Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa
File:                     97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa (raw, json)
Hash identifier:          fFOq7QAvA0ueghKsn0ujiJMmFIYscYLmhNBDp6/Kp0E=
Subject key identifier:   1B:26:82:45:8B:6D:E6:F6:D0:1B:EC:B9:A3:B5:4B:15:91:13:B0:8B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973FE5B18B8065F5512BCB2
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        64.114.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:fe:5b:18:b8:06:5f:55:12:bc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8d9d9688-18d5-4064-9733-f26af5660cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:89:c3:b6:b1:24:f1:13:74:cb:ad:df:90:
                    e3:0d:1f:22:c7:2f:48:52:85:9a:93:de:fa:56:bf:
                    72:e3:c0:a7:5c:f3:92:a9:e5:38:2c:33:a8:b5:42:
                    3c:0b:e1:76:c7:26:bd:98:5c:1f:6e:bf:a8:51:71:
                    8c:47:40:c9:25:bc:e3:14:d4:01:13:c5:e0:9d:2c:
                    cb:ad:b8:df:82:3c:23:c9:b2:88:a9:cf:d6:e7:1d:
                    2f:39:37:94:e0:97:f6:d7:32:9b:11:a7:3e:1b:c0:
                    72:17:28:07:62:f9:9d:7c:65:65:a6:1f:32:93:9b:
                    01:b0:fe:f8:fb:b1:fb:45:25:16:48:2d:f4:b5:3d:
                    7b:26:b8:4f:b1:d7:75:72:60:f1:a4:43:f4:c0:87:
                    de:3d:cc:39:fb:54:11:1f:48:1a:32:1d:2a:8b:e0:
                    43:a7:00:91:4f:6a:7d:0f:f5:ff:96:84:30:73:56:
                    9e:9f:db:db:28:df:f9:3c:a4:db:3b:95:11:d6:2e:
                    4f:91:2f:0d:6c:96:1c:f3:7e:06:05:e8:ea:16:3e:
                    53:09:fb:80:14:78:3a:0f:78:11:2e:f7:21:dc:c9:
                    eb:20:d8:87:92:d1:a2:9a:29:ac:50:3a:4d:f9:a9:
                    01:67:72:88:5e:4f:9c:e8:eb:35:71:3e:11:58:c5:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:26:82:45:8B:6D:E6:F6:D0:1B:EC:B9:A3:B5:4B:15:91:13:B0:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:6d:c8:8b:65:88:e8:85:9a:d2:f8:be:d5:93:67:88:b7:f4:
         c5:07:a4:99:76:13:b1:3a:35:ce:d9:4c:8e:ea:16:83:46:11:
         c5:34:9b:a7:62:df:64:ae:94:ed:11:a1:aa:ff:c9:91:2f:db:
         cf:66:d8:a4:77:f2:ba:ab:2f:b9:3d:de:cc:d1:c0:87:65:bc:
         1c:2c:5e:ec:29:15:7f:d0:c4:dc:15:28:89:ff:34:61:54:9c:
         1d:75:c1:dd:68:ed:6d:c0:95:7e:3b:4a:aa:82:48:b9:5f:7e:
         4d:55:db:d7:92:fd:d0:e5:f4:59:ca:ee:dd:ff:04:f2:db:1f:
         08:c4:1b:a4:ff:10:d9:6e:e1:a0:97:74:74:e7:69:4f:3f:17:
         b6:27:af:07:77:8d:6f:92:42:7a:04:d0:f3:30:23:5d:42:f0:
         d7:a5:7b:24:62:b2:61:9b:c7:76:00:28:dd:c1:e0:fe:6d:51:
         8d:2a:96:dd:0f:4b:4f:7e:53:45:14:ee:eb:96:15:6b:ae:9c:
         1d:ea:a7:20:e1:b8:61:94:43:65:4d:16:26:b1:79:00:0f:67:
         29:6f:2d:96:ba:23:43:52:3e:35:be:a5:d3:ca:b1:b5:ac:3b:
         4e:be:27:b6:bf:45:04:77:c8:07:c1:03:05:c5:f7:74:56:ed:
         08:5b:dd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:23:21 2026 by rpki-client