Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/9736c1e8-7a78-3641-9fb8-34462a2e800d.roa
File:                     9736c1e8-7a78-3641-9fb8-34462a2e800d.roa (raw, json)
Hash identifier:          6Ba3AYyzKJMC3ai8o2KXGLMzmMLkYkIgUr9uo0LvpCI=
Subject key identifier:   D4:B8:90:40:67:44:1E:72:DD:97:A8:E8:26:B2:E1:FD:74:FD:5F:C3
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584F19FCF0066DF690AF94F55D00
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/9736c1e8-7a78-3641-9fb8-34462a2e800d.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     5738
IP address blocks:        64.17.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:f0:06:6d:f6:90:af:94:f5:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=41a2e4f6-1b0f-48e8-87ff-a730bce9b0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4b:39:4c:38:95:20:d6:52:d1:b7:62:7b:35:
                    46:c3:f1:b7:ad:ff:7c:63:79:34:2f:7c:46:bd:d2:
                    89:a3:b7:f5:7a:ed:8d:1a:cc:84:67:65:8d:de:dd:
                    61:20:80:73:55:88:af:04:81:19:31:c8:b2:f3:2c:
                    ca:ef:81:96:41:34:28:37:3b:90:80:4b:d4:73:09:
                    3a:92:df:e1:9d:f2:51:c8:e4:1b:b8:20:0f:fd:3b:
                    d2:14:95:f4:fc:33:45:88:dd:c6:e6:80:64:96:65:
                    02:cb:c4:ad:53:f6:03:e4:b8:87:59:a1:6c:dc:71:
                    f4:54:a9:de:d9:a8:51:4c:ce:30:12:8d:ac:ab:62:
                    74:1c:bf:b3:ef:ab:0a:b5:71:6f:d4:3e:bd:95:47:
                    69:21:24:ed:82:42:cb:a0:78:7d:fd:a4:60:6a:f0:
                    20:30:4d:17:32:8b:c1:c6:d7:6c:9f:31:cf:ba:97:
                    b8:02:83:d9:53:0d:90:67:ea:8e:db:95:fb:75:0f:
                    80:e7:47:12:b8:c4:a4:a4:c4:ab:ea:c3:2e:76:ee:
                    15:fe:b7:80:7b:85:b5:85:5b:55:36:d8:26:18:ab:
                    25:0b:6c:26:f2:00:ff:78:b7:86:6b:a8:a0:0d:4e:
                    15:4e:5d:8b:a3:20:f7:e3:c7:38:cd:3d:f8:b9:ac:
                    35:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B8:90:40:67:44:1E:72:DD:97:A8:E8:26:B2:E1:FD:74:FD:5F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/9736c1e8-7a78-3641-9fb8-34462a2e800d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:12:5a:93:d6:4f:13:90:41:d6:ef:ce:b9:10:6b:8d:32:51:
         07:c6:fa:7c:30:2f:aa:eb:0e:a9:af:6e:14:48:37:6a:43:35:
         5c:0b:51:b0:42:e3:3f:88:b9:1f:d8:95:ea:36:f6:c8:3f:4c:
         9e:7b:a5:d6:ab:44:56:5f:2e:3f:d6:ac:dc:4b:29:c9:9d:15:
         84:4d:23:b7:a9:58:33:df:9c:b6:e5:c0:0a:82:f7:be:83:41:
         e1:f7:d5:dc:e0:1c:45:74:99:f0:4a:9e:73:22:76:62:8e:ac:
         be:60:c5:90:a8:55:6f:9e:50:d1:5c:41:9b:e0:03:aa:b0:e4:
         d1:d1:62:14:b3:01:fb:7a:d5:81:de:f7:e3:ef:e6:6b:9d:93:
         41:ad:4a:85:33:7f:f3:e7:3d:40:1b:05:ee:eb:ae:ee:ff:a5:
         51:eb:77:8a:bf:23:90:aa:6f:ef:ca:bd:d5:5a:74:83:e7:ec:
         d2:af:27:2c:09:47:28:f9:da:a0:53:57:05:e6:25:ab:0a:36:
         d8:1e:cf:33:26:35:86:6a:5c:7e:a0:66:f0:08:3f:c7:ca:1d:
         b8:db:7d:74:fd:86:f1:da:14:ba:c7:b0:d6:89:fc:32:ae:98:
         57:fe:09:ef:27:23:d1:1d:10:77:4a:04:12:17:01:7b:ff:3d:
         86:e1:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:36:56 2026 by rpki-client