Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93b2a81c-4bb9-3b3c-90a1-3a38c43f3d08.roa
File:                     93b2a81c-4bb9-3b3c-90a1-3a38c43f3d08.roa (raw, json)
Hash identifier:          I0ZJQV4U3/jJ8FwiSKLPAr6nClhFI4xFeH4v8Ae0hdM=
Subject key identifier:   A1:09:FA:72:EF:C2:88:71:67:76:6C:0E:F1:BF:7F:F4:72:D5:6D:29
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC92181455E47A50B46D4480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93b2a81c-4bb9-3b3c-90a1-3a38c43f3d08.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     394740
IP address blocks:        65.49.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:18:14:55:e4:7a:50:b4:6d:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=d857fd85-5a8a-4140-b695-8d41f9f6385d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:6a:a1:cb:e2:dd:6e:4d:29:15:fa:b7:8f:
                    b4:49:ff:93:7f:f2:4d:c8:22:f4:66:24:6a:12:e1:
                    88:bf:a3:7b:12:d7:01:2a:34:ad:86:68:d2:9f:68:
                    e5:0d:5a:60:9e:58:ab:b0:1d:d1:e0:44:82:19:b2:
                    f4:eb:86:fb:fa:f9:12:55:98:0b:bb:0c:36:83:d4:
                    ca:95:98:b9:4a:8c:b2:b3:2d:72:66:68:d5:22:64:
                    e0:4c:7b:4a:af:8c:82:1d:b2:61:a4:bf:f9:a7:55:
                    76:27:f1:6a:86:17:b8:16:97:85:c8:8e:65:55:7b:
                    a1:ad:d1:aa:f3:fb:93:fa:b4:99:ee:56:c8:7a:01:
                    84:1d:6f:ce:35:de:47:44:6e:c1:b0:3d:80:ed:d8:
                    32:62:88:2f:a6:4c:89:9a:1a:7f:c8:c5:ea:0c:78:
                    ab:5d:0c:46:3a:ea:e6:72:b7:98:28:12:8c:13:7a:
                    1a:9b:d6:35:29:60:e5:a0:c2:b7:e5:44:84:49:15:
                    46:3f:88:76:4d:aa:3e:c6:de:a3:eb:00:26:e0:9e:
                    34:58:17:b1:2b:5a:b6:8c:6a:70:7c:dc:3d:27:29:
                    cd:86:b2:a4:64:ba:fd:8a:5d:41:1d:c5:25:11:84:
                    55:7c:16:8c:72:5a:22:3a:f7:e6:72:28:ce:a3:8c:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:09:FA:72:EF:C2:88:71:67:76:6C:0E:F1:BF:7F:F4:72:D5:6D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93b2a81c-4bb9-3b3c-90a1-3a38c43f3d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1f:b1:a1:28:09:1b:43:82:7d:59:ef:d9:fd:da:4c:86:9c:
         49:92:9f:69:50:e9:4c:da:ae:15:4e:ee:64:c8:53:2d:68:15:
         3a:49:12:ae:7d:fd:60:81:37:a3:87:d8:8e:f7:06:8d:c5:73:
         29:62:bd:cf:59:76:7a:cb:de:b0:a4:29:01:74:ea:9d:f6:49:
         3b:66:0d:4a:63:05:f0:6d:55:a3:59:12:85:a6:19:ba:9b:40:
         af:83:0d:05:84:77:77:a3:a6:e2:bc:1c:fa:b4:5b:8b:44:01:
         a0:98:2c:5e:48:a9:fa:34:fd:0e:69:8c:a0:29:e7:72:86:30:
         4a:23:08:fc:a6:2c:f4:8f:a5:cc:09:43:91:8b:9c:8d:7e:da:
         41:95:9c:05:ff:e9:a0:99:55:1d:d1:31:b8:b5:10:7a:ad:c6:
         2f:67:40:29:f6:0d:fb:99:81:7f:4b:bc:bb:3e:0b:7c:fd:41:
         0a:60:a3:99:ab:0e:aa:29:9e:ae:47:cf:c0:f7:f8:6c:13:be:
         88:8f:ce:90:79:23:5b:b8:2c:37:38:95:25:9a:b9:01:46:da:
         37:d4:94:b0:1f:33:1f:74:29:8c:18:88:27:47:5a:ed:24:14:
         f6:26:5b:03:cb:9d:b4:78:72:0b:8c:34:ec:e5:15:73:86:37:
         f5:da:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:52:12 2026 by rpki-client