Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/9b746b63-41d7-3052-85a1-ec9694651544.roa
File:                     9b746b63-41d7-3052-85a1-ec9694651544.roa (raw, json)
Hash identifier:          Aq/6HhcyiwhZk+cEA/4QfI4Flp0kpURL7McR51sAc60=
Subject key identifier:   7F:D8:14:49:9F:E9:D7:CC:53:4D:41:43:3C:F7:41:01:AC:91:A5:5E
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584DB340321DB2659960876E7100
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/9b746b63-41d7-3052-85a1-ec9694651544.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     40080
IP address blocks:        65.87.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:32:1d:b2:65:99:60:87:6e:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=276bfbc2-7edb-4fc3-b094-174454a91517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:a8:2c:6b:2d:3a:27:cc:95:54:a3:cb:7c:
                    76:28:6e:72:36:a7:ee:20:aa:02:51:2c:9d:c2:63:
                    4d:0d:2a:33:9e:ed:25:3c:77:26:2f:7e:af:39:0c:
                    95:e2:60:93:40:0c:5f:be:db:1b:74:67:34:4d:a9:
                    c0:25:ab:05:2f:7c:ac:da:b6:33:6e:02:ba:48:45:
                    46:e7:64:df:1b:fd:4a:83:e7:a6:73:ed:26:cc:68:
                    44:27:2b:14:3f:27:f4:5f:ac:ff:47:74:6a:b6:df:
                    db:69:35:ff:f2:47:8a:a9:b7:8b:7b:2f:28:9b:6b:
                    90:1e:e1:d7:e4:9a:cc:42:56:77:f8:fd:ce:68:99:
                    94:de:fd:ca:b7:2e:db:f1:c6:49:44:3e:b7:89:06:
                    53:b3:99:b4:1b:3e:b4:23:b4:b8:80:b9:c9:3a:f5:
                    64:28:61:be:87:ac:db:7a:02:40:0e:f3:fa:db:74:
                    88:dd:e1:16:fa:0a:fe:5f:2c:78:85:e9:23:f6:01:
                    63:25:7e:2d:32:3f:36:ed:03:5e:d7:87:bb:bd:b6:
                    d3:4a:79:aa:a2:cf:6c:ad:5e:b9:61:ac:a8:11:07:
                    2d:ee:16:56:68:fd:c5:b5:90:4d:8f:03:9f:21:f8:
                    d2:da:7a:2c:22:77:eb:e8:c6:de:c0:84:b1:4e:43:
                    94:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D8:14:49:9F:E9:D7:CC:53:4D:41:43:3C:F7:41:01:AC:91:A5:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/9b746b63-41d7-3052-85a1-ec9694651544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:29:fb:31:72:3e:b3:b3:59:ad:02:4d:cc:1f:90:47:ee:a1:
         dd:49:0f:36:95:95:f6:be:46:0a:a9:12:15:c1:79:c7:f2:37:
         2b:6c:17:69:5c:06:07:3b:d9:06:fd:d0:cd:b5:89:40:e1:c2:
         63:a4:dd:d4:b9:7c:f5:cd:15:58:8a:df:2c:3f:77:d3:bb:02:
         4a:a7:62:8c:ad:25:4b:88:0f:2d:80:18:51:0b:51:85:93:8c:
         39:d9:31:d2:1a:c6:77:21:66:24:dd:c7:8b:33:42:85:d7:7c:
         10:cf:3e:b9:02:32:af:62:91:a2:96:8b:aa:3b:6c:8b:3f:64:
         46:2d:c6:bb:d2:3a:c0:fc:9f:fe:0f:47:20:5d:65:07:b4:8d:
         46:d5:69:73:59:e4:25:cf:ac:ed:1c:2a:5f:99:a1:6c:c7:04:
         9c:ac:33:da:00:f8:9a:d1:9b:dc:cf:15:9d:cf:9a:9c:f4:f9:
         b1:3a:cb:fe:68:49:23:ba:70:b4:43:a6:76:a2:97:ab:c8:21:
         9f:53:ee:30:ff:b3:b6:8e:5f:e9:7f:a6:6b:5e:98:68:71:2b:
         ed:d4:58:89:be:06:65:19:ed:e8:28:48:2f:8c:d7:05:73:e4:
         a1:0d:10:82:84:8e:8d:63:f2:20:80:52:15:3f:03:5c:92:31:
         ef:a0:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:21 2026 by rpki-client