Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa
File:                     e4bee016-f469-32b3-882a-abe4f14aaed6.roa (raw, json)
Hash identifier:          tGLSI9V+Ag6sfHaZHn/UH3rx9sOC1EGaKcyarhKvxOQ=
Subject key identifier:   02:F3:8E:76:4C:BC:EA:B9:7B:AE:31:3E:63:E0:95:5D:37:F2:5E:EB
Certificate issuer:       /CN=935332e4-2b48-45ab-95bc-6d4c2916350f
Certificate serial:       010D0C9F4328584F0ED232F3F5C6169674006100
Authority key identifier: DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     393507
IP address blocks:        149.20.68.0/23 maxlen: 24
                          2620:137:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:32:f3:f5:c6:16:96:74:00:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935332e4-2b48-45ab-95bc-6d4c2916350f
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=a7827133-bc8c-4463-940e-706340f2f315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:3b:bd:f7:cf:7b:cb:89:c5:70:74:3c:b9:
                    c9:5d:ce:d1:71:5d:69:64:df:7c:c2:2b:ec:68:a1:
                    c4:7f:b1:e5:db:85:cf:52:c2:0b:7d:1a:60:cf:f5:
                    bd:2d:79:b5:8e:64:89:03:d3:6a:6e:2f:56:2e:10:
                    e9:de:99:79:03:07:22:f5:e9:85:a8:75:4d:25:99:
                    d6:65:d1:ae:d6:63:3b:99:d6:a6:c0:8e:4e:fa:7a:
                    df:82:39:ff:96:99:37:ad:51:45:cc:7d:06:b7:3a:
                    60:ff:cf:04:48:3a:37:54:9a:ca:b1:b0:b3:9a:47:
                    74:50:98:d3:34:0e:a3:da:cb:63:9c:d5:ed:f9:07:
                    17:02:6a:35:15:87:e4:9c:9c:fc:2b:4f:24:69:78:
                    7b:e5:81:7c:94:22:e5:9f:78:7b:54:f1:31:c0:88:
                    f0:29:75:35:84:a0:bc:e7:0f:d4:a3:69:87:8e:07:
                    e8:f7:2b:2f:77:cb:16:af:2a:0f:ee:a2:f1:f1:51:
                    f8:8c:cd:e9:0f:3d:28:da:24:af:76:78:9a:2b:6b:
                    b2:eb:58:bf:1e:c7:22:62:63:7f:75:26:27:bb:07:
                    3a:4b:ef:9b:f1:d7:44:32:31:77:34:9e:32:38:29:
                    4f:55:2c:33:3e:c5:80:72:2b:a2:1c:4d:8b:20:03:
                    24:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F3:8E:76:4C:BC:EA:B9:7B:AE:31:3E:63:E0:95:5D:37:F2:5E:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.crl

            X509v3 Authority Key Identifier:
                keyid:DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.68.0/23
                IPv6:
                  2620:137:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:41:da:b3:27:05:1b:f6:90:0f:6a:fd:2e:69:83:99:40:6e:
         87:17:b5:7a:3e:a5:6f:13:d8:6f:7a:95:6c:0e:6c:3c:9b:57:
         20:b1:26:69:88:91:81:49:e0:2a:1c:09:66:59:03:82:38:0b:
         e1:bb:da:06:16:00:03:67:b6:45:f0:11:e7:59:5b:61:3f:54:
         99:99:54:a1:49:c6:ae:b2:4a:c4:67:19:7f:99:7e:de:2f:41:
         b4:8a:1f:ff:c1:9f:e1:88:a8:56:14:f2:73:04:82:02:e2:20:
         1a:68:0b:d3:46:60:8b:3b:26:df:44:90:b2:ec:b7:04:74:f4:
         15:62:7f:78:fa:4e:87:b9:e1:0b:df:c7:eb:da:1b:e7:85:9c:
         97:1c:f0:56:ff:e1:2e:50:fb:85:94:f4:4f:0a:d4:f3:6f:d9:
         0d:78:80:c4:92:5f:e6:8c:0f:3c:23:c1:37:00:26:41:00:d5:
         c6:29:86:59:90:0b:d6:bb:df:fb:ab:08:95:3a:89:81:f0:d9:
         f1:f8:fe:25:dc:ff:07:32:a1:b8:d7:0d:2b:f8:f5:30:b9:cd:
         08:71:cd:bd:5c:39:bb:ef:17:98:19:07:b3:e3:e9:e0:dc:e0:
         43:50:7f:80:bb:c2:3a:68:b0:15:17:ea:96:b9:d3:f0:b0:64:
         4d:a9:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:44:19 2026 by rpki-client