Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/eaf0e07b-0931-31f1-b40d-052b2cace1b9.roa
File:                     eaf0e07b-0931-31f1-b40d-052b2cace1b9.roa (raw, json)
Hash identifier:          0EDaePH9WVkRdTSB+c9iTxxYke2mnOESTP8zNiEAyJo=
Subject key identifier:   C9:67:2D:8F:39:40:8B:0D:AB:10:9A:FF:29:8E:90:3A:EF:60:A9:C8
Certificate issuer:       /CN=12380a37-68ce-4e9c-9585-53cd09071ada
Certificate serial:       010D0C9F4328584FA9C32058C8D122B8A5C97840
Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/eaf0e07b-0931-31f1-b40d-052b2cace1b9.roa
Signing time:             Thu 29 Oct 2026 13:00:12 +0000
ROA not before:           Thu 29 Oct 2026 13:00:12 +0000
ROA not after:            Wed 27 Jan 2027 14:00:12 +0000
asID:                     54607
IP address blocks:        64.189.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a9:c3:20:58:c8:d1:22:b8:a5:c9:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada
        Validity
            Not Before: Oct 29 13:00:12 2026 GMT
            Not After : Jan 27 14:00:12 2027 GMT
        Subject: CN=87bf0991-59d1-454b-a4a7-6e672a16d7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:66:e6:c8:bd:66:28:98:6c:4d:a3:d9:c6:7f:
                    8a:ab:e7:57:c3:ed:77:ed:09:bd:6a:8e:9f:16:30:
                    d5:1c:40:96:8c:e2:7a:5b:b5:7b:e2:ce:b6:9a:9d:
                    34:f6:42:fc:41:05:36:49:55:05:79:30:5a:f6:e7:
                    df:c7:bf:4e:21:54:6a:84:3a:ed:98:a6:e6:eb:64:
                    90:5c:14:06:4a:cb:6a:01:f3:e9:d3:df:ec:eb:df:
                    85:d3:0c:1d:bd:4b:6b:df:97:e8:d3:3a:be:6b:9c:
                    5f:66:b6:29:0f:28:90:a9:54:8a:e7:19:e3:36:67:
                    fb:46:61:dc:b3:14:1a:cb:41:63:63:73:b5:d9:d9:
                    70:06:8c:6e:ec:98:4c:80:0a:20:95:41:5b:97:b5:
                    62:43:a4:6a:fd:92:1f:53:0f:60:14:5b:e5:a6:44:
                    a6:4b:50:5b:38:8e:dd:38:9e:35:e2:ed:22:01:0f:
                    f6:f7:2a:73:70:c6:28:12:ed:cd:2e:46:06:04:f2:
                    23:93:c0:11:95:4f:fd:1d:6a:0b:10:36:dd:2b:b5:
                    40:af:34:f2:b0:4f:e6:2f:5c:28:7d:d3:06:91:c7:
                    e2:18:3c:3b:dc:7a:18:f8:85:b0:c7:e8:c1:e8:3f:
                    41:ac:cd:a3:64:b1:f2:4b:f9:ed:80:6d:15:55:9b:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:67:2D:8F:39:40:8B:0D:AB:10:9A:FF:29:8E:90:3A:EF:60:A9:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/eaf0e07b-0931-31f1-b40d-052b2cace1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl

            X509v3 Authority Key Identifier:
                keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.189.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:40:5f:dc:29:53:ea:6c:ae:49:ee:58:2b:de:f3:a5:76:f9:
         42:ec:8b:9a:35:d7:8a:2f:2c:79:04:a7:df:a3:9b:cc:ea:4b:
         45:ed:a2:e3:81:90:9b:26:2d:04:d1:c6:35:5a:8a:bc:6b:c1:
         1b:9d:86:01:47:fe:28:fd:25:11:18:d1:fe:35:7b:95:7f:6e:
         62:5e:82:c9:69:cb:04:e9:e2:96:4e:5d:ce:a7:d3:d1:47:61:
         3b:f5:6a:5c:44:e0:49:6a:88:41:e3:1c:56:99:aa:dd:d2:48:
         58:f0:15:e9:3f:38:3d:7d:72:fe:81:2d:2b:8a:61:07:54:c3:
         0f:17:ba:1b:38:78:41:67:b6:f2:34:2a:5d:55:c5:c5:a7:ab:
         ef:b2:c0:28:7a:06:1f:3d:ac:93:63:7c:93:4b:02:8f:69:0a:
         4e:ab:f9:5c:7c:d6:25:d2:38:20:09:5b:27:43:c2:23:7d:31:
         a9:ae:7b:24:cf:61:ec:9e:ec:10:db:4c:bf:f5:5d:d1:c3:7c:
         a2:51:3d:ce:ae:04:fe:c7:63:be:ad:87:7b:4e:e8:ce:aa:94:
         3c:aa:38:fb:4b:f4:7b:f1:b7:6e:15:4b:a9:e1:d4:84:e6:1b:
         b7:02:4a:bf:d2:66:f7:cb:de:b2:ed:e5:a1:36:b8:be:ab:f6:
         e2:db:7c:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+pwyBYyNEiuKXJeEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTIzODBhMzctNjhjZS00ZTljLTk1ODUtNTNjZDA5MDcx
YWRhMB4XDTI2MTAyOTEzMDAxMloXDTI3MDEyNzE0MDAxMlowLzEtMCsGA1UEAxMk
ODdiZjA5OTEtNTlkMS00NTRiLWE0YTctNmU2NzJhMTZkN2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimbmyL1mKJhsTaPZxn+Kq+dXw+137Qm9ao6f
FjDVHECWjOJ6W7V74s62mp009kL8QQU2SVUFeTBa9uffx79OIVRqhDrtmKbm62SQ
XBQGSstqAfPp09/s69+F0wwdvUtr35fo0zq+a5xfZrYpDyiQqVSK5xnjNmf7RmHc
sxQay0FjY3O12dlwBoxu7JhMgAoglUFbl7ViQ6Rq/ZIfUw9gFFvlpkSmS1BbOI7d
OJ414u0iAQ/29ypzcMYoEu3NLkYGBPIjk8ARlU/9HWoLEDbdK7VArzTysE/mL1wo
fdMGkcfiGDw73HoY+IWwx+jB6D9BrM2jZLHyS/ntgG0VVZuwLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMlnLY85QIsNqxCa/ymOkDrvYKnIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4
MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkwNzFhZGEvZWFmMGUwN2ItMDkzMS0z
MWYxLWI0MGQtMDUyYjJjYWNlMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTIzODBhMzctNjhjZS00ZTljLTk1
ODUtNTNjZDA5MDcxYWRhLzEyMzgwYTM3LTY4Y2UtNGU5Yy05NTg1LTUzY2QwOTA3
MWFkYS5jcmwwHwYDVR0jBBgwFoAUC+v8Zzc9d2IVQpU/rmHdVlHBuaIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2Nk
MDkwNzFhZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL03MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL5AX9wpU+psrknuWCve86V2+ULsi5o114ovLHkEp9+jm8zqS0XtouOB
kJsmLQTRxjVairxrwRudhgFH/ij9JREY0f41e5V/bmJegslpywTp4pZOXc6n09FH
YTv1alxE4ElqiEHjHFaZqt3SSFjwFek/OD19cv6BLSuKYQdUww8Xuhs4eEFntvI0
Kl1VxcWnq++ywCh6Bh89rJNjfJNLAo9pCk6r+Vx81iXSOCAJWydDwiN9MamueyTP
Yeye7BDbTL/1XdHDfKJRPc6uBP7HY76th3tO6M6qlDyqOPtL9Hvxt24VS6nh1ITm
G7cCSr/SZvfL3rLt5aE2uL6r9uLbfNY=
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:32:37 2026 by rpki-client