Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/9688a71c-310c-3da3-a09e-01302ca5d986.roa
File:                     9688a71c-310c-3da3-a09e-01302ca5d986.roa (raw, json)
Hash identifier:          ueBHyY76iuVDcAf1YwNi0VXSpkd/zxijcCF1UUAbCGk=
Subject key identifier:   15:AF:52:D2:76:B7:B8:25:52:8F:FB:29:BD:FC:AF:71:EC:A2:28:45
Certificate issuer:       /CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
Certificate serial:       010D0C9F4328584F488BD558453CD3D9DAC35F00
Authority key identifier: 0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/9688a71c-310c-3da3-a09e-01302ca5d986.roa
Signing time:             Thu 24 Sep 2026 17:15:24 +0000
ROA not before:           Thu 24 Sep 2026 17:15:24 +0000
ROA not after:            Wed 23 Dec 2026 18:11:16 +0000
asID:                     27258
IP address blocks:        64.77.222.0/23 maxlen: 24
                          68.68.175.0/24 maxlen: 24
                          69.60.190.0/23 maxlen: 24
                          97.75.245.0/24 maxlen: 24
                          97.75.251.0/24 maxlen: 24
                          208.101.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:8b:d5:58:45:3c:d3:d9:da:c3:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
        Validity
            Not Before: Sep 24 17:15:24 2026 GMT
            Not After : Dec 23 18:11:16 2026 GMT
        Subject: CN=95aa1f56-2294-4afe-94a0-3793747f14fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:f6:62:c5:68:1a:12:ed:fe:5b:23:78:23:
                    80:a8:4d:c1:ca:34:9b:e9:ce:a6:60:eb:cb:29:dd:
                    e9:2e:64:90:47:d3:49:6c:a5:d7:11:24:b7:fe:37:
                    80:a6:d8:08:f3:7e:9b:93:29:d7:27:aa:f3:12:a8:
                    ab:97:86:92:65:85:2b:99:5a:f2:94:18:98:5e:e2:
                    00:62:39:0d:ac:d1:44:63:c0:c7:3d:ea:9a:da:5a:
                    16:01:00:91:71:11:5b:67:f5:46:a7:f1:b1:68:80:
                    2e:13:b4:4d:cc:85:50:df:5f:e6:90:f0:c1:be:9c:
                    3a:ae:71:c0:5b:21:f2:2e:31:e0:39:c7:24:65:82:
                    b1:8c:6d:0d:b3:22:40:a0:d9:d4:97:e3:95:9f:29:
                    70:53:ca:5d:2f:9e:ba:f9:0e:8f:21:90:11:47:f2:
                    66:b5:43:66:ef:6b:cb:d1:45:ab:23:73:2e:54:8e:
                    25:f6:71:83:62:57:2c:c8:62:e7:5b:2f:fd:d9:0c:
                    0e:f3:1f:05:52:6e:0c:d4:06:cd:4d:b6:e0:5f:1d:
                    2d:65:63:96:c5:09:7e:17:67:7d:0b:27:6d:52:a6:
                    90:8d:21:3c:89:5d:4e:6a:14:80:c5:99:03:b1:5c:
                    a6:7f:e3:49:14:9f:f7:40:57:0e:0a:a4:2c:20:f4:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AF:52:D2:76:B7:B8:25:52:8F:FB:29:BD:FC:AF:71:EC:A2:28:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/9688a71c-310c-3da3-a09e-01302ca5d986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl

            X509v3 Authority Key Identifier:
                keyid:0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.77.222.0/23
                  68.68.175.0/24
                  69.60.190.0/23
                  97.75.245.0/24
                  97.75.251.0/24
                  208.101.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:19:da:08:35:f4:6c:96:a0:19:a9:7f:80:cd:ed:61:28:2d:
         b7:da:24:90:21:41:1c:5e:bd:07:a6:5b:df:5b:a4:42:b2:77:
         bb:f6:8e:1e:43:0b:7f:3e:b5:75:e5:24:b5:82:5c:9f:d6:d7:
         d8:1d:3f:60:2e:ba:32:16:d7:db:36:d7:7f:3b:0a:92:26:4b:
         b5:c3:7a:a8:6a:a9:09:4f:a6:14:bd:7f:43:c7:a5:29:0b:05:
         fb:7d:53:5a:75:26:a8:75:28:b8:f6:5f:b5:44:bb:5d:30:48:
         14:aa:a8:38:01:dd:2a:18:45:16:88:01:3d:e5:21:c3:dc:74:
         9f:4a:3c:3b:f2:f6:06:46:ba:6f:0f:19:23:31:6b:aa:26:9e:
         78:3b:d8:80:89:12:91:d0:77:9f:1c:ed:c5:e8:83:47:2e:07:
         1f:36:7e:9b:59:42:5c:e7:a9:5b:63:47:67:b5:76:a1:18:c0:
         9d:5e:99:1b:1a:12:b2:70:16:3f:f6:8e:77:53:32:25:cc:3f:
         e9:a8:76:21:98:41:2a:37:88:b5:1d:a6:b7:30:ef:96:9d:c5:
         7c:4b:28:ec:d7:bf:98:13:04:e3:7d:3e:2c:21:73:f8:e3:fb:
         de:4f:5f:70:e3:71:30:7c:47:ef:47:c3:d0:8e:5f:17:6f:d8:
         06:1d:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:57:44 2026 by rpki-client