Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/3bc3b9c0-dab3-34e9-99ba-39b01871beb3.roa
File:                     3bc3b9c0-dab3-34e9-99ba-39b01871beb3.roa (raw, json)
Hash identifier:          lkMMimbKXZ3qa5oZBBh+Gy2cYa/Pu6mHsCEXnF43PXk=
Subject key identifier:   9E:40:5A:92:C2:FB:91:8B:2A:33:C5:CA:29:72:80:42:6E:0D:65:FD
Certificate issuer:       /CN=92db335e-640b-4ae2-9650-c420af83089d
Certificate serial:       010D0C9F4328584F2CECC5C6388D0A8384FFA880
Authority key identifier: 9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/3bc3b9c0-dab3-34e9-99ba-39b01871beb3.roa
Signing time:             Mon 14 Sep 2026 19:48:05 +0000
ROA not before:           Mon 14 Sep 2026 19:48:05 +0000
ROA not after:            Sun 13 Dec 2026 20:48:05 +0000
asID:                     53610
IP address blocks:        64.20.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:ec:c5:c6:38:8d:0a:83:84:ff:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92db335e-640b-4ae2-9650-c420af83089d
        Validity
            Not Before: Sep 14 19:48:05 2026 GMT
            Not After : Dec 13 20:48:05 2026 GMT
        Subject: CN=8046389c-59d2-4095-a625-fa865d9665c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:45:c4:02:2b:0b:1e:aa:da:6a:67:ce:22:
                    dd:81:e7:99:88:37:de:2d:b9:4b:30:66:04:d1:67:
                    63:ac:25:3f:76:c0:07:ca:fe:d6:1a:8f:fa:f4:ca:
                    ae:4c:45:0f:2b:d0:9a:9c:0a:67:d6:49:83:ff:f1:
                    a3:0b:6d:f2:c1:71:80:e5:e9:a2:f4:dc:7d:e0:36:
                    b4:06:f8:eb:30:52:f0:8c:49:5c:f2:6e:81:14:df:
                    67:38:c0:8d:b9:97:42:dd:e7:b9:66:e8:1b:37:e9:
                    d7:9d:5e:b3:3d:4e:bf:dd:f4:f0:72:9f:8f:3c:63:
                    aa:bb:8c:ec:0f:0c:ad:15:1f:cf:70:85:16:9c:bb:
                    2e:de:72:9a:70:33:45:44:41:8d:36:e8:81:ce:6b:
                    99:c3:c1:18:2c:67:88:9c:f0:3a:0b:a2:0b:37:82:
                    2a:e4:be:02:0b:54:65:79:49:2a:a2:10:5d:0e:bc:
                    b0:72:b8:fd:60:50:01:15:b5:a4:56:26:b6:68:39:
                    8b:ca:e5:86:b8:cd:d4:4e:ea:27:05:7b:ef:94:67:
                    61:28:43:a9:97:1b:57:4f:5c:4f:9f:97:bf:26:a5:
                    e9:39:fb:18:c6:f7:68:ab:9b:14:10:37:99:06:97:
                    49:c5:43:83:9b:dd:08:b4:4a:ea:75:2d:ca:4a:1b:
                    20:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:40:5A:92:C2:FB:91:8B:2A:33:C5:CA:29:72:80:42:6E:0D:65:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/3bc3b9c0-dab3-34e9-99ba-39b01871beb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl

            X509v3 Authority Key Identifier:
                keyid:9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0b:6d:50:de:fc:a2:ce:3c:b9:fd:24:03:57:a9:40:48:eb:
         55:c5:6b:32:25:d6:55:66:e3:44:39:87:ae:aa:ff:bd:be:a8:
         77:57:89:a9:ed:12:51:bd:09:de:56:bf:ab:c2:92:b8:a3:42:
         e6:ce:f7:c8:73:ec:f6:ef:a1:6e:49:0c:73:f9:0a:94:65:f3:
         04:7f:e4:e7:ca:03:7c:11:0a:a7:d3:7d:bd:f1:23:64:1b:43:
         01:28:e8:5a:81:72:1f:f8:8c:c0:dc:c5:43:50:ba:ed:1e:0b:
         95:03:8c:5b:b8:40:e9:d2:09:0a:fc:2b:3b:d6:c0:ff:62:2e:
         24:95:dc:8f:3b:f0:2f:41:32:e2:33:01:d9:d0:ca:48:5c:b2:
         5e:21:86:43:32:0e:3e:3f:45:0e:3f:9c:e6:04:23:41:f3:0f:
         01:10:7d:71:bf:78:85:95:3d:7e:c0:4f:6c:75:69:0d:33:53:
         06:ee:ef:14:3a:ae:07:d6:c9:b4:18:ff:0b:f7:f5:51:23:57:
         bd:67:c0:3d:5f:a0:e0:3e:33:15:96:aa:0e:e9:cd:23:30:17:
         e6:ec:7b:c1:e1:cc:b8:86:cf:63:26:73:62:32:5d:c2:9f:ec:
         8b:23:8e:72:ff:81:d0:a0:fc:d1:dd:fb:33:8a:87:3b:e3:48:
         9f:65:9d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:11 2026 by rpki-client