Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/34c66c31-1ddf-34ff-a5b2-93c31f38163d.roa
File:                     34c66c31-1ddf-34ff-a5b2-93c31f38163d.roa (raw, json)
Hash identifier:          E7jDEpBiTvxkTzF0vONLc9Nryxspsak5wmrU/EF48hs=
Subject key identifier:   BA:E6:19:2C:A1:8E:0E:5C:EE:78:C3:E1:20:3F:CC:00:75:17:16:7B
Certificate issuer:       /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
Certificate serial:       010D0C9F4328584F2AFE224CD28F7CBE71219B00
Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/34c66c31-1ddf-34ff-a5b2-93c31f38163d.roa
Signing time:             Mon 14 Sep 2026 03:11:27 +0000
ROA not before:           Mon 14 Sep 2026 03:11:27 +0000
ROA not after:            Sun 13 Dec 2026 04:11:27 +0000
asID:                     20185
IP address blocks:        63.246.48.0/21 maxlen: 21
                          63.246.56.0/21 maxlen: 21
                          76.10.240.0/21 maxlen: 21
                          76.10.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:fe:22:4c:d2:8f:7c:be:71:21:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
        Validity
            Not Before: Sep 14 03:11:27 2026 GMT
            Not After : Dec 13 04:11:27 2026 GMT
        Subject: CN=ee2049e8-874f-4cfb-bc81-a45b7a283715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:85:da:b1:75:ee:9a:fd:68:d7:80:ab:cf:51:
                    79:aa:7d:40:fe:ed:fa:1e:89:eb:71:cc:3f:bc:19:
                    a5:6d:3f:90:63:86:4d:37:15:03:38:7e:a5:b7:de:
                    e9:20:a5:e4:7f:7a:86:01:9a:7e:ed:19:25:03:4f:
                    52:ba:e2:8d:44:69:0e:8d:a1:cf:8b:d7:47:ef:f8:
                    ed:d8:e7:b0:3a:7f:75:fa:af:b6:2c:08:e0:73:86:
                    85:55:af:85:98:7b:72:b9:d5:01:97:7d:aa:69:84:
                    b9:d0:6b:2d:20:a6:0c:b2:91:c4:d5:c4:e7:86:33:
                    f3:93:76:26:20:d2:a4:91:8e:de:dd:4b:2e:df:47:
                    d6:32:05:8e:07:a8:86:b8:bd:b0:5f:a8:2c:3f:76:
                    c9:66:14:be:16:f6:cb:33:73:d9:1b:f7:ba:16:5f:
                    79:b3:83:2c:5c:b4:24:89:aa:38:02:51:7d:2d:24:
                    76:57:58:11:bd:71:ac:53:60:03:d3:e7:91:42:c5:
                    6c:f3:c6:3e:7b:8c:7c:d1:a3:1a:51:86:17:00:ae:
                    b6:5c:ce:c3:7b:cf:ed:96:d9:d2:da:c3:8e:43:ff:
                    95:ea:e4:76:94:0c:63:90:9d:74:3a:6b:72:d8:fd:
                    97:b2:88:f0:8b:dc:92:56:d0:f2:f2:23:ae:bb:c4:
                    7f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E6:19:2C:A1:8E:0E:5C:EE:78:C3:E1:20:3F:CC:00:75:17:16:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/34c66c31-1ddf-34ff-a5b2-93c31f38163d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl

            X509v3 Authority Key Identifier:
                keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.48.0/20
                  76.10.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:52:ff:ea:d5:6a:26:9a:0e:62:f5:4d:f7:74:23:0f:64:c7:
         93:7c:f7:ec:26:a7:a8:f6:66:1a:a8:9c:e9:34:85:f1:9b:7c:
         2b:7a:30:76:6f:34:db:66:1b:6d:81:20:5d:15:82:cf:ee:6c:
         ef:b0:76:c9:0a:e2:d7:a0:e4:78:e7:44:f7:93:5a:98:f7:08:
         cc:94:70:46:0f:e2:c6:b7:af:a8:de:db:4d:23:9f:58:81:e3:
         2c:a3:7a:3d:79:07:8e:7d:4d:1e:46:3e:ab:9e:d9:ec:65:d2:
         fb:3f:e0:ee:ca:56:c9:5c:e2:1d:72:39:35:21:19:79:b3:f5:
         b4:c6:90:dd:e7:82:b1:5e:ef:c1:34:92:3a:5e:fa:6f:27:f8:
         f6:d7:8b:75:46:69:da:0c:c9:15:d9:ac:2c:90:cb:81:1b:55:
         ce:cd:b7:42:3a:8a:56:5b:d3:39:72:29:14:41:b0:43:e4:ba:
         bc:e5:a1:e9:0b:25:22:21:66:f3:60:ca:1d:2a:a3:bd:1e:c5:
         b7:8c:85:9a:2e:a7:0f:56:ba:bc:d5:da:1f:82:3c:4a:e8:50:
         d0:dd:c3:42:72:17:49:0a:1e:bb:1e:7d:b0:0b:7e:46:36:a5:
         31:09:b7:c0:90:06:ae:72:39:26:c3:dd:e7:89:11:2e:89:ea:
         d3:b3:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:14:43 2026 by rpki-client