Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/832eb89e-0327-3f89-967d-82dea62e93ed.roa
File:                     832eb89e-0327-3f89-967d-82dea62e93ed.roa (raw, json)
Hash identifier:          UFJ1gN83KhH2vA0wRwwhboRUg5yT2ddApwPxxY10nX8=
Subject key identifier:   01:9F:64:B6:F8:AB:D8:93:94:60:38:25:61:16:CF:10:56:FE:A9:A0
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CC7C2217D969CB9F78270
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/832eb89e-0327-3f89-967d-82dea62e93ed.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     3561
IP address blocks:        69.46.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c7:c2:21:7d:96:9c:b9:f7:82:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=550b9795-38f8-46c9-841b-105e529f773a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8c:d7:78:a1:a9:4e:60:18:f2:d6:06:36:0d:
                    77:e4:db:38:35:db:70:99:7a:be:85:2c:52:b0:45:
                    9f:72:2d:e5:74:74:a0:56:48:78:9d:c6:b3:02:7f:
                    f8:54:d2:20:b7:35:da:8a:ca:e4:39:f9:76:a2:4a:
                    b5:a3:ac:c1:22:26:66:52:b8:55:84:fc:0b:67:4d:
                    12:d5:e9:c4:6f:88:e4:03:e7:52:24:be:29:0d:7b:
                    8f:4e:52:a7:85:44:e9:95:7e:8b:67:81:48:5a:20:
                    97:d4:ed:d1:9a:2d:d7:3f:c5:cd:84:2b:55:fe:b4:
                    ef:a6:24:d1:c2:67:88:ea:42:48:bf:c9:2a:1f:6c:
                    b8:7b:f5:c6:d5:f2:36:8b:c0:05:eb:db:07:00:7c:
                    ba:42:59:96:84:5a:55:26:f8:97:e1:b3:e6:12:32:
                    26:25:5e:e0:07:bc:3c:c9:59:46:e7:4e:e6:21:86:
                    78:b3:43:1b:32:4e:86:2d:16:c3:c2:ae:0f:1a:cd:
                    be:8b:61:7e:90:a7:46:e1:8a:82:73:8e:c3:eb:1e:
                    44:20:62:79:3a:1b:02:ae:9c:95:f9:3e:e4:c0:09:
                    4b:08:57:ac:d5:8f:c2:5e:4d:87:96:54:58:41:79:
                    b1:d0:c2:ad:3e:f0:49:b4:ad:d0:92:b1:b3:28:dc:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9F:64:B6:F8:AB:D8:93:94:60:38:25:61:16:CF:10:56:FE:A9:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/832eb89e-0327-3f89-967d-82dea62e93ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.46.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d4:a8:7a:ba:68:67:2e:0a:9d:c3:2a:e7:4c:7b:6f:6a:1c:
         85:10:d1:77:fe:c2:a9:fe:93:6d:03:f4:e3:e0:7a:7e:06:8e:
         54:e5:b8:43:7d:d4:b2:17:de:bb:23:ce:1e:d0:0e:eb:72:4c:
         46:8b:08:dc:69:da:0b:88:e7:33:c2:3e:56:67:44:3f:e4:7b:
         94:79:83:9e:f5:67:30:32:eb:86:61:0d:8f:6d:53:1f:39:97:
         ef:c9:8e:20:d3:e8:6e:d6:c8:51:df:0f:c9:bb:c4:80:6d:83:
         7e:97:05:75:f9:a7:0b:f5:25:45:05:46:2a:01:3d:cd:2d:9e:
         6b:79:46:6b:4f:80:e6:a7:68:00:a8:1a:a0:09:1f:99:c7:20:
         3c:66:fa:7a:3a:eb:be:ae:4d:51:5f:53:97:2b:39:e3:5d:5f:
         79:54:5a:48:13:9b:37:9e:6a:dd:ab:ec:13:87:9e:20:7d:b1:
         dd:6f:b5:e2:fb:c0:31:db:21:ca:29:d9:d5:67:03:c1:2e:25:
         fa:4f:e7:b2:6c:e3:57:df:e7:5c:74:ee:7b:9c:66:23:49:69:
         89:7f:24:30:20:e9:e0:d3:20:c3:9a:27:d1:d4:ff:42:27:35:
         2f:d2:c3:ef:68:05:60:b8:35:de:28:81:53:19:1e:9a:e8:33:
         11:9f:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:34:46 2026 by rpki-client