +0000
asID:                     54607
IP address blocks:        64.189.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a9:c3:20:f1:a4:74:6a:fe:ac:0e:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada
        Validity
            Not Before: Oct 29 13:00:12 2026 GMT
            Not After : Jan 27 14:00:12 2027 GMT
        Subject: CN=cb50d6be-7228-4e18-9b20-771b286366b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:9d:53:48:da:4f:99:e4:4e:23:5c:5a:fa:
                    f0:20:35:70:38:ba:79:a4:8f:d6:4a:9a:d4:9d:0c:
                    0a:2f:bf:ae:a8:d2:3c:23:de:da:7b:b3:c2:7c:db:
                    ae:44:4a:9e:e2:0c:08:63:31:59:41:80:ee:5a:22:
                    be:b6:5a:39:84:ff:fa:a3:e8:b8:77:46:11:10:9f:
                    f8:38:97:25:19:a2:cc:b0:7f:bf:1a:76:78:19:e9:
                    83:44:9b:8e:de:df:e4:99:30:1c:a2:fd:d0:dc:be:
                    fc:cb:59:df:f7:7f:cc:ad:02:94:3c:5f:4e:4c:b6:
                    72:a6:09:02:60:61:04:af:2f:79:66:e0:ed:54:71:
                    44:b4:29:e9:fa:3b:0f:80:c9:3d:3d:eb:fe:fa:81:
                    20:36:14:fa:78:4f:a0:ec:51:7b:4c:ab:97:60:de:
                    26:ff:ed:fc:33:6f:b2:58:3c:77:15:e8:6d:a6:5f:
                    df:4b:a9:7b:2a:84:81:c5:3e:c8:33:e9:f4:fd:25:
                    56:a0:6f:70:eb:e7:88:c1:77:80:f8:d9:a7:28:9c:
                    02:2a:75:8e:9c:0d:3a:87:92:38:e8:4d:54:82:78:
                    a9:32:a4:48:0a:53:d1:c4:ab:d9:85:ca:dd:3e:3d:
                    cf:4d:ea:5b:eb:b5:70:c6:4b:50:58:f5:35:5a:59:
                    44:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FC:62:7C:06:CD:BF:C9:D3:32:6B:28:D1:52:CE:DD:EB:4A:8C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/20d5a523-92bb-37cb-873c-926d2e3e50c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl

            X509v3 Authority Key Identifier:
                keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.189.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:70:b2:80:79:ca:7d:27:75:3a:f7:ee:6e:f3:1c:c6:b0:63:
         01:4e:6d:81:b0:0d:b0:7b:44:09:53:04:67:e3:92:05:d8:60:
         f5:63:04:07:8c:2e:d7:3a:0a:c0:b1:cd:07:0c:2a:34:5e:17:
         0b:85:7a:bf:3b:2c:53:48:b3:ca:77:ae:bd:3e:9c:ef:53:31:
         a9:03:cc:3b:4c:39:c1:c8:aa:65:90:31:2b:4b:0f:4b:bb:e9:
         84:6d:da:eb:0a:15:87:ff:55:a0:86:88:6f:11:3d:92:50:ee:
         12:c9:4d:6a:4f:1e:45:d5:40:e1:95:48:94:4c:1c:c7:2b:b0:
         96:e5:2a:9e:81:5b:bc:22:cc:9a:31:b3:8f:08:ed:46:92:a7:
         c0:90:19:ef:3b:42:ff:d9:8d:d4:2d:0f:ab:42:b3:50:9b:54:
         f1:35:80:25:dd:a9:18:88:c0:37:f2:ad:df:ca:f9:e2:5d:f6:
         9b:93:6a:26:76:c5:ad:9c:b1:63:94:df:00:28:60:11:80:15:
         9c:3c:53:2a:79:2b:42:29:1d:3b:b0:de:cc:08:32:f9:43:f5:
         a7:8e:47:f8:19:19:d2:5a:36:b0:59:c6:b6:dc:53:10:e6:8f:
         8d:19:40:99:82:d6:f4:f5:98:80:d0:2d:03:e6:21:a0:e1:69:
         00:b3:0e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:34:48 2026 by rpki-client