Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/3f86cd14-b3b5-3ab3-80e1-5bcf883bbee9.roa
File:                     3f86cd14-b3b5-3ab3-80e1-5bcf883bbee9.roa (raw, json)
Hash identifier:          1ggno0ihXjnrKbz/z66vzqMoUJfzteQ8CWNX8IytBCY=
Subject key identifier:   98:B0:66:1B:72:10:E7:C3:44:1C:7A:87:49:90:96:59:94:BB:6C:C9
Certificate issuer:       /CN=503d278e-3d64-45f0-9c99-0926a5eec14c
Certificate serial:       010D0C9F4328584EA787F798FAC67FF776EE05C0
Authority key identifier: 3A:A5:E2:51:83:F9:FB:6D:B8:1B:0F:08:67:A3:B0:25:EA:19:BF:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/3f86cd14-b3b5-3ab3-80e1-5bcf883bbee9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11995
IP address blocks:        204.63.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f7:98:fa:c6:7f:f7:76:ee:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503d278e-3d64-45f0-9c99-0926a5eec14c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=31482498-70f2-4583-a4f7-5934b4733b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:94:17:5e:3c:74:35:79:dc:e0:7b:b8:97:
                    90:fa:d3:13:fe:17:c0:6e:c0:7b:a0:4a:aa:3b:ca:
                    99:77:33:27:91:21:8b:cc:dd:e7:92:ee:74:81:cd:
                    65:40:c1:77:f7:9e:60:75:e4:85:73:ca:95:88:86:
                    33:a1:67:78:96:a6:c8:04:75:58:c9:3e:1a:e2:97:
                    12:5a:fb:57:12:d8:7b:a6:a6:1b:5d:22:60:b6:1a:
                    e6:66:da:5a:a1:08:5d:2a:c5:8b:85:b0:65:5c:ee:
                    54:8e:8e:3d:5f:4a:54:fc:68:1d:de:9a:bb:fc:ad:
                    92:39:66:08:34:b9:ff:20:6c:2c:66:96:be:32:ba:
                    15:5c:7f:af:77:cb:21:d4:31:2a:ba:97:da:66:d6:
                    98:19:f3:96:d3:87:39:16:a8:a1:b4:e5:5f:d6:9d:
                    71:d4:70:8f:d6:17:01:f0:9b:b6:7d:2a:fd:b7:23:
                    83:c0:f8:fc:89:9f:92:dc:df:1d:05:27:23:67:7f:
                    db:d3:1e:6e:a2:4c:f6:c5:b8:a6:e9:b2:77:e7:24:
                    30:31:81:6d:a8:1b:83:ed:7c:56:bd:ff:b1:e5:f1:
                    c2:4c:c2:5f:35:3a:05:86:78:96:c4:8a:da:2a:99:
                    96:02:af:e1:b1:94:72:37:ab:46:79:e1:09:ed:a6:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B0:66:1B:72:10:E7:C3:44:1C:7A:87:49:90:96:59:94:BB:6C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/3f86cd14-b3b5-3ab3-80e1-5bcf883bbee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.crl

            X509v3 Authority Key Identifier:
                keyid:3A:A5:E2:51:83:F9:FB:6D:B8:1B:0F:08:67:A3:B0:25:EA:19:BF:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:91:17:19:e2:63:2b:d7:bc:af:cd:61:6f:83:da:a2:aa:
         5a:66:04:b1:25:bb:b0:a0:b8:7e:10:ab:42:d6:4a:7f:c7:d9:
         a2:9a:a0:9a:76:a5:f8:b6:b9:e7:6b:75:5a:69:fb:b8:b1:e2:
         2f:15:95:f2:ce:2e:bd:41:71:73:e5:0f:19:d0:72:48:a5:48:
         93:37:97:b4:e2:7d:74:73:78:ec:a1:a3:9c:a9:59:2a:07:bd:
         9e:b9:d9:82:fd:7f:60:18:da:9e:c3:b3:a2:fe:6d:22:aa:8d:
         cc:ee:ee:24:dd:1c:ce:4c:73:37:f1:e6:24:91:62:46:b2:51:
         7b:82:7f:52:4f:fe:5f:e7:3e:e5:24:c2:0c:f3:01:ed:7c:1c:
         c8:8f:6d:ca:2d:4f:e9:35:ca:11:12:eb:de:7f:37:dc:d5:06:
         ca:5a:dc:dd:c0:c5:6e:de:83:10:fd:6e:89:a7:e4:2d:aa:16:
         88:6c:21:79:43:5e:24:9e:3f:b0:3d:33:d1:df:c8:6b:64:94:
         11:43:68:38:9b:20:79:eb:c7:78:ea:37:b6:f2:8e:9d:e3:46:
         26:e7:c4:e6:a6:86:14:75:4f:dd:c1:9a:2e:cf:a5:06:b1:75:
         91:c1:f7:15:c9:89:19:92:c0:0b:29:f2:bc:17:39:6c:fb:69:
         77:90:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:40:36 2026 by rpki-client