Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/211c833e-1de5-3c98-bfc6-06b8ac959560.roa
File:                     211c833e-1de5-3c98-bfc6-06b8ac959560.roa (raw, json)
Hash identifier:          so+v4YiaoBkIiYySxPgC7b5UPfqKnUAXhKdVZBOKHuY=
Subject key identifier:   66:E9:C7:BE:C5:DB:BA:C5:6A:6D:E4:4F:BE:51:33:8D:4D:C0:AB:8A
Certificate issuer:       /CN=a15a491d-dae0-4736-92ff-cf270fef8865
Certificate serial:       010D0C9F4328584F0AA233A2FCC39E496DE75D40
Authority key identifier: 8E:F9:E2:67:2E:78:91:4E:8D:BA:01:BE:E9:A9:CF:EC:06:4B:8F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/211c833e-1de5-3c98-bfc6-06b8ac959560.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     401755
IP address blocks:        64.56.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/a15a491d-dae0-4736-92ff-cf270fef8865.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/a15a491d-dae0-4736-92ff-cf270fef8865.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:33:a2:fc:c3:9e:49:6d:e7:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15a491d-dae0-4736-92ff-cf270fef8865
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=95dffeb2-0e08-478b-876e-3e7346e5334e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:ef:9e:c2:bc:36:36:30:49:b3:35:83:92:
                    0d:8e:ef:1e:45:18:fd:a5:e4:b2:71:0d:52:80:2c:
                    35:41:dc:b4:b5:f0:98:37:ca:80:d4:04:bd:fa:1a:
                    47:35:b7:3f:34:7d:80:ae:9f:ff:a8:60:a4:7b:e2:
                    31:83:67:a0:a4:96:74:ea:b1:f7:76:e9:69:65:d1:
                    b7:c9:40:31:0b:c2:60:f4:b6:60:ca:64:d4:4c:3f:
                    eb:36:ef:a7:dd:ae:a5:77:c9:4f:b7:65:59:0e:6e:
                    21:82:69:80:b3:1e:3c:f4:65:4b:31:2a:cf:52:42:
                    7f:73:99:08:cb:91:9d:e3:89:7c:69:e8:0c:da:37:
                    50:e4:d9:29:20:23:fe:42:90:db:a6:b2:74:14:cf:
                    9c:58:ae:c2:2d:a8:89:bc:cd:a0:58:90:c5:7f:b2:
                    f7:23:19:45:f9:67:8f:e3:10:c3:95:d0:35:7d:c7:
                    82:92:9d:95:41:03:25:d3:5f:d9:8c:80:23:ce:50:
                    fb:94:69:9e:8f:a6:c3:45:cd:2a:44:64:12:60:95:
                    a6:e7:51:32:f6:bf:d6:ef:9f:a8:8d:49:74:9f:9e:
                    00:77:51:0f:47:e5:7c:2d:09:68:19:f5:c0:c6:e5:
                    3d:28:e4:bc:6a:3f:2e:65:d0:55:eb:d6:35:d3:95:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E9:C7:BE:C5:DB:BA:C5:6A:6D:E4:4F:BE:51:33:8D:4D:C0:AB:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/211c833e-1de5-3c98-bfc6-06b8ac959560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/a15a491d-dae0-4736-92ff-cf270fef8865.crl

            X509v3 Authority Key Identifier:
                keyid:8E:F9:E2:67:2E:78:91:4E:8D:BA:01:BE:E9:A9:CF:EC:06:4B:8F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f2:e8:96:46:5e:96:90:b1:a6:7f:26:06:a6:37:20:62:3e:
         92:18:2a:f9:d6:a7:32:77:c8:06:6e:c0:bd:de:4e:af:fc:c6:
         da:71:d9:47:08:fa:d6:63:17:15:6d:ea:cd:aa:2a:40:a5:fd:
         4d:28:1e:78:32:76:19:43:80:08:9e:14:c2:c9:46:48:94:1f:
         d5:b2:19:f9:be:a6:03:ae:a6:6e:d4:96:8e:dd:36:48:6f:61:
         31:dc:e4:98:05:0f:4f:40:f9:7a:f9:19:98:ea:7e:23:fa:84:
         68:1d:60:73:75:c8:83:15:e3:44:c0:46:5f:ce:ba:86:7b:3b:
         6d:e9:0a:9a:36:cd:bc:c4:ca:29:96:4e:42:1a:3f:61:2f:b9:
         51:80:7b:7a:c9:6e:67:33:6e:00:df:98:e2:4e:fd:6a:69:79:
         82:4a:7b:a7:6b:85:98:39:3d:c9:af:c8:e6:fc:99:55:0b:ae:
         b8:6e:48:11:83:09:a3:0c:4d:b1:33:9e:5a:3d:c7:a8:f8:b8:
         d0:8d:25:12:71:1c:fd:cf:5c:1d:f7:09:5c:3c:52:31:1e:cd:
         1a:dc:ae:6e:45:ac:d2:6e:d1:c7:86:57:0c:bd:2a:11:ec:3c:
         4e:44:99:1c:73:7b:a9:1b:4c:b0:83:f6:4a:6d:d3:dd:40:50:
         e5:be:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:22:52 2026 by rpki-client