Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c38fe621-769b-3e3c-891b-6340fe748a2d.roa
File:                     c38fe621-769b-3e3c-891b-6340fe748a2d.roa (raw, json)
Hash identifier:          QQZsia4ASo8tV80wC1Mt830unypnzL0KYEDZRU8NI4I=
Subject key identifier:   D7:0E:FE:D5:2C:82:F4:97:39:64:58:D8:E8:ED:B3:36:53:4F:3B:E5
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584F4976AB25601061686ED4E5C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c38fe621-769b-3e3c-891b-6340fe748a2d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13768
IP address blocks:        65.39.184.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:ab:25:60:10:61:68:6e:d4:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=461f7b0a-4e7b-487e-bfe6-462591138a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:f2:cd:f6:a9:88:f8:90:12:23:3e:c1:c3:
                    e5:51:0a:d0:63:ef:23:9d:1f:9a:8d:9d:bb:af:7a:
                    ef:b4:7c:82:63:67:2c:b5:c3:b4:0a:97:9b:b0:0c:
                    38:0d:13:f1:d9:f0:f6:33:ed:43:a1:34:47:e1:c4:
                    6f:c8:30:c0:9d:88:6b:8a:84:2a:76:7f:b9:53:64:
                    1b:11:ff:17:88:44:40:c7:50:35:33:22:03:88:0c:
                    5a:d5:0d:df:e9:28:8a:84:59:81:2d:09:58:90:1b:
                    21:bc:08:3e:f5:44:58:66:11:e4:ac:14:41:4a:1b:
                    e8:12:0e:69:d2:ee:81:e1:bc:b5:04:64:0b:95:01:
                    12:dd:5e:ab:d6:28:9f:ed:95:5e:44:ad:4c:cd:e8:
                    28:1c:44:ea:c9:08:e3:af:fe:ae:f6:a9:41:a3:f4:
                    b3:b4:ef:94:02:4b:27:28:63:2a:f8:99:94:23:64:
                    18:89:ce:b6:ae:be:e9:c1:80:2e:60:04:38:9a:88:
                    1a:09:0c:b8:a7:17:89:c9:5f:ca:f4:ce:7d:42:4b:
                    cb:92:38:7a:87:12:53:1b:f1:2f:93:ca:a8:ed:af:
                    8d:c6:4f:a9:f8:28:ee:7b:fd:32:a2:0f:8f:23:1f:
                    b0:6f:b0:9d:d5:4c:81:d0:42:d2:09:ec:b3:b2:39:
                    94:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0E:FE:D5:2C:82:F4:97:39:64:58:D8:E8:ED:B3:36:53:4F:3B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c38fe621-769b-3e3c-891b-6340fe748a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.184.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c9:66:83:44:2b:51:a0:38:73:15:1e:a1:7f:82:ee:d8:a9:
         92:32:98:79:b4:ae:a8:4d:2f:02:55:97:ab:aa:8e:ab:d8:ac:
         84:fe:1d:3f:c2:f0:fb:df:9d:d3:48:a4:4e:2f:3a:a1:d6:d2:
         1e:79:c0:5c:af:31:cd:83:71:f7:47:d7:26:3d:e9:db:8d:a5:
         ed:fa:01:78:f8:6d:3d:af:17:62:5d:09:ae:b3:2c:3a:e2:55:
         dc:52:23:23:6a:0c:b9:fe:21:8e:40:79:7f:78:97:9b:fb:26:
         ca:56:54:cb:b6:b4:b1:d9:ca:37:c3:dd:4e:3c:b3:26:bc:7d:
         0e:8e:b2:7f:19:a9:ac:92:a7:a7:a7:0a:4d:70:23:65:09:da:
         3f:3c:00:3b:46:e6:5d:ef:2e:76:f1:63:da:da:dd:aa:80:cd:
         7b:8a:f4:21:5e:d1:00:4c:5d:0c:9f:9c:5d:59:89:a0:ae:87:
         b2:47:0d:b0:1f:53:34:12:84:41:5e:a9:90:29:bd:98:0b:fa:
         29:9d:b1:de:d1:df:ef:a5:49:96:9b:3c:05:0d:67:38:ce:86:
         e1:c5:b1:c1:5d:c7:89:b1:3e:cd:31:e9:50:e9:05:48:84:c0:
         a3:21:94:db:86:d3:c6:78:53:a4:92:c8:3d:c8:99:a0:ad:1b:
         27:55:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:37:36 2026 by rpki-client