Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/8d68f86d-ce40-3a18-8a0e-7d2d64b33709.roa
File:                     8d68f86d-ce40-3a18-8a0e-7d2d64b33709.roa (raw, json)
Hash identifier:          v0UNLifbKnRLpdItfWP9SZzyuxr0hyk0TwFkbbrcuyY=
Subject key identifier:   D7:35:49:13:39:D2:65:66:8C:C7:B1:A7:E9:37:75:B7:A3:75:24:6C
Certificate issuer:       /CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
Certificate serial:       010D0C9F4328584FA467310D20B377CB4E1BAC40
Authority key identifier: 0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/8d68f86d-ce40-3a18-8a0e-7d2d64b33709.roa
Signing time:             Tue 27 Oct 2026 14:55:56 +0000
ROA not before:           Tue 27 Oct 2026 14:55:56 +0000
ROA not after:            Mon 25 Jan 2027 15:55:56 +0000
asID:                     19761
IP address blocks:        97.75.246.0/24 maxlen: 24
                          97.75.247.0/24 maxlen: 24
                          97.75.248.0/24 maxlen: 24
                          97.75.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:67:31:0d:20:b3:77:cb:4e:1b:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
        Validity
            Not Before: Oct 27 14:55:56 2026 GMT
            Not After : Jan 25 15:55:56 2027 GMT
        Subject: CN=937a6339-e781-4d91-9232-6065e703e5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:ae:79:07:a8:22:1d:56:8a:b6:82:93:35:
                    bb:4f:3c:86:e6:c4:0c:5b:11:57:48:99:66:3b:69:
                    ef:4b:ac:80:6f:37:c8:b8:7b:6c:6d:d9:12:2e:ed:
                    a3:1d:f7:e5:f5:11:ba:94:ee:07:b7:95:57:d3:5d:
                    bd:2f:f8:35:63:7f:83:1e:f0:88:58:97:2b:fd:28:
                    9f:3c:58:99:6b:35:8d:7d:51:ab:4c:49:d6:ac:58:
                    d5:6c:aa:25:c4:3e:0f:a9:a2:d3:21:2f:10:dd:ff:
                    2a:f2:3b:46:e5:d9:90:e2:af:6e:18:1d:d7:4d:6a:
                    ea:ee:34:4c:5f:4a:4a:23:49:be:10:76:5b:f2:6a:
                    55:ab:26:78:50:4a:71:ef:9e:55:91:77:cf:77:b6:
                    66:cf:d5:d6:f1:16:cf:c9:30:8a:25:43:98:92:43:
                    bf:cb:4a:2d:5a:a9:06:ae:2e:68:6c:c3:7d:0d:44:
                    4e:22:74:fe:3e:9c:12:f2:24:6d:68:d7:d6:c0:21:
                    ca:c9:64:d4:55:5b:d1:77:4e:58:55:b5:ef:52:ec:
                    e0:ab:d7:9b:bb:49:8b:c1:22:c4:2f:3d:99:ba:c5:
                    5c:c9:fc:79:6f:ae:91:51:28:56:03:e3:95:c3:3c:
                    f0:e6:fd:db:96:03:a5:63:36:8e:4c:e0:d2:32:4a:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:35:49:13:39:D2:65:66:8C:C7:B1:A7:E9:37:75:B7:A3:75:24:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/8d68f86d-ce40-3a18-8a0e-7d2d64b33709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl

            X509v3 Authority Key Identifier:
                keyid:0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.75.246.0-97.75.249.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:2c:3a:b8:5f:6d:b0:ae:b7:a7:53:af:a9:eb:67:6b:aa:e2:
         c3:0c:26:23:b3:2d:97:bb:f7:01:f6:3b:69:2f:86:63:0f:ac:
         28:db:d4:fb:54:7a:a4:19:67:e9:37:5a:28:11:00:d4:f9:4e:
         0d:61:bf:bd:78:01:f4:bc:7c:c5:c9:bf:f2:17:42:75:f1:7a:
         1b:fa:a2:d9:d4:8b:ab:55:40:4a:f8:d1:59:a1:6f:97:ac:05:
         91:5e:ca:8b:72:cc:74:38:93:32:c9:0e:bf:ec:00:62:08:42:
         73:9d:f6:6c:c4:4e:e2:15:44:3a:10:cf:7f:ec:b9:03:c3:00:
         42:c0:aa:55:98:ab:f4:14:33:d8:2f:7c:d6:00:3e:7a:a8:ee:
         ed:47:eb:3f:6c:cf:fd:fc:e3:90:b1:6f:6c:71:0c:a4:0a:bc:
         74:ec:df:52:62:b5:81:c5:70:9e:e6:2c:84:f4:a1:38:e0:f4:
         73:f2:7a:ec:5a:1d:15:7e:e4:7a:10:fd:08:a6:c2:75:62:cc:
         09:b8:5e:40:6a:0b:54:03:6d:99:d6:c8:29:d0:9d:83:16:ce:
         e5:c8:2a:1f:84:15:81:23:1b:35:1e:a8:4f:2b:ea:63:a0:a3:
         6c:f9:70:eb:39:b4:d0:22:61:9e:6f:f5:cd:b5:a3:99:0e:0a:
         98:82:c8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:44 2026 by rpki-client