Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa
File:                     4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa (raw, json)
Hash identifier:          HKb2SIaELSlojw6oxq3XmtEnlV9UGBSo2SgwVuaVDbM=
Subject key identifier:   F5:B6:F5:26:C5:80:DF:B8:67:43:94:85:09:B5:FC:A6:C0:2C:33:41
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584F4975953470FC3AD2C2474FF0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13768
IP address blocks:        65.39.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:95:34:70:fc:3a:d2:c2:47:4f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e6244aeb-b18a-4e0e-9aba-2cf3935e17fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:8e:54:c1:b1:a3:ad:6e:b8:bb:5b:3c:4d:
                    23:67:92:c6:eb:27:8d:c5:80:25:fb:c9:d9:eb:7e:
                    f1:55:90:41:d6:0c:2d:17:a8:55:bd:dc:26:18:56:
                    57:8a:ef:8d:22:55:78:6e:2d:10:cb:75:cb:fa:79:
                    f7:ae:1f:66:8f:dd:a8:f5:3a:10:9b:3a:81:2d:e9:
                    16:d0:9c:d3:b1:07:6b:63:71:82:68:63:46:a8:f9:
                    b0:fa:28:36:d3:f0:f9:7b:02:d8:08:ff:de:d4:99:
                    2c:fd:b5:0f:a8:4d:30:c0:bf:6a:d3:67:d5:33:ce:
                    71:52:50:1b:e3:91:32:7d:f4:5a:f1:8e:ff:f5:da:
                    71:41:49:d1:f4:66:6a:d6:0b:81:44:00:53:32:0d:
                    13:05:cf:18:77:d4:96:57:7d:ef:ea:49:44:c1:2a:
                    52:b0:e8:21:2d:c8:1c:76:1f:79:3c:61:85:9a:77:
                    81:3e:df:b1:85:b3:53:77:c7:29:cb:34:c8:25:db:
                    c7:0c:bb:79:f1:92:27:90:2b:2a:e9:d8:25:e5:50:
                    a8:b7:4a:02:e2:cd:aa:24:38:8e:05:d4:2b:cf:66:
                    37:89:c3:fb:3c:cb:64:e9:e6:b1:7a:e7:36:c2:68:
                    bb:7a:94:43:ad:e9:06:d2:a1:90:6a:26:c0:b7:ba:
                    3d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B6:F5:26:C5:80:DF:B8:67:43:94:85:09:B5:FC:A6:C0:2C:33:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:75:fd:ed:50:e8:fa:a7:f2:2e:65:18:a0:29:81:ca:e0:a6:
         fc:7f:49:44:34:c9:ef:99:6c:ae:c5:cd:07:5f:db:7a:9b:12:
         f0:47:46:06:e6:81:43:76:31:00:75:14:e8:de:a2:a8:e0:8b:
         72:a0:2e:61:8e:7a:f1:fa:c7:5c:65:78:1c:fc:85:96:c4:c8:
         40:b9:e3:b8:0f:32:a0:fe:1a:63:00:41:d8:76:89:50:ae:d2:
         fe:38:3d:85:e9:8a:3f:9a:8c:f2:d3:26:60:bd:e5:10:b1:c0:
         16:e0:7c:40:3b:57:54:31:e0:55:91:cc:ae:96:a4:d9:f1:d3:
         18:bd:43:b9:49:bd:b8:36:cc:16:8a:c3:ae:3b:2d:75:e5:df:
         c8:8b:1d:83:9e:b8:71:5d:f6:6f:a9:57:a6:0f:2c:57:29:98:
         45:ea:47:6e:70:51:44:86:ab:65:1e:62:22:37:9f:47:b3:d2:
         3a:a6:c0:2f:73:e5:f1:45:8d:8c:28:bf:fb:02:40:9a:82:43:
         58:fb:e7:ea:06:c3:cb:a4:08:93:d4:3a:2e:b0:bb:f1:e8:fe:
         9e:a2:f2:0d:f9:82:91:f7:8f:f6:f9:e3:53:15:7d:21:6c:f8:
         7c:63:7f:0b:d4:2d:66:23:20:da:8f:c6:94:f4:63:d4:c8:db:
         56:6b:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:41 2026 by rpki-client