Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa
File:                     9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa (raw, json)
Hash identifier:          q0W1Kc2PuPr0iJFEa2sE5VQjSMBFetxyi+RsOOPumfA=
Subject key identifier:   BA:FA:D7:19:09:A4:E4:2B:F1:04:F8:B3:7B:D6:40:63:D2:3E:02:9F
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584F5386B3819037C5C2AC279E80
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa
Signing time:             Mon 28 Sep 2026 15:38:57 +0000
ROA not before:           Mon 28 Sep 2026 15:38:57 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     33651
IP address blocks:        64.84.96.0/21 maxlen: 24
                          64.84.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:86:b3:81:90:37:c5:c2:ac:27:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Sep 28 15:38:57 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=689b3f32-7d44-45f4-b675-bd209fb69083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:eb:ba:6e:1a:06:f1:58:1d:ff:75:a7:0b:
                    52:c5:76:4c:7c:c4:b1:0c:42:d8:18:eb:05:fb:26:
                    6b:f1:71:7e:96:7b:0b:50:8d:1b:cb:3b:9d:e6:fc:
                    e2:74:4f:c1:51:01:c8:f2:ec:3a:2f:b6:cd:73:d8:
                    9d:45:fc:c3:4b:2f:97:eb:ab:3c:9e:9a:5b:fa:e5:
                    75:44:86:4f:a2:1e:18:97:f2:01:bf:8e:b9:7c:d5:
                    9d:e0:76:78:d0:79:6f:ca:48:46:e6:97:39:e5:1b:
                    72:8c:46:c6:9d:0c:25:69:b1:e0:eb:4e:ba:94:8b:
                    06:34:7b:56:0c:78:51:5e:ac:5d:03:6f:c4:58:55:
                    5f:ee:b1:0a:e9:72:0c:8b:bc:44:03:d0:0c:d6:17:
                    42:83:78:88:1b:26:f0:c1:02:80:02:2c:a0:32:93:
                    88:b4:c6:2a:14:d2:6c:44:8c:1e:08:e0:b3:a3:2b:
                    dd:d0:7f:4c:fc:f1:ef:b4:e0:b3:81:58:45:81:7f:
                    c6:37:bd:12:9f:d4:3c:6a:f4:96:32:e8:52:7c:52:
                    43:a9:d7:ef:42:eb:d4:06:fa:1e:12:8e:bf:22:d1:
                    3e:c6:42:fe:e6:cb:07:61:f9:3d:89:43:de:b9:69:
                    02:87:72:12:95:74:88:46:b1:f6:4b:57:58:41:e5:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FA:D7:19:09:A4:E4:2B:F1:04:F8:B3:7B:D6:40:63:D2:3E:02:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.96.0/21
                  64.84.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:3f:26:7c:54:6c:e6:13:1e:2e:a3:44:c8:20:3b:c0:f4:62:
         91:03:90:0e:18:c8:5a:a3:d3:0f:1d:6b:1d:57:7e:1e:4e:3e:
         b6:f2:5e:84:c2:4d:f2:ef:a6:2e:67:3b:a8:d3:58:42:1d:0f:
         af:3e:7b:e9:9f:28:5b:1f:8d:6e:03:52:15:bf:b9:56:aa:8d:
         c6:39:48:ad:6b:ed:3a:d5:49:8b:e3:b2:94:01:c7:f0:97:58:
         ed:ef:bf:ab:b8:4d:97:79:cc:d9:bc:0a:1e:25:25:d0:1e:4f:
         7e:f7:b0:c7:c1:3c:fb:59:d5:7a:45:30:f8:db:a1:3e:2a:b1:
         2f:c5:47:90:32:50:d3:75:49:18:6d:fe:b8:33:e2:43:e5:52:
         3b:be:a9:ab:96:05:3f:ba:db:fa:68:77:93:29:ea:4b:5a:52:
         51:05:f5:f1:2f:43:d7:c7:8d:85:b7:d8:b4:f8:e5:e0:87:78:
         79:99:97:e1:16:a7:4a:38:7b:c0:2f:20:d2:e9:89:ad:d7:5f:
         7c:e1:64:97:33:b6:90:ba:e6:af:10:65:68:ce:89:f1:ba:c7:
         9f:d1:4d:ae:69:ea:5c:a6:48:9d:60:da:4b:4c:a9:c0:6e:10:
         54:98:ab:3d:a3:a8:63:f0:92:be:75:0c:7b:bc:59:e2:0f:42:
         62:50:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:23:05 2026 by rpki-client