Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/535ab3cb-456d-3d34-978c-bdb126d9bf10.roa
File:                     535ab3cb-456d-3d34-978c-bdb126d9bf10.roa (raw, json)
Hash identifier:          vyApWtNCHb+tp5BHrAYuWrVYBg/T+M6V5pg8LSbxN3c=
Subject key identifier:   AF:65:1E:E5:ED:FA:30:16:9C:A1:76:17:A4:F4:89:3B:7E:EF:99:9C
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584E7634E2A74A073CC64C871F00
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/535ab3cb-456d-3d34-978c-bdb126d9bf10.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     399575
IP address blocks:        216.205.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:e2:a7:4a:07:3c:c6:4c:87:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=0ef42e36-d4a1-4afa-b3fd-ba3e960de6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:68:1f:a8:07:4a:84:38:da:a3:2f:d8:ca:9a:
                    c2:c1:f2:4d:a7:5d:a1:10:05:a8:c1:53:16:60:b8:
                    f9:f3:6e:70:7f:cc:f4:28:49:5a:12:8e:9a:98:9e:
                    2c:c7:ed:03:fd:0f:4d:2e:43:1d:20:d9:6b:22:40:
                    b0:6d:10:9c:6e:07:11:41:a1:af:b8:e7:ba:ec:da:
                    db:c0:b9:43:42:dc:9d:33:b7:a3:0f:0d:f2:34:55:
                    2d:60:70:28:87:83:c8:b4:4e:2c:d9:9c:04:8e:dd:
                    12:94:7d:c5:54:70:07:b5:7a:c2:1c:7b:49:31:f2:
                    48:25:32:cf:ff:47:bb:b3:4c:0b:1a:c3:cd:fd:2b:
                    e8:c3:4f:21:10:8d:98:54:bb:73:76:69:4b:a4:4e:
                    f9:1d:e3:65:d7:82:3b:ae:56:1a:1a:85:ae:f7:0c:
                    68:31:88:f1:a5:02:16:ff:95:68:86:5c:ed:5b:04:
                    3c:f8:55:63:41:56:e7:9d:37:59:29:f7:5a:95:3e:
                    b7:7e:17:98:ce:26:43:61:2d:03:26:69:a3:45:ea:
                    4b:81:2d:eb:68:87:7d:df:6e:66:60:39:3f:72:26:
                    1d:38:06:f9:06:f5:4b:8b:66:88:58:68:5d:8f:1e:
                    23:14:72:49:20:8b:41:07:9a:d9:3a:7e:74:4a:da:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:65:1E:E5:ED:FA:30:16:9C:A1:76:17:A4:F4:89:3B:7E:EF:99:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/535ab3cb-456d-3d34-978c-bdb126d9bf10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:25:f4:e6:bb:8e:5c:63:29:b1:ab:ba:c6:a2:d8:a9:13:ae:
         a6:6d:32:98:30:5f:7c:0a:82:1e:d8:93:d7:56:6c:36:45:3f:
         93:b6:ee:57:8e:9f:bb:88:69:60:e3:cc:8d:b2:d9:8e:4b:82:
         32:ab:3a:35:14:66:3a:05:ef:e1:62:f0:d5:40:56:b6:a9:de:
         27:d1:f0:a6:c5:52:a9:40:81:d8:87:4f:5f:80:48:53:5a:36:
         c6:f6:48:9b:5a:92:64:f6:d2:1f:ae:9b:fd:6e:84:a6:e6:2d:
         51:44:f5:3e:a2:8e:de:4e:a7:05:a0:d2:9c:59:eb:e8:a9:5d:
         67:ef:a5:73:86:88:c6:83:da:31:3b:cc:1a:da:89:2d:b6:42:
         f0:d2:8d:35:c5:f0:1a:ca:81:fa:4a:f3:7c:fe:ac:75:82:b8:
         5a:61:22:b9:fc:57:0c:a5:4e:11:e9:0a:09:e9:12:3b:e9:7f:
         18:1f:88:7e:3d:f4:34:f4:a9:c9:ce:7d:f9:e9:9c:10:39:9a:
         c2:b9:93:b1:48:3e:50:97:ae:22:63:d9:67:51:eb:60:91:09:
         5b:2c:6e:62:90:19:50:82:61:f6:bc:a7:1e:e9:65:c7:54:47:
         3d:ea:80:ce:81:a2:4a:0d:cc:c9:46:da:44:01:0b:09:91:5f:
         e2:a3:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:41 2026 by rpki-client