Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b97b9d29-ad3a-3462-819f-40c870d6de63.roa
File:                     b97b9d29-ad3a-3462-819f-40c870d6de63.roa (raw, json)
Hash identifier:          SOoZL8ppldqDqjrwiVVRiQvDPkpTRlmphF7hjE9wbQM=
Subject key identifier:   33:4B:C9:B3:67:D6:C6:71:B9:5D:49:04:EF:60:F8:63:29:5C:5C:60
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584F655D773F9B4D5B7711737240
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b97b9d29-ad3a-3462-819f-40c870d6de63.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     11537
IP address blocks:        64.57.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:77:3f:9b:4d:5b:77:11:73:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=0ca730f0-18fe-49d1-a4c4-59a8ff6fee59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:fc:4d:7e:b9:14:21:a3:82:c0:36:de:97:
                    b0:01:c5:45:8d:fc:61:75:4d:d1:42:cf:73:9b:1d:
                    0a:9d:30:ea:25:ed:19:bd:b5:d8:5e:90:5a:d3:61:
                    f4:a4:96:a5:98:07:ed:2e:bc:7e:30:28:7b:8d:15:
                    32:34:24:a9:2f:8c:76:74:fe:68:c4:fb:23:ca:14:
                    00:43:c0:63:73:a9:cc:bc:e6:6e:e0:c0:e0:c4:7c:
                    12:70:96:d2:5c:f1:c4:46:4b:84:e2:81:68:cc:e1:
                    bb:dc:32:ab:f2:f5:26:63:34:69:6f:52:15:4b:05:
                    98:f0:62:dd:a6:48:ce:db:40:14:49:50:71:51:eb:
                    d1:9c:25:35:6e:3b:55:1b:d6:1f:52:c2:b2:53:b2:
                    0c:02:43:27:ac:25:c3:9f:75:6c:bb:94:b5:90:bd:
                    84:b4:f0:15:a8:a2:2a:2a:14:9b:68:9e:61:99:9f:
                    13:11:5d:66:59:1c:fb:e8:b6:2d:36:e5:0b:70:ad:
                    87:3b:8c:a1:6b:cd:89:73:85:d8:26:55:e8:52:63:
                    4b:60:b9:69:b7:7b:27:e9:c8:bf:27:fb:ab:ad:0f:
                    e8:80:d5:b1:e3:2f:40:fd:66:04:11:b0:56:dd:cd:
                    d3:86:a5:06:7f:69:ee:d2:76:16:e1:23:71:dc:b2:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4B:C9:B3:67:D6:C6:71:B9:5D:49:04:EF:60:F8:63:29:5C:5C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b97b9d29-ad3a-3462-819f-40c870d6de63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f2:6c:1f:55:76:51:e8:11:d9:a5:57:bd:1d:c9:0d:02:41:
         c0:0d:c1:b9:76:cb:8e:61:47:86:4a:25:e3:6d:4a:62:f1:dc:
         c8:bf:93:91:f6:96:a8:11:64:43:26:d1:04:d6:80:1a:39:ef:
         d6:5e:85:2b:3a:1b:40:13:94:b2:f0:33:54:a1:c4:79:bb:90:
         56:4c:1b:66:0c:d9:cb:dc:0a:a9:57:b9:b0:7d:88:5a:b0:8c:
         8f:af:29:c6:86:01:06:7b:8f:52:75:63:61:7b:ad:fb:86:c8:
         e2:9b:f1:9d:72:da:00:c2:f5:99:d1:f6:2c:0c:e4:51:f0:e3:
         ec:1b:ae:5c:65:7a:fe:8f:cf:ed:41:24:db:48:a6:5e:fc:b5:
         b4:9a:22:e2:de:a9:49:5f:c7:3c:64:bf:57:0a:31:b5:db:4b:
         b4:f9:8b:a2:b5:65:45:63:48:6e:c7:92:63:2e:59:25:a0:97:
         c6:65:b2:8c:68:d2:0c:5d:dc:d1:60:bf:44:8b:b4:2a:5c:d8:
         c2:58:d7:49:6c:8c:d1:90:df:11:c3:80:be:b9:0a:5f:68:19:
         47:15:4c:60:d5:91:d0:8f:98:1e:89:7e:be:d1:c9:1c:40:e0:
         bb:e9:19:14:1c:b1:65:b6:48:1f:77:39:e6:95:97:a0:35:50:
         7b:d9:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:33:50 2026 by rpki-client