Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/4725da9f-2aec-3551-89ad-ad27b713c7e2.roa
File:                     4725da9f-2aec-3551-89ad-ad27b713c7e2.roa (raw, json)
Hash identifier:          L8KLkWEn82YqA3wUu7OaAeudepE824/ioeAnMrKW50U=
Subject key identifier:   7C:CF:72:7B:79:89:B6:10:CF:14:62:1A:50:9D:6C:14:55:27:72:81
Certificate issuer:       /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
Certificate serial:       010D0C9F4328584F20F7ABA00A12D481C3981900
Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/4725da9f-2aec-3551-89ad-ad27b713c7e2.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     22379
IP address blocks:        134.65.8.0/21 maxlen: 24
                          134.65.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:ab:a0:0a:12:d4:81:c3:98:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=996d35f0-3885-4471-96ae-082a9062467b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:26:6c:47:a8:23:2b:14:33:f7:92:51:cc:
                    b6:4e:f2:be:b2:d5:cf:d9:76:dd:a7:89:3e:55:13:
                    c4:87:d4:4b:31:d3:cf:da:c4:90:aa:3f:5a:3f:f1:
                    c3:90:8c:0e:da:33:86:38:f1:40:e6:85:b2:79:5c:
                    be:46:dc:fd:c0:06:68:c2:ae:a0:1f:e5:6a:fd:82:
                    69:dc:03:2e:cd:49:f5:95:d1:94:5f:d6:9e:6c:d9:
                    d7:3a:5a:70:b7:6a:24:a9:a0:ac:ed:6e:ae:19:a9:
                    9c:d4:5a:10:7e:72:6e:5a:1a:c1:a5:a2:f1:b9:71:
                    36:47:27:a1:60:c5:bd:91:5c:fc:5e:c8:ad:83:98:
                    81:99:89:f5:0c:c8:eb:b2:73:70:32:1a:a5:5e:15:
                    28:db:56:43:e1:af:9c:db:a9:27:9c:8c:a7:1d:a0:
                    f7:a2:4f:dd:83:eb:d9:92:49:73:4f:05:88:b4:76:
                    5b:b7:a7:69:a0:71:aa:7c:53:d0:19:f0:11:e1:7e:
                    9a:a8:64:f0:d8:0c:97:9f:5e:ed:c8:da:c3:53:75:
                    3e:5f:bd:8a:eb:49:2c:95:18:da:97:01:c1:39:e7:
                    ef:ed:7f:e8:ec:8b:d7:f9:0b:56:85:d7:ce:c1:9c:
                    de:89:05:51:f1:7a:1a:5e:6d:c2:a9:1d:de:3f:eb:
                    ee:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CF:72:7B:79:89:B6:10:CF:14:62:1A:50:9D:6C:14:55:27:72:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/4725da9f-2aec-3551-89ad-ad27b713c7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl

            X509v3 Authority Key Identifier:
                keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.8.0/21
                  134.65.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:9c:ce:77:8b:be:58:cd:dc:75:9d:8c:23:27:ba:d8:3e:d8:
         71:d1:a4:5a:1b:c8:84:32:46:c0:56:2e:ab:19:68:bd:77:55:
         fa:94:be:1b:5a:bd:51:53:87:67:cb:85:3e:87:7d:09:46:3a:
         6b:9e:26:ed:3e:33:c8:63:8f:92:52:ca:40:65:6e:30:92:c8:
         5b:25:97:f0:5c:56:c5:2a:28:1b:f8:59:a9:ed:bb:30:47:2e:
         1a:65:d5:86:1d:bc:03:ad:40:47:03:0f:b7:68:bf:89:f6:76:
         f8:10:eb:71:2d:15:f0:ba:6f:17:76:46:69:7d:37:5b:35:c7:
         68:6a:e1:bc:40:a8:bf:4d:89:ff:98:25:ba:36:06:d6:ed:11:
         bc:c5:8b:cc:d4:5f:99:28:97:28:07:10:d1:d0:c7:53:59:b7:
         91:5a:e3:4e:ed:b8:5d:9c:dd:95:c9:29:a1:ca:3f:95:ac:f3:
         4c:ed:c8:bc:d5:09:f0:9c:ec:3c:e8:8d:c2:04:e4:11:10:dc:
         1b:e8:10:b6:09:35:bd:96:07:0b:ae:dc:66:dc:a6:40:a9:f7:
         ea:4c:83:e1:8a:6b:e0:eb:fd:dc:4d:c0:d3:a3:ef:67:80:5e:
         81:21:31:73:68:b6:d2:84:c0:bd:bd:74:9f:34:47:8f:e2:d2:
         9d:fe:d7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:24:34 2026 by rpki-client