Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40d1b331-a415-3e84-b487-b68113cf23e3.roa
File:                     40d1b331-a415-3e84-b487-b68113cf23e3.roa (raw, json)
Hash identifier:          VVU503Eait4kvBT4hs0UU4Dh+yMlfZJFQ+lr6ZA9yHg=
Subject key identifier:   FA:A2:9F:E3:35:68:C0:10:88:35:53:F8:5B:65:5E:EC:B5:12:68:A1
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584F4976AC74F79C35080388B380
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40d1b331-a415-3e84-b487-b68113cf23e3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13768
IP address blocks:        65.39.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:ac:74:f7:9c:35:08:03:88:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ff146433-7017-47e9-a151-e0500bff0370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:2f:44:1d:ce:4e:33:68:82:f5:cc:ef:7d:
                    df:e6:8c:b8:d3:2d:3f:60:30:2e:d9:63:e3:d7:27:
                    95:0f:17:03:fc:a2:cf:78:c3:88:e6:96:98:60:3b:
                    21:60:ec:66:7a:a0:14:d7:a1:e0:b6:52:67:a9:33:
                    eb:8d:ea:c8:b1:82:97:da:27:15:1d:a6:09:35:64:
                    b9:ab:1f:00:4d:cd:05:db:72:b4:4e:10:e9:12:67:
                    ea:14:ab:10:b2:6a:32:89:35:96:6c:b6:09:2a:2f:
                    bc:f8:cf:8e:da:00:f8:1b:39:e6:2f:e7:29:b6:1e:
                    d4:b1:63:35:6c:fc:8b:96:a5:95:8f:a9:8c:76:08:
                    63:50:27:f1:59:82:31:05:6f:f5:56:a2:77:aa:54:
                    a6:de:10:8d:d0:00:1b:1b:b3:16:a3:2d:db:8f:c7:
                    1c:82:2b:4a:7e:f7:b3:f2:23:54:a3:90:8b:42:3f:
                    63:ab:02:10:20:16:3a:9a:16:9c:65:2a:27:19:07:
                    6f:af:2b:08:1a:35:35:2f:50:2e:8c:51:e3:50:af:
                    34:5c:9e:6a:f0:ab:b5:79:43:8d:07:57:bd:ca:78:
                    1e:9f:cd:6a:3e:e6:b2:22:70:c8:cf:70:75:fa:da:
                    cf:46:29:ca:11:44:b8:8f:d3:49:f5:c6:d7:81:e3:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A2:9F:E3:35:68:C0:10:88:35:53:F8:5B:65:5E:EC:B5:12:68:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40d1b331-a415-3e84-b487-b68113cf23e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:62:fb:7a:f0:39:cb:4f:25:97:df:a0:48:d6:63:cd:63:ae:
         c9:28:74:c4:a8:5f:36:03:b6:91:33:52:78:59:89:fa:ee:32:
         c7:48:4f:b1:df:4a:ec:cf:91:38:66:de:cb:54:97:28:14:9c:
         1c:5e:a2:6b:42:3e:7a:90:18:4a:18:b5:ae:24:f6:6f:d1:5c:
         20:f8:e4:bf:8f:3c:8d:47:67:88:18:c7:2b:f3:ca:ae:59:54:
         bf:b1:71:d8:54:2f:7f:44:b4:d8:a1:40:98:7f:9b:b5:3e:0d:
         f6:a6:fd:e1:b5:87:6b:bc:8d:82:12:9c:c7:ff:99:15:cf:60:
         aa:d1:28:18:ca:7f:4c:8b:c6:7a:27:77:c2:25:e5:a3:91:79:
         dc:b2:9d:f8:55:54:98:af:7e:c6:7c:1c:94:6b:6b:7d:29:92:
         55:61:5e:94:c3:f3:e2:85:b0:2e:16:a6:a2:2c:ee:66:75:62:
         74:ef:fd:2e:38:0f:2a:97:39:98:68:d7:95:d1:3b:af:c2:d1:
         1e:93:12:fa:59:0f:5f:11:89:8a:ae:4a:ee:ea:a9:2e:dc:a0:
         07:d3:4b:e3:26:5b:0f:95:64:f5:49:4a:a3:71:5e:36:b8:eb:
         bd:4e:56:f4:a6:69:85:d3:aa:54:86:4b:22:61:88:a8:ef:9b:
         03:8f:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:01 2026 by rpki-client