Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa
File:                     69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa (raw, json)
Hash identifier:          xf1WFqAsbQAKts64+/xfmVgqWPJgXu4mD4GNtRX09OQ=
Subject key identifier:   4F:5B:14:B7:C1:41:E8:C7:3D:06:C6:4B:2D:94:36:F0:EA:17:D5:41
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584F4976035FD23C6F59675FE180
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10497
IP address blocks:        164.114.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:03:5f:d2:3c:6f:59:67:5f:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5dfa64d6-6c79-402d-95ac-5f85b1fa5e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:74:d9:77:32:d7:eb:97:cb:46:7a:90:f8:9d:
                    07:f4:db:87:6e:e5:89:a7:98:03:62:79:a8:75:56:
                    9b:88:ce:c8:29:da:8a:ba:fe:cd:3f:b9:07:2f:f2:
                    3e:7b:e4:c4:8a:0a:08:0a:6e:a5:1c:58:0c:dc:52:
                    cf:e9:8d:4e:98:55:2d:4b:2b:08:0c:38:ac:da:78:
                    38:20:1b:68:64:9c:8c:ab:91:12:4c:cb:16:ec:5b:
                    da:40:25:8b:d6:64:17:b5:9e:03:20:cf:0b:c4:ad:
                    f7:dc:ee:b3:fe:53:44:ef:be:a7:7a:36:f5:0f:6f:
                    70:1c:c8:00:c0:54:ec:1e:db:a6:33:ea:03:ca:bb:
                    99:7f:c4:8e:8e:fe:b5:fd:03:11:b4:87:d0:3e:81:
                    d1:cc:3b:4f:2b:2e:70:d1:0f:b7:e7:94:f2:40:28:
                    ad:20:01:45:10:7b:50:11:36:e2:9b:e1:d0:62:a8:
                    5f:e4:c8:78:96:74:bb:2b:3e:37:c0:bc:fa:0c:d0:
                    a0:86:61:e4:04:25:65:5a:a5:37:bb:9d:2a:ac:ac:
                    fc:51:2c:b6:c3:91:07:9f:44:e2:2a:98:13:2a:b8:
                    37:f2:54:96:05:05:4c:14:1b:11:da:bc:1d:a0:0b:
                    d5:13:6e:25:4d:fd:b0:0d:a0:de:df:82:bd:1d:fd:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5B:14:B7:C1:41:E8:C7:3D:06:C6:4B:2D:94:36:F0:EA:17:D5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.114.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c4:41:a3:b5:df:d2:45:ba:84:e9:b8:dd:6e:b3:49:a4:35:
         69:59:fa:f7:da:c6:b4:b2:1d:d7:59:ed:45:b9:2f:55:81:d6:
         7f:50:7a:e4:c6:9a:51:56:ca:e9:b3:73:8d:3b:04:e1:85:65:
         8e:43:8a:bc:6b:38:f5:22:5e:dc:4e:b6:45:3c:c6:c1:c9:68:
         57:5c:cb:b7:c5:78:6f:97:ad:cb:93:06:4e:9f:1b:91:90:53:
         7f:04:ea:2d:0e:8a:41:91:d2:52:59:d8:73:b4:0a:16:88:30:
         24:db:c6:f6:04:20:52:b1:1e:20:25:d3:5e:0b:b5:47:42:f7:
         c6:9c:0b:33:b8:f1:49:ed:28:6e:47:eb:cd:32:c9:55:e0:40:
         e3:04:b2:bd:1e:57:af:1c:66:76:5f:57:ad:55:09:c5:4d:2f:
         be:a0:1e:12:8c:36:24:62:91:ff:f2:69:86:56:32:0d:ab:3d:
         10:5d:f4:b2:0f:be:0e:a9:9c:cf:58:7f:79:55:bc:6b:26:ba:
         63:fc:af:bb:84:e1:f8:b4:ae:7c:ba:c4:73:cd:a6:a4:85:7a:
         6e:cd:6b:e8:85:24:61:58:1c:51:df:44:9d:7c:3d:07:cf:96:
         d7:70:7c:96:08:66:2f:2c:2c:83:6f:46:40:59:30:f1:75:d9:
         9e:3e:e1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:43:42 2026 by rpki-client