Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/89761cad-323f-3f81-ac2f-c61752be258b.roa
File:                     89761cad-323f-3f81-ac2f-c61752be258b.roa (raw, json)
Hash identifier:          EPJshK1Pk9GT34ubJRSw1mCvN5QRtPoGbttPK6rUZHc=
Subject key identifier:   FA:14:DE:65:04:4A:55:E2:5E:30:BE:96:02:C2:11:E2:1A:38:8E:46
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584F549D574029007509BC82B440
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/89761cad-323f-3f81-ac2f-c61752be258b.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     396253
IP address blocks:        149.19.60.0/24 maxlen: 24
                          163.120.80.0/23 maxlen: 23
                          163.120.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:57:40:29:00:75:09:bc:82:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=224c549c-1ff4-44e0-8afe-8ed9a3830f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:0a:f5:0f:7e:01:98:57:71:6e:2e:3b:a8:
                    0b:2a:cf:6f:d2:03:15:cd:3c:3e:33:27:bc:e0:1b:
                    fa:d3:eb:76:bb:b7:99:32:18:d8:2d:25:e1:95:7f:
                    2e:9e:61:f4:af:95:45:b8:75:2b:c7:08:f5:95:00:
                    60:46:97:7d:e3:77:e3:0f:0b:62:8c:58:62:27:ae:
                    27:19:7a:91:02:a8:e9:9c:e8:21:62:79:e7:30:a5:
                    30:40:25:6b:e5:2a:12:32:a2:e7:fa:a5:53:8e:4a:
                    3e:e7:88:6f:3f:f0:da:24:44:5c:cf:2a:c7:7d:79:
                    59:ef:79:e2:31:c7:d3:2b:2b:da:cc:1c:b4:5e:69:
                    59:80:1c:80:77:00:45:26:8b:21:92:18:1d:0a:e5:
                    8e:e2:c4:80:98:1f:f7:54:41:c4:82:44:02:79:29:
                    48:da:27:b2:7b:d7:5f:0c:e3:c7:fd:56:ec:e4:16:
                    82:fc:8a:7f:14:43:a3:ac:29:7d:b1:76:09:17:89:
                    48:db:f6:4e:48:87:85:5f:c6:69:aa:b6:64:bd:0c:
                    17:28:f9:86:62:ae:22:bd:d1:f9:e5:df:0c:2b:ec:
                    d7:7d:7b:da:78:ba:13:cd:b0:b2:de:4d:dc:b7:7e:
                    82:42:15:88:bd:af:2e:16:5e:bb:20:25:c0:03:3a:
                    67:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:14:DE:65:04:4A:55:E2:5E:30:BE:96:02:C2:11:E2:1A:38:8E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/89761cad-323f-3f81-ac2f-c61752be258b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.60.0/24
                  163.120.80.0-163.120.82.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:d6:ea:dd:15:c8:b6:3e:34:4c:15:8c:37:08:23:ee:30:
         9a:af:32:d1:79:7e:7e:a7:22:a4:ea:cf:e7:05:5b:2d:70:21:
         b3:e9:d4:0c:1e:0c:22:3e:24:80:e7:63:57:7c:d6:22:55:bf:
         fe:13:96:a9:f6:15:91:2d:fd:2f:8f:f3:4e:56:e9:73:e6:32:
         0f:c1:e3:44:80:a7:cd:2e:0b:d1:5d:95:01:f3:25:cf:5c:c1:
         ba:c2:1b:a0:8d:e6:d3:fa:5a:ec:72:3b:f8:f8:96:69:33:9c:
         3e:84:6d:f3:f8:33:40:ea:9f:9d:92:8f:0b:28:26:22:e4:44:
         0a:d8:a7:2e:74:98:71:f5:33:e3:9b:68:9e:ec:8c:ed:3f:e8:
         06:3f:42:a9:23:51:bf:86:5b:50:a8:e8:75:82:a3:b9:ab:a1:
         18:57:e4:03:4f:47:ee:ac:7e:fd:b3:30:0d:ed:9a:81:9d:87:
         94:47:8f:1c:54:ba:0b:31:b4:64:5f:32:a6:53:98:10:23:aa:
         dd:ce:2a:5b:d5:f7:38:ac:b4:7c:23:00:5c:80:7c:43:26:ce:
         c7:1b:d4:db:38:e8:fb:3d:c5:70:3a:c2:80:f8:77:29:90:0d:
         13:8d:6d:1b:0d:ec:01:e8:22:52:f9:57:31:5e:68:fc:3b:f3:
         07:5b:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:48:37 2026 by rpki-client