Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/9110b78d-dd0d-3b28-b187-e4cbedc86596.roa
File:                     9110b78d-dd0d-3b28-b187-e4cbedc86596.roa (raw, json)
Hash identifier:          vvoTMf4OEihkbyFjJm2X7Zk2BuNG1BytRrEZMxJhEVY=
Subject key identifier:   9C:6A:C8:1E:D1:76:96:9C:BA:A0:08:68:13:24:3C:DB:FF:62:8F:00
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F4328584EE7BCA2CB1988C99863ED0980
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/9110b78d-dd0d-3b28-b187-e4cbedc86596.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        64.112.112.0/24 maxlen: 24
                          64.112.113.0/24 maxlen: 24
                          64.112.114.0/24 maxlen: 24
                          64.112.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:a2:cb:19:88:c9:98:63:ed:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=065a5d1b-c837-4361-84a8-3ce9acf2e73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:10:0c:a6:2c:48:08:f0:7d:20:29:5a:1a:
                    85:2a:9a:d4:f0:bf:8e:4d:36:7d:d6:b5:e3:2b:98:
                    90:9c:5f:c1:cb:db:1d:5e:ef:91:7b:23:2d:07:fd:
                    a6:6a:35:5d:d7:3b:08:e4:0d:d1:cb:41:e6:9a:73:
                    90:5a:eb:a2:16:38:79:2a:ce:02:b6:63:7b:1b:a7:
                    01:64:c8:c8:10:c8:3a:e0:1b:f5:a2:d3:d6:9c:02:
                    d1:13:80:2b:b3:cc:ed:1b:39:d3:b2:2b:44:83:1f:
                    58:04:4f:bf:b2:7e:dc:08:69:c1:96:88:8c:5d:c4:
                    a5:1e:6a:e4:b8:ca:0f:18:4c:85:28:ea:c9:94:6b:
                    85:fb:6e:73:0a:1a:44:f2:ee:a8:7f:92:8e:51:bb:
                    dc:53:5e:59:c1:ca:c9:71:cc:88:b6:76:15:d6:6c:
                    2c:55:56:bc:6d:36:1f:25:c7:4f:85:94:08:ec:48:
                    82:c1:dc:23:df:13:98:65:0d:e0:0c:ae:dd:9a:75:
                    f1:c1:93:c4:fd:33:33:1d:a0:1b:6b:59:7e:f5:be:
                    f4:47:bf:a0:d6:13:b9:99:0f:65:95:66:0e:26:18:
                    61:19:2d:60:b7:1d:d5:33:60:d1:2d:e7:1e:5d:85:
                    68:3c:d2:e3:2f:35:7d:c4:dc:41:f1:78:0b:03:8f:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6A:C8:1E:D1:76:96:9C:BA:A0:08:68:13:24:3C:DB:FF:62:8F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/9110b78d-dd0d-3b28-b187-e4cbedc86596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:bd:09:b2:9f:d5:64:ea:0f:e1:97:a3:54:d5:c6:22:05:63:
         af:a2:b9:be:e3:4c:6a:5d:ed:53:b8:c3:f2:2d:39:2f:00:cb:
         20:e6:88:ed:f6:ea:38:72:94:bd:7d:49:ec:f0:86:61:f7:22:
         67:c4:43:c5:a3:9c:5f:92:a1:ac:4f:3b:ab:66:87:39:ee:2b:
         34:4e:d6:40:9e:ab:ec:53:d1:a6:61:30:51:5f:fa:9b:e2:6a:
         3a:b3:84:32:03:fe:91:d7:68:75:11:37:35:b9:0a:21:60:2e:
         f2:6d:a6:f7:5d:ab:4a:8d:d8:5c:bb:59:32:19:f9:d9:53:67:
         1d:2d:5e:04:1d:22:9a:e2:7f:be:74:fd:b1:d1:1d:c7:82:61:
         79:62:15:5f:d9:73:ad:65:2a:a8:d6:fb:3a:be:be:39:94:a0:
         42:31:7b:32:27:6f:de:6c:54:77:e3:01:a9:9f:cb:19:53:e2:
         76:00:00:cd:97:24:7e:ef:3c:37:b0:fc:88:59:6b:24:23:7c:
         8a:83:59:39:f0:df:d4:20:c6:a6:c9:67:f0:91:92:04:4c:e4:
         f5:76:69:b5:50:bf:92:51:ae:6a:dd:e9:c2:14:d1:c7:ff:96:
         7f:5e:b8:b7:63:28:a5:9b:97:e5:14:fd:4f:ba:79:55:a3:e6:
         cc:c4:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:52:01 2026 by rpki-client