Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd0ad4e9-f234-325a-83e9-34d0b231b6ed.roa
File:                     bd0ad4e9-f234-325a-83e9-34d0b231b6ed.roa (raw, json)
Hash identifier:          51n4C6QRS09mlM9tudofoyTf1sXd1QsnYfXsI8S9vgo=
Subject key identifier:   2F:1A:7D:35:F1:4F:3D:46:3E:9B:32:14:CD:E9:41:14:79:D1:EC:23
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F2D87AEB729D20A402903BFC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd0ad4e9-f234-325a-83e9-34d0b231b6ed.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        65.86.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:ae:b7:29:d2:0a:40:29:03:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=69305698-ce17-471b-abaa-446a34ee1e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5f:bd:25:60:12:20:45:c3:cc:8f:27:b5:b7:
                    b5:97:8d:91:c8:a1:68:7c:83:68:ad:47:3b:e9:55:
                    3d:b6:c4:97:78:28:57:cb:46:34:93:86:ae:3e:14:
                    d5:fe:10:5d:dd:c2:82:6a:6f:11:37:46:0f:59:84:
                    43:91:d1:e2:a8:e8:aa:00:2d:7a:05:da:6f:d4:5b:
                    6d:3b:43:7b:01:67:f0:48:fd:ba:84:84:a7:df:a1:
                    8c:c5:27:54:ea:23:fc:7d:fb:c1:51:1b:90:0b:63:
                    3a:8f:fb:f5:e3:cc:4a:f9:2a:0b:68:04:40:f6:aa:
                    22:c1:4f:c6:a2:92:03:99:03:79:e6:eb:9c:72:48:
                    f7:28:79:9e:8d:24:00:c8:69:f4:b3:3e:49:46:2c:
                    2f:e1:17:37:47:73:a8:c3:cb:be:32:96:94:7f:04:
                    32:a2:bf:de:74:4b:62:4f:88:51:6c:12:6c:25:46:
                    db:da:14:5e:c8:11:a6:0d:a2:5a:96:97:e3:43:1f:
                    97:9e:85:22:78:18:aa:03:71:5f:95:0a:0a:2c:5c:
                    1f:68:7c:42:bd:b5:30:d2:82:12:5c:6f:72:fc:e4:
                    d1:10:a5:da:94:b2:af:13:69:3f:99:c8:99:44:f4:
                    86:d7:ac:43:48:5a:59:dd:a6:da:09:4c:9b:5f:a9:
                    8a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1A:7D:35:F1:4F:3D:46:3E:9B:32:14:CD:E9:41:14:79:D1:EC:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd0ad4e9-f234-325a-83e9-34d0b231b6ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:54:68:87:6e:1c:2c:a8:6c:56:8a:a1:c6:f0:f1:43:2b:d6:
         ef:dd:2d:d3:de:99:7c:ed:47:35:f5:c3:a3:19:bc:b3:e0:16:
         e4:22:97:8b:0b:c7:ac:a1:a1:f7:fe:6e:85:7a:3d:9e:c6:75:
         9e:02:4d:51:10:2a:4a:2f:22:09:ce:71:c5:59:53:d2:5a:99:
         b4:cb:a5:45:3f:f9:56:8b:a6:5b:0a:97:41:a9:7b:be:b1:ab:
         09:35:14:bc:c9:0e:a2:67:1c:38:60:2e:02:06:8e:6d:ff:c4:
         5d:f3:09:98:5f:50:91:af:5d:71:5d:ba:d3:82:38:98:79:26:
         5f:58:72:69:de:61:19:3f:51:59:b9:32:52:a3:4f:f9:ea:26:
         84:c1:a0:ed:8f:ff:4a:30:7b:84:30:6f:d2:1b:64:02:5e:c9:
         62:c8:51:3c:e6:05:ec:62:82:a5:48:01:a0:15:d8:c7:33:b1:
         d0:e7:7c:04:e2:c4:cf:bc:ba:5d:4f:88:fa:e0:8d:2c:a8:1c:
         01:e9:9f:b9:f7:1b:2e:20:54:47:3d:23:6a:94:0e:cb:91:f3:
         ac:7d:e3:5a:94:91:11:73:7e:ba:48:76:31:f7:b2:15:ea:df:
         59:99:f7:60:ae:24:4c:f5:4a:84:60:0a:d2:89:a6:95:65:d5:
         03:83:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:42:29 2026 by rpki-client