Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa
File:                     d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa (raw, json)
Hash identifier:          BIxPwAsQCJpr+iteDDZHNPHhe3Cfeep8aBZUTQqOmb0=
Subject key identifier:   EC:21:49:B5:36:1F:69:6F:3F:C7:10:9C:3C:32:9E:B0:25:46:61:5F
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584F093CED77CA670C5F775D7040
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     63363
IP address blocks:        64.96.5.0/24 maxlen: 24
                          2620:57:4005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ed:77:ca:67:0c:5f:77:5d:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=ac9f4aea-019d-466d-8121-5c75d6762de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:8b:56:5d:da:d4:8d:ae:0d:f2:09:77:bd:
                    8f:ba:9c:bc:31:8b:1f:aa:a3:73:89:68:de:ee:29:
                    ff:fe:06:64:24:be:57:6a:98:b2:a9:fe:cd:46:2a:
                    76:36:05:14:35:b1:97:0a:8e:80:66:93:32:dd:f0:
                    46:61:1d:4c:22:80:dc:63:36:ae:e7:de:56:56:dc:
                    30:c0:fe:5f:8e:77:6c:6f:32:ec:f7:f5:8b:b8:00:
                    a3:03:82:0f:b3:7d:ef:eb:97:36:76:e7:a0:47:5c:
                    97:50:c9:ba:db:71:b2:11:4b:2b:26:8f:3d:82:d7:
                    fa:cc:12:b3:60:f3:f8:77:88:e5:3d:2b:9f:9e:c1:
                    84:90:56:72:24:c4:d0:37:17:ba:2e:99:85:58:5c:
                    83:ed:8c:1a:3a:3f:47:2d:3e:e7:72:e8:b7:d7:15:
                    d6:e0:0a:c7:aa:90:7d:0d:e7:25:22:7c:7a:5a:e3:
                    ef:88:9d:ff:61:e1:a6:d4:ea:fb:10:f2:ac:5a:30:
                    bb:75:de:c4:9b:c7:99:6b:2a:17:6d:25:1c:67:fb:
                    9a:6d:50:d8:9c:34:c9:03:0e:ff:ff:55:8f:42:6a:
                    77:72:44:c8:6f:89:21:3c:a1:df:59:cd:e3:46:ab:
                    2c:55:ba:4a:9d:67:b5:50:07:8a:de:e9:c6:f9:0b:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:21:49:B5:36:1F:69:6F:3F:C7:10:9C:3C:32:9E:B0:25:46:61:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.96.5.0/24
                IPv6:
                  2620:57:4005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f0:5e:eb:01:6e:d4:c1:63:f0:fc:e3:e3:d8:9a:18:e6:fe:
         47:22:80:a0:e7:4f:ed:89:04:0b:47:b2:4f:03:1e:8b:d9:bc:
         a9:a8:12:96:14:0c:d6:f7:9b:d6:28:80:cd:d0:a4:5a:9d:37:
         6d:47:75:eb:9e:8a:02:4b:28:ad:a2:b2:85:7d:20:97:95:4b:
         64:83:6b:54:13:2f:a5:bd:32:b0:2e:12:17:02:5c:65:94:7d:
         8c:71:f6:db:82:dd:58:02:51:58:b1:90:9f:7e:af:12:73:86:
         95:8b:b6:cd:f9:78:17:01:c6:66:cf:11:9e:ec:65:b5:d2:4e:
         92:e3:84:33:f9:c0:5b:3f:8c:9c:cf:e1:9c:0c:e5:70:62:43:
         8c:7c:01:f6:d2:1e:46:14:4b:58:02:fa:c5:9f:e2:05:d4:eb:
         38:98:64:85:f6:1d:ce:26:f3:49:9e:8e:e8:be:d7:3f:f2:10:
         08:d0:b9:75:6c:60:b2:e9:74:ce:f2:45:c1:bf:be:37:58:c1:
         6f:e4:49:ce:b2:d2:62:fe:f5:4d:25:ec:6b:98:17:d7:68:14:
         42:fd:d4:3f:04:c3:c6:84:6e:02:71:d8:b2:01:c8:b8:cd:0e:
         b9:b9:20:d8:91:aa:68:b5:53:9f:b8:74:51:5e:71:28:8f:16:
         32:35:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:52:51 2026 by rpki-client