Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f4f36be5-2c3b-3917-80ab-4a292c945078.roa
File:                     f4f36be5-2c3b-3917-80ab-4a292c945078.roa (raw, json)
Hash identifier:          G8q2CPGMfd4SlJr9R2ZUQ9Hmuu2L/M7GPPijiE1NrYE=
Subject key identifier:   15:0B:4D:9B:67:BB:6E:DB:9F:43:A7:38:85:E0:18:D7:03:6A:14:70
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584EFCACC989C4097A163B114B00
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f4f36be5-2c3b-3917-80ab-4a292c945078.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        64.39.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c9:89:c4:09:7a:16:3b:11:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=c35665bc-e4d7-475c-b152-cf5a922aa332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3f:8f:81:93:1b:bb:8e:c3:a3:af:13:76:16:
                    93:52:42:fd:8f:48:57:10:6a:21:74:df:15:b4:19:
                    d8:95:99:b1:87:40:0e:37:82:86:8c:18:50:e7:3f:
                    d4:9d:3b:95:5e:34:2c:24:e0:d1:70:48:0e:37:71:
                    eb:74:b4:aa:f6:30:38:02:60:32:00:94:91:2c:7c:
                    f3:83:a9:83:27:55:4c:ed:8a:12:a1:6c:63:51:de:
                    3d:b5:47:00:e2:18:62:fb:d0:7d:0f:dc:87:68:22:
                    22:70:f2:6a:04:f1:f3:06:49:ed:c8:f8:78:ba:e3:
                    ab:9f:36:b4:45:de:bb:37:61:8e:e4:14:2c:aa:d8:
                    d0:3d:9c:79:d5:4e:8e:43:82:11:14:77:b1:2b:88:
                    68:23:c4:c6:42:45:c6:73:54:a1:1a:a4:a3:cc:17:
                    b7:d4:e4:ff:53:fe:95:ff:1f:7b:17:6c:fd:50:5a:
                    e1:6d:9e:57:9d:74:3e:9d:30:ee:90:6d:79:ec:b6:
                    43:f8:72:8b:1a:38:fb:02:16:2f:9c:5c:4d:14:c6:
                    66:5f:d7:0f:b5:85:5c:0b:4f:b7:bd:7e:4d:70:6a:
                    09:64:d2:84:68:70:7d:0a:47:4d:e4:13:4e:0f:ab:
                    e9:b5:48:e0:93:98:a9:ed:b2:41:62:2d:77:fd:85:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0B:4D:9B:67:BB:6E:DB:9F:43:A7:38:85:E0:18:D7:03:6A:14:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f4f36be5-2c3b-3917-80ab-4a292c945078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:68:ce:d2:bb:18:9a:bb:04:4f:18:af:81:bd:49:dc:53:e6:
         d4:81:ff:f2:5b:09:e1:36:d6:46:0b:98:94:5a:c1:9d:25:89:
         a9:69:bc:4d:9b:59:df:93:be:8e:ae:5c:3f:ea:e7:57:fc:db:
         4e:8d:c4:c1:36:11:6b:ad:5a:b6:a5:65:45:f4:3b:f2:62:8d:
         9d:a5:cb:f6:d3:88:ad:30:a6:3c:94:07:54:89:12:d2:44:c3:
         db:98:ee:e2:23:4a:10:e9:90:3c:f2:30:01:57:e8:9d:d3:a0:
         b5:05:66:03:8f:46:fa:57:0b:7d:10:3c:17:44:d2:ee:51:c1:
         0e:1d:c6:c2:ba:a4:2d:f9:74:c1:69:c6:5b:45:59:78:37:de:
         fc:67:a0:c5:f8:59:a6:12:ca:d6:2f:27:40:25:62:89:e4:44:
         45:03:3a:03:44:64:07:06:17:82:8b:3e:15:db:51:df:bd:4f:
         92:06:a3:5e:3d:93:dc:32:5f:93:93:9e:44:14:2c:56:bf:4c:
         6d:9c:00:fc:7c:ea:17:9c:8a:21:ff:20:3c:fe:aa:1e:90:f7:
         79:d1:11:38:74:f3:b4:eb:ba:26:af:2b:48:c8:b7:51:96:24:
         15:66:6f:22:6f:3f:26:c6:9e:ee:06:55:d0:dc:1f:19:10:16:
         a5:5f:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:56:03 2026 by rpki-client