Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8939da30-7b1b-3ef6-b379-85e7ad13ec99.roa
File:                     8939da30-7b1b-3ef6-b379-85e7ad13ec99.roa (raw, json)
Hash identifier:          DRHmpTYDkUWd073aBvK09tYeKab2/NPhNp41zRQpYDs=
Subject key identifier:   B4:62:F8:29:7E:B0:B1:66:98:FE:32:9E:E8:D9:2E:39:5B:68:3A:06
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584F093CD7A5FAFDD08B318F7140
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8939da30-7b1b-3ef6-b379-85e7ad13ec99.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     14061
IP address blocks:        159.65.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:d7:a5:fa:fd:d0:8b:31:8f:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=2835c3fc-88fb-48f5-bf22-242241033225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:d7:8f:50:e1:7a:b6:bc:14:35:72:ca:56:
                    f5:f7:42:15:2b:f0:58:2e:d7:2f:b9:8d:db:9b:49:
                    36:d3:29:ad:4f:0e:c8:1c:97:01:73:2d:2e:87:2a:
                    5f:48:11:01:8d:00:3a:1f:92:c0:e1:2d:13:79:a4:
                    75:5f:15:bf:1c:d7:26:ee:b5:9a:bc:68:84:47:37:
                    61:38:73:fa:97:9d:da:f5:80:92:01:f9:83:82:c7:
                    84:0c:7c:1e:bb:8d:fd:b5:8c:35:29:0e:db:7e:59:
                    65:36:0c:1d:39:1e:34:0f:a1:0f:54:ea:3d:ad:6f:
                    5d:f2:ec:dc:f0:84:ae:09:3f:53:b6:88:a2:95:75:
                    9b:d3:0c:bd:79:e7:c3:a2:52:df:c3:e4:6a:8b:38:
                    0d:a4:f5:51:78:59:ae:84:bc:83:36:44:38:07:a4:
                    9d:25:83:fe:88:c9:c8:36:d2:76:e2:30:2d:ce:e7:
                    9e:47:21:a4:f3:4d:71:3f:3d:26:bd:69:4e:09:ed:
                    5a:4a:52:28:06:ee:af:f0:c8:a9:94:f7:3f:ea:38:
                    19:31:10:ec:7f:7f:c8:75:09:7e:35:d3:2f:f5:3d:
                    a7:2c:eb:6b:ee:b3:9b:ee:64:b4:ec:b9:f4:7e:d0:
                    1f:fa:9b:f7:81:5e:4b:a6:6d:d2:70:37:e9:3b:b5:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:62:F8:29:7E:B0:B1:66:98:FE:32:9E:E8:D9:2E:39:5B:68:3A:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8939da30-7b1b-3ef6-b379-85e7ad13ec99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.65.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:7b:ea:a8:0e:ff:52:c1:5d:b0:1b:06:cd:99:ac:9c:0d:d4:
         eb:c7:44:92:db:c0:62:e9:9b:23:aa:6e:3d:0d:4f:83:90:30:
         2a:a1:fb:5f:64:84:11:12:eb:d3:41:41:d3:ff:ae:2f:52:36:
         05:a2:73:f5:06:b2:74:5a:c6:d2:bf:26:e4:ea:8e:9d:00:a8:
         42:03:5a:66:41:38:4d:76:39:d5:de:b0:48:d8:33:1c:14:87:
         b8:72:61:46:ab:40:35:07:c4:98:e3:22:ff:4b:02:6f:79:05:
         8f:8d:06:4b:d7:a3:78:f1:3d:65:b8:60:31:29:e6:c1:e2:e0:
         94:a1:d0:4c:18:cc:69:a7:f2:8a:fb:df:50:70:b9:35:25:04:
         1c:c4:bb:e0:b0:63:62:75:19:04:23:ae:40:fa:bd:09:df:ce:
         5f:dc:4d:68:55:7e:5f:76:8c:d4:78:24:6d:db:67:3c:e1:71:
         6c:4b:e1:ba:f7:4b:88:72:84:65:fa:46:2f:e7:84:e4:a9:18:
         7e:8f:74:41:45:42:23:a8:4f:42:16:91:12:72:86:1b:87:91:
         0b:d1:01:31:be:43:a9:53:d3:ae:b6:f3:9d:2a:d8:bc:8c:7e:
         c0:2e:9a:98:74:85:ef:a3:67:40:4e:14:02:80:d6:31:ac:3d:
         f5:3e:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:20:43 2026 by rpki-client