Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/03b2c07d-0de6-3967-995f-dd2f80b5804d.roa
File:                     03b2c07d-0de6-3967-995f-dd2f80b5804d.roa (raw, json)
Hash identifier:          dkuQjPe4gor5IUASGf0QPE+vn083OaqeNg2s3bOEzzk=
Subject key identifier:   EE:58:5D:84:69:79:CC:6B:96:29:98:06:42:03:0E:B8:98:30:67:BA
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584F0D6CFA774CB89D0D11AC2C00
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/03b2c07d-0de6-3967-995f-dd2f80b5804d.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     14353
IP address blocks:        65.38.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:fa:77:4c:b8:9d:0d:11:ac:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=1f7290f4-83df-4b76-b1b1-1fd76dda91f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:04:41:63:5f:1a:88:73:65:25:9b:78:ee:
                    5d:f2:dc:3f:30:66:c4:25:6f:3f:ca:76:13:9e:3a:
                    73:7e:0c:5a:e5:a1:fb:52:6a:71:8d:10:7b:b6:76:
                    f1:3b:dd:a1:98:3a:a5:c0:50:07:78:29:f7:8c:0d:
                    b5:9d:42:6b:a9:da:55:89:38:ef:5f:0e:15:b6:47:
                    34:1b:a7:8a:dc:65:49:c8:7d:e8:ee:27:58:ce:81:
                    df:04:87:4e:45:30:52:5d:3e:19:7a:eb:46:d0:58:
                    c8:35:1f:8c:e2:87:37:43:a9:8a:46:c5:cf:3f:7b:
                    48:8b:c6:a0:1f:ed:af:e6:4f:53:03:d6:f5:8c:4d:
                    17:b4:38:a6:bb:f9:79:ed:5e:9b:80:c3:3e:e4:dc:
                    93:ed:6d:22:d2:da:7f:15:8b:e1:94:95:dc:41:5c:
                    19:83:ae:3a:46:44:74:20:02:4c:d7:f3:65:f1:52:
                    20:3e:24:59:d5:26:cf:09:1a:80:e9:46:cb:67:6e:
                    a0:e7:8f:25:9f:29:29:41:be:14:73:85:eb:ff:71:
                    d4:c5:18:ed:d0:5d:b6:e9:4e:e9:5c:4e:18:7f:0a:
                    91:b5:25:38:98:5f:6b:6d:9b:48:5b:8f:3d:26:90:
                    92:89:d6:02:0d:ea:93:9a:6b:fa:99:43:1d:66:26:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:58:5D:84:69:79:CC:6B:96:29:98:06:42:03:0E:B8:98:30:67:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/03b2c07d-0de6-3967-995f-dd2f80b5804d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:09:40:84:17:e5:ab:50:21:db:35:3d:4d:3b:4e:6d:1f:c4:
         9c:bd:e9:e8:65:ef:5d:4c:5b:d5:7f:6c:ba:4b:6e:81:da:98:
         02:44:df:6d:52:e0:71:db:5f:2a:86:21:b6:13:e9:36:d7:54:
         55:8a:76:9a:64:fe:4d:63:f8:51:a4:11:3c:df:89:90:9f:25:
         75:24:43:01:52:82:9f:ef:9a:2e:dc:e5:1a:27:9d:8c:ad:b9:
         ab:1c:8e:c2:cd:dc:ab:01:0f:42:95:a8:64:a5:d2:75:76:51:
         22:17:3a:f7:a1:47:73:90:96:01:cc:7e:ec:65:8d:ea:b5:2c:
         f8:41:90:fa:dc:71:ec:16:68:f0:13:e0:af:ca:2b:00:3f:cc:
         6d:a3:af:b6:24:99:e1:da:52:85:93:4c:b4:17:08:07:c7:a4:
         7b:ad:86:fd:a0:7c:06:65:dd:77:ec:ad:0d:78:b0:f7:9f:c8:
         5f:e3:50:19:17:22:de:97:9c:18:60:d4:2d:4b:9c:7e:f9:ad:
         6b:bd:6f:5c:9f:c0:e4:52:3b:27:44:7f:4e:9d:26:52:ff:07:
         f5:27:ef:13:ae:43:c9:52:7e:0d:99:36:9e:84:19:02:bd:ea:
         e2:4b:56:9e:f1:66:c1:91:7f:a1:b7:71:87:ce:ab:8d:ba:23:
         d7:20:6e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:24 2026 by rpki-client