Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9bf79efb-4539-4673-ba95-817a6df71bbc/26e37ad6-f63e-35c5-b0d0-7aeced050ff7.roa
File:                     26e37ad6-f63e-35c5-b0d0-7aeced050ff7.roa (raw, json)
Hash identifier:          CgmaoYYc5fJkHs7OhN26Yx+qOsS5v48q33ozHjcI9O8=
Subject key identifier:   4D:5B:25:D3:70:1C:1B:32:A0:F6:B8:34:85:14:CE:8C:95:FD:45:67
Certificate issuer:       /CN=9bf79efb-4539-4673-ba95-817a6df71bbc
Certificate serial:       010D0C9F4328584B7C87680DDC1DB5BA5DE81D40
Authority key identifier: C9:8D:A6:55:47:3C:07:C9:91:4F:32:0A:8F:DE:A5:7B:8D:C2:D4:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9bf79efb-4539-4673-ba95-817a6df71bbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9bf79efb-4539-4673-ba95-817a6df71bbc/26e37ad6-f63e-35c5-b0d0-7aeced050ff7.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     401483
IP address blocks:        64.6.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9bf79efb-4539-4673-ba95-817a6df71bbc/9bf79efb-4539-4673-ba95-817a6df71bbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9bf79efb-4539-4673-ba95-817a6df71bbc/9bf79efb-4539-4673-ba95-817a6df71bbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9bf79efb-4539-4673-ba95-817a6df71bbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:68:0d:dc:1d:b5:ba:5d:e8:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bf79efb-4539-4673-ba95-817a6df71bbc
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=1012ab1b-ddbe-455d-b7f9-7f91815e6d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:bd:17:87:33:7a:ca:f6:7a:e3:14:ed:59:
                    8a:da:04:08:4e:46:dc:12:52:14:4d:aa:70:31:94:
                    36:db:e5:28:63:08:7b:6c:d8:fe:bb:66:0a:0e:0c:
                    1b:4a:53:c5:1a:77:f3:9c:c5:04:ab:37:61:b9:09:
                    a6:8a:e9:f7:93:88:ba:82:21:a1:9d:19:73:06:a5:
                    f4:c5:6a:90:23:2b:57:3e:3e:e5:13:b0:0e:48:92:
                    0f:5c:6f:8b:8e:71:09:2d:3b:79:18:2b:c3:dc:c1:
                    35:53:17:7d:9b:6f:52:c8:9a:15:95:93:6b:24:d3:
                    fe:45:5f:84:51:3b:28:02:a9:ab:fe:0e:2d:61:8b:
                    50:ca:1f:0d:33:d8:75:2f:1e:18:94:dd:75:db:99:
                    b9:99:2f:2e:3e:c4:5f:c2:f6:98:c5:69:33:b9:4f:
                    81:5b:4a:e8:f6:1e:de:d2:a8:f2:8f:d2:3a:9b:68:
                    22:90:ca:2b:84:61:44:d4:c2:e2:50:38:b8:48:3d:
                    80:3e:f0:af:2a:66:57:35:f7:9d:5f:5b:ba:f1:e8:
                    fa:dd:27:d8:ad:41:cc:0f:1d:fc:10:12:e4:8b:09:
                    c6:3e:8c:45:7f:01:37:f9:f7:16:ff:af:0e:dc:80:
                    0a:eb:66:6c:7e:12:57:5c:fd:f3:7f:3b:b4:40:5e:
                    93:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5B:25:D3:70:1C:1B:32:A0:F6:B8:34:85:14:CE:8C:95:FD:45:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9bf79efb-4539-4673-ba95-817a6df71bbc/26e37ad6-f63e-35c5-b0d0-7aeced050ff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9bf79efb-4539-4673-ba95-817a6df71bbc/9bf79efb-4539-4673-ba95-817a6df71bbc.crl

            X509v3 Authority Key Identifier:
                keyid:C9:8D:A6:55:47:3C:07:C9:91:4F:32:0A:8F:DE:A5:7B:8D:C2:D4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9bf79efb-4539-4673-ba95-817a6df71bbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:69:c6:90:ad:3d:84:0c:80:1d:52:54:b4:ae:b6:a7:f1:36:
         3b:d4:1b:60:8c:3a:0a:cc:c7:db:eb:61:7b:9a:8f:aa:a7:6f:
         9a:f2:dc:24:f7:40:e5:8b:bd:25:f4:ac:04:53:3c:31:ad:1f:
         ae:08:e1:48:a4:ae:72:fc:56:ab:18:d1:75:85:ee:d9:bd:ae:
         8b:07:9a:c2:e4:d8:34:19:e6:84:80:ab:d1:20:e0:d5:03:ec:
         ee:a3:6e:9d:f9:7f:9d:8f:4e:8e:d0:4c:d7:79:2f:a4:89:34:
         30:90:1b:46:99:d4:c3:ac:35:0c:e2:53:24:11:76:1d:3a:1e:
         01:f5:d5:80:89:32:3f:fa:45:b1:80:61:77:b9:61:86:c2:39:
         7a:b8:04:9d:bc:e5:36:d0:e4:5d:fb:a9:6b:af:d4:82:cb:3d:
         5c:2d:be:6c:4a:70:18:96:2f:8d:66:3a:c7:1c:18:c7:1c:d6:
         49:15:d0:58:c7:96:cd:e5:d1:8b:cf:f4:c5:34:a8:cf:1b:81:
         08:a0:5e:71:7b:53:21:4a:d9:e0:3c:5c:68:b1:dc:40:99:a7:
         63:28:1a:80:01:e0:85:fe:39:9c:9d:9a:51:5b:90:fc:48:9a:
         f2:15:61:93:e8:73:c3:c9:54:5c:c1:96:cd:95:13:5c:41:b3:
         67:19:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:27:57 2025 by rpki-client