Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c83c5bcc-2254-48ef-83a1-4870c14a54bb/3f3b075b-edb6-301c-9e66-4c6e0b0bc4b9.roa
File:                     3f3b075b-edb6-301c-9e66-4c6e0b0bc4b9.roa (raw, json)
Hash identifier:          6iUHmbY6Nr0RcROJD6iunBE4RRfHCW8JyCJHpTpR0R8=
Subject key identifier:   44:EA:46:CD:33:4C:09:3A:D1:0D:B9:9A:D6:81:06:7E:E5:B4:54:85
Certificate issuer:       /CN=c83c5bcc-2254-48ef-83a1-4870c14a54bb
Certificate serial:       010D0C9F4328584F49736EC3C53B50E4A51EDB00
Authority key identifier: DD:5A:84:74:3A:E9:D6:00:8C:4C:64:C4:63:1B:55:97:0B:8A:5A:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c83c5bcc-2254-48ef-83a1-4870c14a54bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c83c5bcc-2254-48ef-83a1-4870c14a54bb/3f3b075b-edb6-301c-9e66-4c6e0b0bc4b9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396485
IP address blocks:        69.6.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c83c5bcc-2254-48ef-83a1-4870c14a54bb/c83c5bcc-2254-48ef-83a1-4870c14a54bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c83c5bcc-2254-48ef-83a1-4870c14a54bb/c83c5bcc-2254-48ef-83a1-4870c14a54bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c83c5bcc-2254-48ef-83a1-4870c14a54bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:6e:c3:c5:3b:50:e4:a5:1e:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83c5bcc-2254-48ef-83a1-4870c14a54bb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=361255d9-8e88-4b24-9afc-254ba78a5d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:7c:51:e0:76:86:cf:69:b7:0e:9f:31:a0:
                    af:33:22:b8:61:4a:b7:d4:80:21:54:7b:73:1a:18:
                    68:17:b4:4c:66:3d:43:6a:32:c1:dd:03:fa:53:04:
                    b0:84:e2:a8:3a:e9:9d:c1:82:f9:c4:9b:8f:d7:ed:
                    4c:45:ea:a7:d9:e8:f2:1e:84:af:a7:6d:e6:1e:a6:
                    07:1a:d5:41:92:3a:99:a9:09:b1:8f:02:a6:f6:3e:
                    0d:f6:af:03:33:a6:81:14:a8:72:38:08:9a:a4:31:
                    78:6c:8d:0f:fa:6e:8d:38:52:59:e6:96:cc:07:52:
                    e1:3c:ff:87:a1:dc:92:4e:e4:5e:d7:d4:e0:e3:15:
                    94:ed:96:2f:be:8e:fc:2f:56:b2:f4:98:36:2f:cf:
                    19:c8:d7:56:9b:09:a3:8a:14:a4:6d:33:52:e2:1a:
                    3e:65:b5:ac:1f:66:0c:69:16:7c:f4:be:d4:fa:81:
                    3e:77:ea:71:0b:fc:31:2c:16:1e:12:f3:cf:ff:2b:
                    75:a6:84:0e:b4:4c:71:f5:e6:34:3f:9d:2f:43:68:
                    cc:0a:df:c2:9e:ae:2c:17:a4:41:7b:8f:f0:da:9f:
                    b4:bc:d6:35:fe:44:55:bb:ca:62:34:59:60:02:e5:
                    99:78:3d:3a:7c:d4:f0:bd:e6:d4:8a:e4:9a:93:08:
                    d5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:46:CD:33:4C:09:3A:D1:0D:B9:9A:D6:81:06:7E:E5:B4:54:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c83c5bcc-2254-48ef-83a1-4870c14a54bb/3f3b075b-edb6-301c-9e66-4c6e0b0bc4b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c83c5bcc-2254-48ef-83a1-4870c14a54bb/c83c5bcc-2254-48ef-83a1-4870c14a54bb.crl

            X509v3 Authority Key Identifier:
                keyid:DD:5A:84:74:3A:E9:D6:00:8C:4C:64:C4:63:1B:55:97:0B:8A:5A:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c83c5bcc-2254-48ef-83a1-4870c14a54bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.6.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:57:96:90:6f:db:85:97:a5:a3:bc:15:8a:4a:97:cd:7e:54:
         88:5d:c0:d2:e0:49:25:75:5d:96:49:ad:5d:d6:9d:ba:1f:86:
         64:2d:0b:d9:b7:2f:b3:9b:fa:4e:e1:56:a0:db:bb:25:6d:a8:
         0f:c4:a3:a8:3a:56:55:ac:86:9f:b2:2f:06:d8:9e:5e:f0:26:
         7f:ec:67:ff:cd:f3:95:24:1c:98:d3:21:9f:f3:2b:f5:fd:d5:
         c4:ec:03:33:c0:0b:f1:74:ad:ec:84:b1:28:a0:f3:3e:29:23:
         31:68:32:59:9d:a6:9c:d0:05:96:15:bb:95:bf:94:cb:8a:2d:
         9a:b0:f4:8f:30:b6:de:2f:53:dd:ea:1e:75:73:95:90:17:37:
         c4:59:5d:a4:d0:57:db:58:3a:8c:eb:3f:99:85:f3:5d:e7:94:
         f4:1b:dc:10:c4:cc:03:a4:c9:9f:1c:99:e3:e8:9e:9a:93:13:
         65:e5:37:78:35:3b:d2:2f:0a:5c:a8:e0:61:87:4e:8d:a9:60:
         88:23:6e:58:9c:26:63:74:cf:63:7d:0a:53:b3:23:23:31:78:
         d4:9e:28:bd:36:d3:03:73:53:08:ee:ed:45:2e:a0:5a:08:99:
         32:d9:1f:c0:a3:c5:2c:af:c4:e5:f3:25:44:27:26:85:f6:7a:
         59:a8:eb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:45:43 2026 by rpki-client