Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/8a050feb-5264-3c56-8caf-2fcc5805a106.roa
File:                     8a050feb-5264-3c56-8caf-2fcc5805a106.roa (raw, json)
Hash identifier:          rnTbOsDwiMQc+2o3fAAWcHPkpZwiKpIVqBRm5i8lT8g=
Subject key identifier:   D2:B6:B4:7F:FE:45:3A:F9:F4:1A:52:5D:80:BD:4F:38:CD:80:96:AC
Certificate issuer:       /CN=55f5dbbe-55fd-4d86-a7c8-84b9d303ce80
Certificate serial:       010D0C9F4328584F305273F70E605D8C726B8D40
Authority key identifier: 8D:03:E4:8F:A8:B2:DB:94:3C:C7:A8:5E:C8:08:84:1A:92:98:35:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/8a050feb-5264-3c56-8caf-2fcc5805a106.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     394503
IP address blocks:        65.38.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:73:f7:0e:60:5d:8c:72:6b:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55f5dbbe-55fd-4d86-a7c8-84b9d303ce80
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=112ce901-db16-49e4-9403-b70866ac811a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cd:59:45:e2:50:cc:f7:e2:77:70:34:b6:e5:
                    35:2f:fb:9b:ad:70:27:34:ad:db:f7:04:25:4e:1f:
                    ca:a2:45:29:1b:6d:e3:83:a5:16:9e:f7:5a:ab:72:
                    14:43:01:a2:a2:90:94:41:11:6e:ab:18:63:99:1c:
                    1f:66:d1:e5:bc:6b:85:b4:d6:8c:f9:f0:93:09:0a:
                    6a:68:3d:7d:2a:f4:75:40:76:16:dc:90:7e:53:0e:
                    b6:f4:ff:5f:d8:0f:b4:10:de:c3:9e:0d:de:f2:bf:
                    53:09:bf:c1:dd:31:2c:9f:ce:48:8a:7d:44:0e:f0:
                    b7:05:c2:e4:82:42:fb:53:4b:a8:a7:50:5d:a6:d0:
                    88:5b:26:03:e1:29:df:b2:0c:99:f3:6d:24:f3:c3:
                    78:00:eb:8d:b6:2c:de:77:e1:07:c6:22:f7:52:f0:
                    45:d6:3e:a6:c0:54:c3:9f:c9:b6:31:66:10:79:67:
                    7b:b4:65:51:f8:bd:a8:dd:9f:ed:6e:43:01:f7:d7:
                    34:83:9d:52:46:e0:13:11:a7:c8:6f:ec:9f:a4:b0:
                    dd:b3:61:3f:25:4f:51:36:df:3f:7d:43:3b:fb:6e:
                    f8:a9:32:a5:17:48:fa:44:f0:4d:e8:9d:39:3e:bf:
                    87:00:aa:fd:6c:cc:97:1c:4f:ef:30:34:9a:56:3a:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B6:B4:7F:FE:45:3A:F9:F4:1A:52:5D:80:BD:4F:38:CD:80:96:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/8a050feb-5264-3c56-8caf-2fcc5805a106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.crl

            X509v3 Authority Key Identifier:
                keyid:8D:03:E4:8F:A8:B2:DB:94:3C:C7:A8:5E:C8:08:84:1A:92:98:35:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:08:75:56:a5:5a:b7:02:fa:ce:22:5c:e2:fc:0e:c8:9e:e9:
         0a:f7:f8:d9:ce:42:b8:fa:9e:8c:0b:11:61:04:89:d4:70:e5:
         ef:47:e7:a1:5c:74:18:f7:0c:58:0c:3c:1a:da:33:80:00:3c:
         9d:9e:e4:af:4e:ad:60:7a:d8:ed:17:72:70:7d:49:59:a3:17:
         73:4e:64:a1:0a:9a:43:10:85:cb:5b:4e:a2:4d:c5:e9:91:ea:
         bc:d3:c3:f6:68:4d:db:64:82:1c:3a:fb:38:9e:2d:98:de:19:
         91:5a:18:50:2d:c8:af:75:89:ea:f4:4e:27:ba:01:79:66:34:
         94:e2:d2:ab:f4:aa:17:c6:b1:c1:fc:6a:ba:08:8b:a5:6c:bc:
         40:51:d5:d2:7e:cc:80:a3:69:4e:38:5f:9a:b8:05:35:39:3f:
         6c:6e:10:aa:c2:1e:45:15:f7:7e:4b:f5:4c:8a:c4:96:e5:55:
         80:63:f7:46:9d:1c:d0:a3:eb:79:2a:64:99:10:25:60:16:96:
         f0:df:9a:09:3a:67:8d:d7:93:45:cc:98:26:cf:f0:d9:9f:b7:
         7c:c0:a0:63:f2:93:0e:26:7e:88:b3:e9:e2:23:17:b4:07:03:
         07:db:d2:4c:78:da:d2:cd:b9:4a:53:fb:16:c1:17:74:d9:c7:
         60:69:ad:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:22:12 2026 by rpki-client