Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa
File:                     f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa (raw, json)
Hash identifier:          62FvVRG0i1PR9GS+RP+PA4Felq+QWaFTd1vq7XqDCdY=
Subject key identifier:   D7:6C:70:28:7A:29:5C:E2:DE:EB:B5:84:C3:8A:51:72:F0:B2:F1:F0
Certificate issuer:       /CN=65a67cfc-305d-4049-900c-33f3b01e742a
Certificate serial:       010D0C9F4328584F374D1E6D742586D9699DBC80
Authority key identifier: 9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     394637
IP address blocks:        104.128.177.0/24 maxlen: 24
                          2620:e5:4000::/48 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:1e:6d:74:25:86:d9:69:9d:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a67cfc-305d-4049-900c-33f3b01e742a
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=9061049f-7d8a-4b71-b857-9aaacdc0fcd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:86:81:4a:23:b7:a3:57:5a:5b:59:45:c1:1c:
                    a8:75:32:4a:f9:72:d1:e6:b4:cc:35:40:c9:b6:ce:
                    d1:fb:48:ee:14:1b:56:e8:22:75:4e:55:c8:8f:ec:
                    d7:17:fa:ae:bc:49:80:44:c8:64:dd:26:ba:cd:d8:
                    f0:f1:63:e9:a1:3c:8f:36:4a:12:b7:3a:c1:00:85:
                    1a:3d:bc:5c:86:8f:bb:65:69:98:7b:b7:1f:96:cb:
                    57:80:55:0b:c6:2e:59:a6:d8:2e:9e:6d:ee:39:69:
                    f1:eb:c9:60:fa:b9:cb:cd:17:19:90:b8:e8:f9:80:
                    da:74:fb:65:29:c8:8b:5e:a8:dd:43:54:3f:65:73:
                    85:50:0f:d1:b2:d6:ae:cf:f2:08:f6:c8:54:78:e6:
                    55:ac:71:ab:15:98:99:45:e2:a9:26:07:51:a6:18:
                    39:b7:9e:3b:74:91:73:3b:f3:b4:03:42:46:09:2b:
                    f0:f9:78:11:d3:15:9d:78:fc:73:1f:c1:48:f7:42:
                    02:39:84:fd:b1:b9:b8:18:d9:7e:c0:ff:a1:81:50:
                    3c:b8:3f:8e:0a:7e:4e:d6:9c:5d:9d:bb:70:09:64:
                    8c:0d:c0:49:34:17:1d:ab:85:75:57:71:7f:c4:e0:
                    90:d2:43:79:d8:d4:43:dd:75:e7:f8:4e:30:72:c7:
                    02:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6C:70:28:7A:29:5C:E2:DE:EB:B5:84:C3:8A:51:72:F0:B2:F1:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.crl

            X509v3 Authority Key Identifier:
                keyid:9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.177.0/24
                IPv6:
                  2620:e5:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:07:ed:43:80:41:0c:44:89:0c:8b:49:01:19:72:7e:64:
         7f:65:48:cb:74:61:e9:f8:69:88:47:79:a1:91:34:2f:c4:22:
         ea:9a:b3:76:f3:1b:b9:75:99:8a:af:03:69:1b:e6:14:a6:29:
         6b:ba:8e:cf:4d:22:ab:65:9f:cb:2a:b8:01:04:c3:6a:ec:75:
         16:fd:c2:c9:29:98:6f:b6:54:50:12:85:b2:41:14:21:31:43:
         d5:ac:25:79:6f:6d:ef:12:c1:d0:14:e0:99:23:87:db:fa:15:
         f7:14:3d:dd:0c:40:29:e9:db:6e:e7:ce:9c:b1:2b:08:f6:da:
         62:00:8a:6c:5b:a9:dc:5d:63:94:00:07:ac:8e:85:b7:32:2e:
         ac:a9:55:84:bb:55:4b:a3:e7:f1:9c:a7:2b:8f:61:a8:57:77:
         7d:cf:7c:1b:42:26:84:13:bf:55:95:03:19:af:11:d7:15:52:
         f4:99:ec:11:46:d4:25:91:cc:b3:df:cb:c7:f0:d4:ff:a1:c9:
         6f:15:a1:4b:e8:15:b7:fd:57:d0:1d:de:c4:ef:4e:40:c9:a6:
         6d:f3:75:ac:12:16:f2:c7:06:ee:7e:28:a5:91:76:dc:a8:0e:
         b1:80:f8:9f:64:2d:ac:9d:89:0b:1e:6f:17:92:48:ef:06:2e:
         c7:ab:b7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:14:08 2026 by rpki-client