Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/0cb76c26-c5d0-3e65-9bb8-d0726168daac.roa
File:                     0cb76c26-c5d0-3e65-9bb8-d0726168daac.roa (raw, json)
Hash identifier:          Hm8sBsdbp6ZSHKjAJnXU/H8OeKXq/LXARNMoprgF8hw=
Subject key identifier:   01:86:8C:64:F2:E0:F6:0A:8F:DA:6B:AD:33:EC:2E:A8:C8:D2:99:22
Certificate issuer:       /CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
Certificate serial:       010D0C9F4328584EF2E76D0E4D287B866C30E000
Authority key identifier: AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/0cb76c26-c5d0-3e65-9bb8-d0726168daac.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     57976
IP address blocks:        64.227.216.0/21 maxlen: 24
                          64.227.228.0/22 maxlen: 24
                          64.227.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:6d:0e:4d:28:7b:86:6c:30:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=7b7ddca2-00de-4422-9c52-d91483ad3f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cb:1c:45:cc:df:02:8f:d5:35:cf:19:fd:f9:
                    3b:dd:4e:8b:85:05:54:f9:38:82:62:34:51:f9:bb:
                    a3:59:cb:e5:09:9c:06:65:92:c2:f9:3b:a3:8a:e7:
                    d7:f0:9f:8c:2d:fa:c6:41:9d:f0:66:6e:ae:1b:3d:
                    b1:79:fd:6b:a0:6f:ac:54:1b:a5:e8:49:d1:9d:11:
                    4c:05:c9:1e:c9:47:c3:d2:23:38:16:3f:a6:cc:6b:
                    d7:c8:48:f3:b1:23:41:d5:21:86:b5:2b:ab:f0:9d:
                    4a:6b:60:e6:b8:a1:8f:92:7f:3f:70:10:fa:2c:57:
                    b7:b3:35:e1:c4:36:70:f2:4d:7f:b0:d7:5f:a4:00:
                    a3:36:96:4b:bc:14:d7:bb:b2:b9:fc:bc:69:46:42:
                    c8:09:d0:68:da:88:55:d1:07:f0:15:2d:52:a3:1f:
                    db:e3:1e:45:dd:09:86:bf:fc:ce:b2:b0:d6:3a:a1:
                    a0:30:91:fc:cd:0c:92:31:80:88:96:1e:b9:b7:82:
                    cc:9e:cf:71:b7:47:24:21:73:30:62:85:35:1d:c8:
                    18:e7:d9:7f:ec:9e:c0:13:c1:60:5c:2a:11:38:1b:
                    f7:e6:a9:98:4d:87:f7:ed:d5:b3:0f:15:ac:59:80:
                    e6:bf:40:10:54:c8:b8:e4:8a:1d:9b:92:ff:6b:69:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:86:8C:64:F2:E0:F6:0A:8F:DA:6B:AD:33:EC:2E:A8:C8:D2:99:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/0cb76c26-c5d0-3e65-9bb8-d0726168daac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.crl

            X509v3 Authority Key Identifier:
                keyid:AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.216.0/21
                  64.227.228.0-64.227.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:2e:a8:ad:96:23:6b:ac:b9:29:f2:8e:dd:1f:09:e7:cf:
         f1:12:9f:a4:8c:8a:bc:21:0c:a5:e4:d0:77:40:3e:cc:91:65:
         12:62:0d:53:19:10:33:fb:1c:af:e0:78:d5:0c:89:f9:9c:72:
         2f:70:74:f0:a8:c0:5f:d0:85:a5:9d:8a:ef:56:fc:a8:7e:04:
         a3:55:d2:39:be:37:3b:45:97:64:39:ce:1a:cc:34:f5:87:e8:
         35:d4:8c:e4:a2:2c:19:34:84:da:cc:27:7b:c6:58:13:9b:9f:
         6f:cd:23:5b:77:9a:c1:ee:8a:5b:f8:f6:fd:ee:08:86:a9:6b:
         13:61:94:db:eb:a9:e3:60:9d:30:35:52:ea:38:d4:14:8f:ef:
         09:c9:b2:b3:2c:6d:46:e4:ab:34:e1:ef:d8:d9:69:01:54:f9:
         af:1a:ab:f4:c1:6a:12:40:59:ed:a5:3f:f5:ee:ce:b7:19:e8:
         1b:15:59:81:3e:ec:20:25:33:bf:79:c8:7d:1d:fb:cf:4f:22:
         1d:97:52:3a:c2:5a:2a:66:3a:32:ee:a0:21:5f:b5:9f:1f:18:
         a7:d2:49:1a:72:fc:e7:11:39:84:76:39:2a:6b:28:b3:82:d7:
         6f:dc:70:78:cf:9b:b1:26:3e:30:b8:9a:b9:01:df:49:00:7a:
         66:65:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:20:48 2026 by rpki-client