Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/73c157fc-687c-32b2-ad0f-5ffadebf1b70.roa
File:                     73c157fc-687c-32b2-ad0f-5ffadebf1b70.roa (raw, json)
Hash identifier:          SXlQpPajXSSpAIKCojMt90dp54gw/Q+HA3plUqKWEE4=
Subject key identifier:   69:CB:FA:1F:16:2B:2C:F0:1D:DD:ED:A2:E0:6F:88:9A:EA:4A:F4:3E
Certificate issuer:       /CN=92db335e-640b-4ae2-9650-c420af83089d
Certificate serial:       010D0C9F4328584F201CDC8F1CC76AD54E2A4CA0
Authority key identifier: 9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/73c157fc-687c-32b2-ad0f-5ffadebf1b70.roa
Signing time:             Thu 10 Sep 2026 05:39:28 +0000
ROA not before:           Thu 10 Sep 2026 05:39:28 +0000
ROA not after:            Wed 09 Dec 2026 06:39:28 +0000
asID:                     40702
IP address blocks:        64.83.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:1c:dc:8f:1c:c7:6a:d5:4e:2a:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92db335e-640b-4ae2-9650-c420af83089d
        Validity
            Not Before: Sep 10 05:39:28 2026 GMT
            Not After : Dec  9 06:39:28 2026 GMT
        Subject: CN=ac05e3c6-df37-42c8-ac0f-6e0ad12b9273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:1f:55:a6:1e:5d:34:24:b3:e9:cc:01:cc:
                    fa:ff:e8:cb:71:29:0a:13:43:6d:1a:24:96:46:5f:
                    b1:cb:ef:2c:1d:12:ca:d6:8d:e7:ed:1c:b7:3b:c8:
                    46:1d:e4:48:e3:4b:4d:8f:1d:4c:a5:04:29:20:79:
                    ba:4f:bc:6b:eb:ef:7d:73:48:eb:90:40:e1:2d:fd:
                    ef:f3:bc:31:09:06:6f:b5:00:c8:b3:c9:2a:2f:3d:
                    2f:b5:3b:9d:04:09:cd:03:8b:6b:6e:d9:5a:f2:06:
                    ae:55:cd:94:56:21:91:73:f9:ac:7b:f3:82:71:b6:
                    60:8d:22:d7:cf:1d:7a:9b:48:32:7a:96:71:1e:d1:
                    4e:6d:a5:1f:14:dc:48:6b:e6:86:cb:f5:dd:82:ce:
                    11:31:2e:5c:93:37:52:57:fa:03:3b:ab:50:b0:ed:
                    bd:95:4e:d9:fb:16:37:7f:1c:8a:45:46:b3:4d:4d:
                    09:bb:4b:28:d5:64:6e:de:cc:45:2d:f7:46:85:a4:
                    ba:e2:e3:c0:e8:cb:45:3c:42:a0:21:d8:17:2f:f9:
                    a4:c4:b8:21:d1:63:20:8a:97:57:d5:ee:04:d0:2c:
                    fb:63:8a:96:77:0f:d4:b5:9e:bb:22:ea:96:cd:74:
                    54:ec:1f:cb:7e:81:76:29:8f:d2:4e:e5:f1:34:36:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CB:FA:1F:16:2B:2C:F0:1D:DD:ED:A2:E0:6F:88:9A:EA:4A:F4:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/73c157fc-687c-32b2-ad0f-5ffadebf1b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl

            X509v3 Authority Key Identifier:
                keyid:9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.83.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:fd:30:9a:bf:85:e7:70:ca:c1:50:ff:f1:6f:01:f8:0b:35:
         9b:a8:da:a4:3e:86:46:d0:14:dd:5f:5e:87:17:1b:2a:6a:cd:
         8c:30:1c:1f:42:ee:fd:77:db:db:fa:31:da:d2:61:aa:4f:2b:
         1d:ed:a3:a8:a2:ae:e3:a7:2b:a1:ed:88:64:d9:ea:35:d8:21:
         ed:6b:e4:0c:c3:0e:ff:6d:3f:f6:0f:c0:77:b4:e6:f9:ac:17:
         a6:a9:a2:f8:03:e9:0a:3f:9c:08:2e:a3:70:c2:da:d0:94:e1:
         59:72:da:ba:ac:46:f9:97:ed:85:6a:56:52:c3:0f:68:63:bb:
         06:bb:45:35:b2:0f:08:9a:6d:1a:98:30:59:e8:56:59:09:5b:
         3f:ec:6b:90:ab:45:c0:92:81:be:23:ae:35:91:08:89:c1:bd:
         60:a6:a0:07:8a:a2:72:24:ef:af:0e:55:19:07:99:42:5b:d6:
         00:ac:2f:d1:6e:9e:48:38:0e:2b:b6:46:bd:0e:bb:22:e2:0b:
         4c:5e:7c:03:fd:72:c0:21:c4:bd:12:ad:bc:04:e4:e5:af:19:
         fc:96:13:96:db:8c:f4:cd:bc:65:f3:4f:89:76:0e:1d:91:d9:
         aa:00:0c:c1:25:c3:a8:d3:e1:ce:0c:a6:f0:e4:62:c8:13:e0:
         59:77:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:43:52 2026 by rpki-client