Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/97fdbdfe-eef2-3cf8-8573-7ab456b2f25b.roa
File:                     97fdbdfe-eef2-3cf8-8573-7ab456b2f25b.roa (raw, json)
Hash identifier:          P8agpo0reC3CbrJoVYbNmEfh/Qzb3bKGSKwds1JESOI=
Subject key identifier:   36:EB:93:6E:53:87:83:DD:27:AE:C2:F7:26:7C:4C:9E:C4:37:6D:67
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584F4976772365DCB5C0DF744540
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/97fdbdfe-eef2-3cf8-8573-7ab456b2f25b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     62896
IP address blocks:        129.101.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:77:23:65:dc:b5:c0:df:74:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=26dd0ed6-0d14-4b28-8537-44a3081bca70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:97:ef:66:f5:17:b3:33:77:62:e9:b8:9c:
                    32:58:f1:c2:12:b6:79:75:da:51:c8:d4:7b:e0:04:
                    dd:d7:7e:a1:f8:0e:69:e6:62:ed:b7:df:71:e2:be:
                    70:a0:82:8f:0a:df:d5:31:0f:98:a8:83:0f:bd:19:
                    f4:83:e6:ef:1e:ca:d8:8f:ce:4f:96:cc:7e:19:67:
                    4d:c9:11:e5:47:8e:6b:b7:da:70:57:d3:65:4e:f7:
                    d8:bc:16:f3:eb:24:f5:59:cd:5f:69:e5:2c:3e:3e:
                    84:19:4e:a4:75:84:55:68:cd:d5:a2:af:d3:58:14:
                    e9:14:44:30:02:89:61:2c:db:07:23:1a:9d:30:64:
                    14:2e:15:18:b9:6e:8a:85:f7:b3:9b:46:e0:b8:cd:
                    a2:70:55:8e:df:b5:d8:94:69:b6:df:d6:ce:9c:e5:
                    fd:ed:79:fa:d1:6e:fa:19:ae:7e:11:66:a6:15:3e:
                    ea:d3:e1:fa:bc:69:41:49:c0:5d:03:f9:c8:41:c6:
                    51:5a:37:45:da:03:3a:ee:a3:7d:03:75:8a:41:b0:
                    3a:f8:9b:b6:54:7c:fd:82:8e:5f:7d:7f:55:4b:46:
                    72:b6:ed:d7:5b:29:fd:32:ab:e5:3a:b9:5f:72:eb:
                    ad:a6:86:cc:0d:07:e4:de:f9:03:1f:9a:68:4d:39:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:93:6E:53:87:83:DD:27:AE:C2:F7:26:7C:4C:9E:C4:37:6D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/97fdbdfe-eef2-3cf8-8573-7ab456b2f25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:62:ec:fc:61:4c:6e:83:26:f0:35:ee:da:7f:08:c4:3e:
         ea:08:b7:64:78:bb:6c:50:b3:47:2d:af:1c:ff:57:fe:3d:70:
         51:5c:ad:e9:49:26:e4:9a:47:27:e1:f8:3e:bd:62:ef:85:5d:
         68:75:8c:64:fa:74:d7:6e:b1:80:43:15:e6:7d:40:01:d1:0a:
         c1:f5:fb:14:19:10:40:d7:db:c4:fc:40:c6:f1:c3:34:f2:bc:
         e9:3b:b9:25:9d:7e:32:a7:bb:69:81:81:26:3d:32:bb:ce:b9:
         9a:0f:01:3f:74:c7:9f:d4:45:90:83:9b:6c:ae:92:6a:68:b9:
         7f:38:23:13:40:3b:bf:7d:0c:6a:c7:d9:c2:17:a8:ac:17:a1:
         e4:91:c8:7a:65:0e:2f:ba:d4:22:07:ac:3f:cb:7d:5b:00:6a:
         d6:4d:dd:42:96:cb:eb:0a:5a:59:b0:59:bb:74:26:11:bb:3a:
         25:62:65:37:75:82:9e:63:19:48:4f:04:f8:5b:2d:c3:6e:ab:
         40:15:54:7a:62:48:ff:19:e2:bf:95:ee:5f:27:35:22:51:a9:
         b0:2c:74:0b:03:e0:4f:04:cd:bf:a1:d3:64:7c:70:e1:5a:6a:
         35:13:5f:3a:a9:1e:80:01:d1:2b:e5:9e:11:b8:a1:08:d3:8d:
         c5:99:5b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:14:20 2026 by rpki-client