Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/344a9b19-353f-3659-aa24-4fd3f8414fc3.roa
File:                     344a9b19-353f-3659-aa24-4fd3f8414fc3.roa (raw, json)
Hash identifier:          wD3yjX6AUR5gbjXIHLS7n8oVLRbd9lpsG2bAn29tShM=
Subject key identifier:   06:62:4E:BE:74:C6:5F:C8:5B:F1:01:67:A6:CB:28:3C:47:19:D7:C4
Certificate issuer:       /CN=12380a37-68ce-4e9c-9585-53cd09071ada
Certificate serial:       010D0C9F4328584F9368203F1453C66791CAD500
Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/344a9b19-353f-3659-aa24-4fd3f8414fc3.roa
Signing time:             Wed 21 Oct 2026 12:49:05 +0000
ROA not before:           Wed 21 Oct 2026 12:49:05 +0000
ROA not after:            Tue 19 Jan 2027 13:49:05 +0000
asID:                     63357
IP address blocks:        64.189.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:93:68:20:3f:14:53:c6:67:91:ca:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada
        Validity
            Not Before: Oct 21 12:49:05 2026 GMT
            Not After : Jan 19 13:49:05 2027 GMT
        Subject: CN=58af2ebc-89e1-4721-9dd2-84c34145432e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:36:e4:fa:0f:ba:df:9f:5f:74:56:00:11:
                    14:21:e1:51:aa:f7:50:5e:e7:c2:8c:18:1f:33:e3:
                    c8:ff:9d:4d:ed:9a:91:24:2e:1d:9f:7e:40:ef:aa:
                    d7:00:7e:03:c8:16:06:b9:4c:71:51:a5:b2:97:c0:
                    52:61:26:54:e3:1d:83:c3:a5:71:a7:ce:19:05:94:
                    eb:ba:71:0c:bc:1f:fa:50:e7:a1:47:d2:c3:d6:9a:
                    aa:11:82:06:0d:c8:e5:a0:ff:3f:ad:1e:5a:c8:5f:
                    6e:50:ee:74:ad:8e:57:8e:ee:b6:6e:62:81:84:68:
                    be:94:76:a4:22:61:85:e4:a8:43:9c:15:53:f9:17:
                    20:8c:fc:e0:0b:51:07:78:e8:99:40:4d:90:fe:bf:
                    b1:4b:d5:b6:cc:60:98:03:ae:1d:f2:b4:ed:52:58:
                    fa:d1:a2:3a:c2:11:0a:a0:1e:01:df:fd:49:f7:6d:
                    67:a0:3e:c5:d6:bd:5e:0b:bb:64:a0:ba:1e:8b:2a:
                    30:1c:20:b4:ca:23:f9:3e:20:02:70:83:22:51:0f:
                    c1:42:0a:ec:6d:54:94:ce:16:aa:39:72:93:8c:58:
                    2c:1c:fc:2a:42:01:50:32:32:10:b7:f0:0f:27:c1:
                    78:e6:13:8e:25:f2:22:27:17:0c:13:e7:7b:bd:61:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:62:4E:BE:74:C6:5F:C8:5B:F1:01:67:A6:CB:28:3C:47:19:D7:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/344a9b19-353f-3659-aa24-4fd3f8414fc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl

            X509v3 Authority Key Identifier:
                keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.189.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ee:b7:fb:d4:8a:98:65:92:14:8b:91:c8:80:65:48:95:60:
         4c:82:78:9c:f0:c0:36:f1:bb:bc:a8:0a:d8:cb:5c:a4:d4:c2:
         00:8b:d3:14:a4:20:43:b9:bc:b2:58:44:66:49:e2:3e:16:1d:
         66:65:0d:1b:c0:0d:4b:59:56:3b:ca:bf:a2:9f:ae:94:27:b7:
         72:fa:c2:c5:cd:82:6f:43:5d:5f:8a:29:e4:a7:db:69:43:93:
         c6:00:2d:51:86:92:65:8d:50:c4:f7:bd:34:d4:5a:aa:37:27:
         65:54:8a:0b:89:80:f5:9d:46:ec:bc:f4:d9:4e:29:ff:60:37:
         bf:b9:c7:06:33:bc:49:51:16:2d:1a:6c:d1:15:ea:6d:da:e7:
         40:b6:53:3b:88:2c:21:02:fa:44:e8:4b:15:3a:cb:7c:ab:bc:
         75:27:90:0f:72:2f:1a:0b:d0:53:ea:c3:13:e1:33:f8:cd:0c:
         5e:24:bd:14:69:f3:0c:2b:23:a6:d8:3e:d9:ed:e6:56:e2:5a:
         1e:a4:a3:68:39:0d:a3:40:47:ed:c6:10:75:f4:39:41:81:83:
         a1:c7:d8:90:86:27:fb:18:18:c3:a9:df:f1:a6:65:2f:d3:ed:
         62:a1:1f:39:8a:d5:e1:43:c6:fd:33:80:b8:bd:27:74:38:76:
         55:76:b1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:23:10 2026 by rpki-client