Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/da556143-a513-33ee-8bc4-041462ef3705.roa
File:                     da556143-a513-33ee-8bc4-041462ef3705.roa (raw, json)
Hash identifier:          +Mv4JBrqWmmhKrVqVKQ21QSLpCBznJRNINq/UYrEnlc=
Subject key identifier:   3B:00:4F:5A:2E:A1:7D:44:48:A1:39:50:16:C5:CA:54:37:8B:0C:61
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F4328584E7E9508F4674EEC2806FFCA6D
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/da556143-a513-33ee-8bc4-041462ef3705.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     29789
IP address blocks:        64.210.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:95:08:f4:67:4e:ec:28:06:ff:ca:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=0a5ba8a3-2e74-40ef-a49a-dc5853afe0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:f4:f9:df:54:6a:be:42:d2:6b:71:98:b9:
                    1e:ff:43:ee:d2:4d:58:54:73:22:15:d9:3f:85:1a:
                    c3:45:81:25:22:80:63:b2:42:0c:b0:a3:51:df:ab:
                    73:b9:37:e7:58:ca:14:a1:fb:58:38:c8:41:df:de:
                    e5:53:84:bc:ac:c4:1d:4a:37:65:2a:17:0b:d7:cf:
                    c8:03:e3:5b:c4:f1:69:ad:f6:af:64:d8:c4:76:b3:
                    1a:b7:e7:74:0f:8a:9f:82:6d:08:d6:69:4e:97:61:
                    96:67:b3:b8:aa:f8:a9:84:e0:e1:43:3e:e6:79:24:
                    1a:55:63:d7:4b:3f:e2:ab:fd:29:fb:6d:03:fd:d5:
                    9b:43:32:f4:b0:91:57:f5:e2:20:51:ee:3f:3f:fc:
                    66:00:0b:f8:09:af:0e:9a:72:66:96:55:3f:f5:35:
                    a6:8b:c8:30:72:37:df:3e:17:69:1f:24:20:00:42:
                    ac:7a:5d:64:20:8f:52:49:c8:b0:61:da:1a:5d:95:
                    7f:6f:0b:41:21:0e:6c:b1:1f:a6:ed:5b:1c:51:79:
                    d9:85:f4:dc:97:5d:38:5a:dc:d7:8a:78:97:f3:92:
                    17:83:a5:b0:16:47:96:34:f1:b2:9b:69:aa:cf:22:
                    e3:31:c0:9f:0d:dc:2b:0a:b4:15:68:9c:4f:d7:49:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:00:4F:5A:2E:A1:7D:44:48:A1:39:50:16:C5:CA:54:37:8B:0C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/da556143-a513-33ee-8bc4-041462ef3705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.210.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6c:98:3c:4f:4c:a5:c5:80:77:bb:6d:46:f8:63:26:2e:99:
         1f:fd:75:77:ac:85:b4:72:f9:f0:7c:6d:8d:f9:47:d6:f6:d9:
         d5:53:7b:65:bb:f9:52:9e:78:02:3a:f0:ea:47:85:49:e6:fe:
         e8:31:3d:5c:8d:be:8c:fc:ee:2c:9f:40:22:70:4a:7c:5f:40:
         e0:09:58:2b:ab:89:84:17:10:02:c9:4c:74:bd:1d:b6:56:39:
         c2:69:60:83:38:32:31:08:ea:52:8b:8f:17:05:38:45:9c:23:
         8c:19:9a:ae:40:68:2a:f0:6e:43:7b:be:04:3d:d2:75:c6:55:
         9e:68:59:2f:d3:7f:1e:f6:e8:df:dd:7f:55:3d:9f:02:c7:98:
         5e:ed:99:fe:2c:ad:ea:b6:fc:de:b0:25:ad:6e:dd:70:74:f5:
         79:17:f8:9d:30:8a:6f:ef:21:aa:94:56:7a:30:01:b9:d0:ef:
         45:96:05:c5:88:8b:20:13:c5:f6:72:39:61:a8:e7:a0:b4:cb:
         15:87:79:4b:a1:d2:ea:9a:8e:f5:b0:21:a2:e4:be:ca:d8:34:
         c9:13:c2:87:8a:72:1f:4c:1e:ff:2d:7d:98:64:66:47:0d:ce:
         75:92:74:be:ac:c1:f4:0a:4b:90:98:f7:43:5b:43:07:b7:2d:
         e3:24:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:48:41 2026 by rpki-client