Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa
File:                     880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa (raw, json)
Hash identifier:          kjGA5IzI0MZiuIfI1+zp3TqruH2HHjzKjrd+Xn9k4I0=
Subject key identifier:   95:87:E5:42:5F:6F:AA:F9:00:C3:1F:BC:92:E3:9A:67:CD:C3:B0:F1
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584F1467A1A08BDB663356BC7280
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     36352
IP address blocks:        65.99.193.0/24 maxlen: 24
                          65.99.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a1:a0:8b:db:66:33:56:bc:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=683a436b-d79f-42b2-a873-4b3a4b135f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:b1:2e:a0:c4:2b:f7:28:7b:e2:c5:c0:64:
                    ee:da:a8:d6:ee:4e:44:9a:bb:9a:b4:7c:9f:bf:e0:
                    95:9f:56:cc:54:2f:ce:82:e1:d7:ef:59:4c:60:97:
                    7d:ee:cb:d6:d9:c0:92:17:71:8f:f7:94:73:e1:d8:
                    00:88:e6:1c:b5:2e:b0:58:12:de:98:21:c7:86:62:
                    4a:55:41:13:75:2e:e5:63:81:e3:7e:03:1f:2b:c7:
                    db:80:1e:13:a3:60:d8:8f:7b:2c:95:72:b2:e1:74:
                    8c:22:22:34:b5:32:c5:7a:c7:62:e4:01:33:cf:ab:
                    70:c9:a2:8a:22:58:b0:c8:e1:14:12:43:5c:0e:0c:
                    84:a4:e7:01:7d:8b:a1:09:93:3e:36:9c:14:4e:08:
                    92:99:dd:a6:d7:76:50:5c:c0:fc:da:a6:25:f3:db:
                    a6:92:53:13:1c:a6:b2:28:9d:ec:41:c1:08:26:db:
                    66:f2:b4:22:6b:d5:96:79:ea:a5:bb:89:0d:16:93:
                    4d:60:23:28:ef:d1:bb:82:80:db:02:bb:2c:61:54:
                    a0:41:c1:9f:2a:71:e1:ee:d6:76:12:e8:c1:ff:ac:
                    10:92:66:a8:32:a9:a2:1d:bf:01:e3:b5:0a:22:81:
                    c6:4b:de:9f:36:77:12:a7:b8:2f:b3:4d:ee:46:f5:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:87:E5:42:5F:6F:AA:F9:00:C3:1F:BC:92:E3:9A:67:CD:C3:B0:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.99.193.0/24
                  65.99.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:fb:88:bf:28:f3:b9:89:69:d2:ff:85:bc:60:ec:d0:dd:
         18:3a:58:5d:5f:e0:ba:54:ce:9c:19:a4:03:08:82:ed:a0:7f:
         c3:35:93:a3:ce:53:11:c3:62:fd:4b:5c:d3:ae:5a:83:1d:9d:
         59:c5:e3:c6:33:ef:20:2a:e9:1b:52:52:84:09:cb:2f:0d:11:
         fd:34:fa:e5:0f:b4:cd:0d:7e:c5:7f:6e:4a:27:c5:b1:6a:95:
         f6:8d:d6:8f:ca:ba:98:97:2e:98:02:30:13:88:e1:a9:5d:7d:
         e4:ab:ea:86:0d:17:93:0f:78:a8:75:4d:82:23:02:88:6d:60:
         38:62:8b:9d:f7:ef:fc:a9:7f:8d:75:f5:51:e3:75:db:1f:d3:
         7a:71:32:02:d4:f0:dc:a8:f2:61:61:e0:a3:ca:ca:4f:a0:74:
         f5:78:f4:3e:d6:99:93:48:c5:23:a8:8d:43:7d:ac:a3:dd:e5:
         ba:9c:22:6c:9a:fb:13:35:94:f6:fb:90:0a:56:ce:1a:2a:7b:
         2f:02:48:b8:b1:d4:45:66:c5:8c:07:c5:5a:83:b0:0d:b4:3c:
         41:ae:0c:6b:bd:c5:aa:f0:7e:5c:12:42:ff:a2:32:58:c9:5c:
         23:52:4a:27:1f:5e:65:e0:e0:db:1d:7e:25:cd:7e:31:d9:3f:
         63:f9:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:20:09 2026 by rpki-client