Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51ca60e0-cf51-32b7-956e-640e687ac499.roa
File:                     51ca60e0-cf51-32b7-956e-640e687ac499.roa (raw, json)
Hash identifier:          rx5HtI6HXcTEnrrQG6hCE4BWdV8xchBxk4Z0gCfMwOQ=
Subject key identifier:   9D:EB:88:28:C3:7D:9A:55:26:9F:D8:9E:56:64:B7:C0:47:27:99:42
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD4A7E3329BF7FD352CB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51ca60e0-cf51-32b7-956e-640e687ac499.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     22119
IP address blocks:        65.211.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:4a:7e:33:29:bf:7f:d3:52:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=3f420aef-98fa-444a-8795-38815fc3292b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:0f:d8:7f:88:ce:59:17:79:ea:06:8b:ae:
                    0d:f8:ef:c9:c3:c2:70:e7:8b:e3:64:3d:6b:c0:e6:
                    1e:d3:73:b2:da:c4:23:6d:95:fc:7b:50:eb:19:c2:
                    68:cc:70:6a:f9:28:75:b8:10:ff:57:31:49:79:5f:
                    74:1a:b3:3b:ef:c3:5e:b9:54:73:27:3d:3c:27:cd:
                    72:1a:af:b8:c0:9e:c5:15:a6:d6:ab:bb:7f:55:4b:
                    68:c8:36:38:05:90:94:6b:51:fd:99:93:fc:f8:53:
                    84:58:0f:f3:86:5e:f4:98:d8:a6:7a:cd:a2:a6:9a:
                    bb:b6:a7:69:af:95:ca:80:b4:95:2b:c5:a9:91:82:
                    1f:62:6c:de:d7:cd:b3:95:d5:fc:bf:e9:ef:4f:b1:
                    2d:df:b3:d8:95:fa:b6:97:27:99:68:02:d1:8f:94:
                    63:86:54:09:69:eb:12:42:75:95:28:27:5a:ba:c7:
                    a0:47:04:80:67:b6:26:4b:49:8f:a1:70:84:24:fa:
                    cd:cc:93:8f:8e:f4:03:40:f5:f4:fd:1a:a0:de:51:
                    01:ed:39:51:82:43:5d:8f:af:4e:2a:ee:f6:61:1f:
                    9b:57:f9:b4:59:f7:05:a4:eb:9e:2a:4d:aa:e4:cd:
                    9f:d4:b1:36:a3:11:0a:23:b1:26:1c:a2:6d:76:26:
                    84:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EB:88:28:C3:7D:9A:55:26:9F:D8:9E:56:64:B7:C0:47:27:99:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51ca60e0-cf51-32b7-956e-640e687ac499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.211.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:85:b9:7c:55:84:03:f0:fc:6a:a9:28:89:4d:bc:96:3b:8e:
         61:15:01:e0:fa:50:17:b5:e1:8f:79:de:32:5a:b7:0b:75:ab:
         59:71:b2:a8:55:6a:75:9e:f1:74:c0:b1:6b:d8:ac:88:70:71:
         77:85:5a:23:8d:f3:38:00:74:9a:30:b3:62:d0:17:da:3b:8d:
         fa:e3:d1:b8:63:c8:2c:db:3e:6b:3d:4b:f6:14:d8:a7:62:3e:
         4b:f3:55:58:27:27:35:72:a0:b5:5b:21:5f:e0:2c:24:ee:9e:
         35:f6:a0:98:76:33:3d:e6:c7:d8:76:ab:4f:cd:2a:a5:19:68:
         50:2d:56:7b:2c:43:a0:c7:0f:9f:36:56:54:3a:3d:61:ae:eb:
         4b:ba:e1:bc:41:21:5b:03:1a:b0:0d:0e:9a:44:ea:61:7f:10:
         e6:51:23:0a:5a:01:39:66:a4:95:81:65:f6:30:49:89:a7:cb:
         89:5a:e6:11:41:5f:fa:2d:0e:5d:13:ab:e6:ae:49:06:e8:0e:
         8c:39:fe:f9:64:ef:27:e0:5c:e4:36:66:bd:ed:98:f5:b2:63:
         d2:18:1e:d6:4b:e3:68:41:bd:6e:2e:3f:9f:04:bb:e5:5a:10:
         c2:7a:ba:95:9c:70:e7:f2:a1:33:f8:c0:c5:95:6f:7f:7a:9d:
         ad:3c:79:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:12:16 2026 by rpki-client