Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/3783c75f-a8af-34ef-87e2-74dd3048dff0.roa
File:                     3783c75f-a8af-34ef-87e2-74dd3048dff0.roa (raw, json)
Hash identifier:          fvLKkqjmuZBL683j/VPG9k4fAo6/v9aZdNblhH9KBnc=
Subject key identifier:   F2:D4:4A:98:FA:7C:62:50:3F:91:8B:13:6E:DB:CB:AB:51:BF:35:30
Certificate issuer:       /CN=ecb97f03-7477-4dcb-aea2-e92598620625
Certificate serial:       010D0C9F4328584ED431D648052987A5F1A1F120
Authority key identifier: 6C:7C:F5:F8:06:A8:8E:E9:58:AC:32:83:D1:30:50:8D:68:67:8A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/3783c75f-a8af-34ef-87e2-74dd3048dff0.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     46426
IP address blocks:        64.179.192.0/20 maxlen: 24
                          69.168.32.0/20 maxlen: 24
                          162.246.152.0/22 maxlen: 24
                          2606:c840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/ecb97f03-7477-4dcb-aea2-e92598620625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/ecb97f03-7477-4dcb-aea2-e92598620625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:d6:48:05:29:87:a5:f1:a1:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb97f03-7477-4dcb-aea2-e92598620625
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=85753a0c-6327-4d2f-9556-73f09d31970e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:48:50:18:67:9b:cb:f0:c3:fc:04:1e:79:
                    d7:e4:4c:40:4e:6c:ac:83:f9:4c:8e:96:c5:0e:fe:
                    eb:ac:b6:4d:3a:b6:43:f9:b2:6a:1f:19:70:36:4b:
                    fb:91:37:3a:26:cc:6d:52:d9:7e:c5:f9:b4:55:8a:
                    df:26:3e:17:b9:a0:a4:d7:83:dc:c7:1f:e4:27:bb:
                    43:d6:b5:b8:d3:53:90:80:6a:54:b6:4e:c7:7c:2e:
                    34:f0:15:f5:c8:1a:2e:b2:ab:b4:33:1c:97:57:de:
                    c4:5f:83:69:a4:13:59:e6:2d:bf:2b:2f:6f:66:17:
                    8a:d6:00:75:30:cd:e0:05:26:21:72:4d:32:b4:5e:
                    25:af:84:75:a2:8b:cc:57:a8:b2:95:a1:a5:e5:a8:
                    6d:f8:a0:94:33:26:13:6f:9a:51:03:95:28:b3:ee:
                    c5:90:a1:44:78:87:ae:91:86:54:da:a3:f5:c1:b9:
                    16:6f:9a:5e:60:00:c4:3e:c6:68:d2:4c:b2:2c:65:
                    e9:80:1f:bf:f5:89:f8:d1:26:04:8a:fc:81:d8:c0:
                    dc:62:51:4a:49:63:94:3d:d2:92:f7:ee:e9:ba:53:
                    97:6d:a8:06:71:90:4d:de:05:50:b6:33:cd:82:b9:
                    46:26:2a:4f:b6:a1:c2:bb:ee:34:ff:a1:c8:ed:8e:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D4:4A:98:FA:7C:62:50:3F:91:8B:13:6E:DB:CB:AB:51:BF:35:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/3783c75f-a8af-34ef-87e2-74dd3048dff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/ecb97f03-7477-4dcb-aea2-e92598620625.crl

            X509v3 Authority Key Identifier:
                keyid:6C:7C:F5:F8:06:A8:8E:E9:58:AC:32:83:D1:30:50:8D:68:67:8A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.179.192.0/20
                  69.168.32.0/20
                  162.246.152.0/22
                IPv6:
                  2606:c840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:2d:da:16:aa:a6:a2:25:f7:83:58:bc:bd:6a:c8:0b:7d:91:
         47:75:32:31:48:40:80:9a:25:37:e4:e2:6c:64:8e:19:26:0c:
         4c:8e:e1:fe:e0:14:31:74:11:6f:22:06:65:36:4a:74:7a:14:
         ed:5d:9a:c6:7b:8c:bc:97:ae:f9:3a:86:7f:9b:b8:61:7c:49:
         71:44:78:c4:a2:fc:8f:16:b8:df:e1:b6:19:51:9a:30:56:1e:
         03:73:cc:46:7e:fa:73:f2:8b:56:97:92:f2:ed:1f:35:75:2e:
         5c:eb:48:fe:68:75:56:c6:0a:83:4c:2f:85:4b:e4:87:8f:f1:
         97:7f:a3:aa:d9:2b:54:94:ce:4f:11:4c:ee:7f:62:3c:1f:7c:
         0b:a9:9b:80:f8:ef:52:c2:e9:70:fa:df:5a:1e:df:5f:26:aa:
         a5:70:fa:d2:6c:7e:31:6b:d4:93:a0:a0:4b:19:50:bf:f4:48:
         69:ba:1e:33:25:69:55:bd:5e:e8:f6:52:62:b8:51:94:a9:a7:
         ad:4e:a4:92:28:d7:2b:39:55:70:b4:98:b5:15:26:33:83:0f:
         e5:56:b4:95:4d:2e:1a:44:e8:b5:7a:29:c6:9f:25:3a:30:26:
         5f:66:dc:31:5f:6f:90:a5:b3:b0:1b:c0:79:52:c5:c2:c7:da:
         f4:18:29:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:55:42 2026 by rpki-client