Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/de6b33a9-0b46-33be-a4bc-0dcc2c78ea7e.roa
File:                     de6b33a9-0b46-33be-a4bc-0dcc2c78ea7e.roa (raw, json)
Hash identifier:          NsE3KsDXU08JhGgphWf509G/s6hEAhhH4pFjOji6Yxc=
Subject key identifier:   A6:B0:3B:E7:DE:5F:E2:CF:E1:E8:B0:55:A8:7B:27:39:D6:77:A4:C9
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584F15CCDE63B48714314EAC6840
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/de6b33a9-0b46-33be-a4bc-0dcc2c78ea7e.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     32099
IP address blocks:        65.51.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:de:63:b4:87:14:31:4e:ac:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=74008969-fd22-43b6-b06a-e9fbafb6c38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:50:9e:cd:b3:c0:90:da:79:11:5f:17:0e:7b:
                    b4:b1:f2:cf:c0:67:72:c7:ac:a7:8f:6f:c5:cb:3a:
                    58:b8:fb:ab:f8:33:a4:3f:2c:68:7d:0e:03:3d:8b:
                    30:b7:fa:ce:04:5d:76:08:3a:69:39:3b:9d:99:c2:
                    bd:a0:d6:89:ce:02:b0:a9:df:d6:20:b3:6e:a9:48:
                    f3:1c:93:1c:ee:e0:11:b2:24:68:35:97:b2:03:d1:
                    5e:61:aa:3a:51:7a:e5:47:71:be:55:c0:b5:e9:5e:
                    53:b7:bb:73:23:df:d1:7e:24:e9:e5:26:61:f6:af:
                    5e:49:a4:8d:e6:1b:d4:be:95:92:6a:a3:9e:a9:4a:
                    27:ec:fc:95:71:95:db:1f:de:8c:a4:40:8e:02:7c:
                    ef:08:76:e6:ed:e8:5e:36:90:af:50:77:7f:09:2d:
                    1b:28:fb:2d:7b:99:57:b6:b4:b4:9e:a7:ab:e5:ae:
                    2b:32:c3:ad:84:84:68:2e:90:f1:89:0b:55:4a:7b:
                    bc:e9:ee:f1:1b:5e:2a:75:ab:ad:6e:5f:76:f8:ed:
                    37:7b:1e:42:99:8d:71:0a:bf:f2:c6:7a:3e:d1:6a:
                    54:d6:19:0f:c6:76:c9:19:fe:70:a8:7a:73:cb:3a:
                    ba:7e:f1:cf:9e:05:95:0f:4c:07:b1:99:00:69:4f:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B0:3B:E7:DE:5F:E2:CF:E1:E8:B0:55:A8:7B:27:39:D6:77:A4:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/de6b33a9-0b46-33be-a4bc-0dcc2c78ea7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:62:b0:d9:e5:f8:f6:0b:c5:d3:bd:1d:4d:00:ef:13:95:97:
         a9:d6:80:26:eb:49:18:26:7c:10:0e:c2:c0:fa:48:9b:49:62:
         2a:98:69:3a:ee:be:06:ab:2d:21:de:40:e9:59:4a:70:d9:4e:
         f7:4d:60:c2:8f:35:16:d7:42:d7:1b:d7:f8:92:df:36:ad:6c:
         2f:89:1f:60:ea:4d:b2:e8:ac:83:7f:06:8b:50:53:a8:b8:72:
         1d:d6:a2:66:b3:fb:26:de:59:a5:ee:c2:ee:cc:aa:25:63:99:
         79:93:b2:55:89:48:f9:b7:23:65:9d:4f:be:ce:3b:db:9b:36:
         3e:e8:06:99:00:7b:9a:84:64:17:0d:94:c9:2e:28:0e:82:66:
         75:cd:a0:f2:af:0f:38:9f:46:8d:68:39:5a:77:a9:24:f1:1e:
         da:5d:43:2c:3b:73:0e:e0:b4:39:1a:dd:61:ba:f4:b2:53:dc:
         07:10:59:27:99:27:d2:ce:11:1f:e5:7b:a8:0c:63:16:63:31:
         24:3d:bf:8e:3f:94:35:63:6d:72:b5:27:67:4f:aa:11:e7:39:
         40:e4:09:77:8d:67:f1:7b:64:b7:a9:cd:44:54:58:6f:93:6f:
         32:0c:ba:b6:63:a2:3b:11:80:83:af:09:30:65:5e:1d:4c:fc:
         1a:7b:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:14:52 2026 by rpki-client