Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/3b040932-da5b-3b1c-aa11-a9b721dee30f.roa
File:                     3b040932-da5b-3b1c-aa11-a9b721dee30f.roa (raw, json)
Hash identifier:          k1CMCbegbgZw2P845CggvSnEjhDbq/NxEVZPS+SFxa4=
Subject key identifier:   E1:0B:3A:F8:1D:FD:9D:BB:F7:C8:69:1C:BA:62:DE:C9:CB:E3:F1:43
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F4328584F498C2A6398C827A5610FF000
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/3b040932-da5b-3b1c-aa11-a9b721dee30f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     62633
IP address blocks:        65.75.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:2a:63:98:c8:27:a5:61:0f:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f3cea252-7d3d-4d79-a378-fdeb50c55e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:e4:5c:6c:44:92:c3:87:d8:2a:5b:3e:1b:
                    9a:ce:47:ed:4a:d2:e7:0c:58:5a:81:90:64:ce:b6:
                    f7:1e:1c:7e:5a:44:d9:33:2b:21:9b:b9:b1:ad:ee:
                    27:09:73:5b:ea:a1:26:36:32:a5:e4:d9:20:21:7f:
                    eb:1c:41:ad:9f:03:75:a5:2c:45:b8:c5:bc:72:64:
                    df:99:ef:a3:ed:f1:10:a4:d2:79:fa:a8:86:e0:b2:
                    45:5a:cd:b1:c2:26:0a:bd:0d:74:3e:5b:69:78:a7:
                    31:39:5a:a8:46:12:ac:04:b4:cf:c4:f8:81:43:5c:
                    62:c5:f4:ec:f8:7e:96:b8:7d:33:59:c8:85:57:f5:
                    96:47:3b:4f:29:74:1b:ce:29:fe:14:54:f7:d3:9f:
                    a1:2e:7b:9a:ec:b2:09:ca:d9:18:ec:4f:34:3d:01:
                    82:4a:99:86:c0:cd:ec:5c:2f:65:da:8d:ac:61:0b:
                    b3:4d:6b:21:99:d0:8b:e7:e6:2e:86:58:55:d0:7b:
                    05:bc:8c:e9:89:87:94:f9:83:e0:9b:cc:0c:ca:21:
                    23:c5:1e:b4:d3:1e:eb:80:df:be:63:5b:aa:e3:65:
                    10:1a:ff:7b:0e:4a:6e:61:24:4b:e6:a0:7c:88:1e:
                    11:37:50:d6:82:f6:ad:1a:f7:47:b1:77:e0:7b:fd:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0B:3A:F8:1D:FD:9D:BB:F7:C8:69:1C:BA:62:DE:C9:CB:E3:F1:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/3b040932-da5b-3b1c-aa11-a9b721dee30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:7d:10:fb:bd:85:bf:49:10:1d:83:35:14:52:11:9a:4a:
         fc:28:62:9a:bd:02:74:f6:9d:55:45:df:68:29:d6:a8:f7:8d:
         54:76:7f:91:a1:07:b1:14:d9:b2:ae:1b:67:68:f6:29:20:61:
         10:b2:b7:63:d6:6e:d1:5b:b6:fa:92:e7:76:b4:07:3f:0a:db:
         ad:42:c2:a4:75:79:54:45:af:c0:f4:25:8f:41:fe:8b:b3:b3:
         ce:2d:19:b4:8f:23:67:e0:ec:8a:cd:1d:d4:88:34:ab:ac:1c:
         ff:9b:66:87:ca:5a:8d:47:26:c2:12:f4:5c:df:4c:54:c2:81:
         05:77:ac:3e:a5:bb:83:10:06:70:da:b4:83:aa:3a:b4:a0:db:
         fc:38:0a:45:a7:fb:75:81:fc:78:7f:8b:ae:85:73:46:77:a2:
         a3:28:61:ca:d9:4b:15:b0:25:e2:c7:e7:f9:9c:2d:57:0e:ce:
         da:75:de:6b:fe:96:9f:79:a3:f9:26:53:16:08:03:b4:7a:11:
         a3:52:d1:fe:e2:f1:ef:e3:59:23:c0:59:ce:60:35:84:86:ba:
         58:70:0a:ef:13:54:9c:ea:2e:f6:a0:c2:5b:05:88:89:27:31:
         0b:dc:ab:8f:69:f1:a6:72:29:5d:d2:b9:ac:a8:b9:65:51:29:
         68:07:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:47:11 2026 by rpki-client