Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0ea5f20c-928b-3381-afc8-aedb931306e0.roa
File:                     0ea5f20c-928b-3381-afc8-aedb931306e0.roa (raw, json)
Hash identifier:          77iIPakqTKc9yfDT3OQ6n11NUq/PcjRIRcfVmoAm+Pc=
Subject key identifier:   C9:9B:FB:66:92:C9:5D:B5:67:47:B1:A4:D1:DB:BB:71:6A:C9:A1:C6
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584F4973DDD69A5B1E3C89E542E0
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0ea5f20c-928b-3381-afc8-aedb931306e0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     5769
IP address blocks:        24.200.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:dd:d6:9a:5b:1e:3c:89:e5:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c5140d4c-6469-4d96-89f8-d4210331227a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fb:06:a3:83:2e:d3:8b:7e:57:34:e2:82:9e:
                    a1:80:8a:03:7e:5e:81:20:5a:7f:85:f9:84:56:eb:
                    7b:d2:cf:00:15:89:ba:9e:d7:fd:69:2d:6d:76:ec:
                    8b:31:a7:a1:a5:ae:b0:0b:e2:6a:aa:e1:15:c0:bd:
                    9b:8e:e9:28:33:5c:6e:f4:e7:49:99:1c:ce:b4:31:
                    c0:38:c3:09:aa:1f:6c:6c:bc:32:86:e5:59:2d:a8:
                    b7:04:37:1e:30:e1:10:02:b2:d0:7a:8b:36:3f:b3:
                    18:27:8f:04:db:6e:4c:85:74:c7:74:c0:53:01:d6:
                    63:98:63:18:45:e1:30:07:25:6d:5f:d3:f6:17:bd:
                    0a:a0:a8:03:f4:83:7e:3a:28:80:a9:82:3e:0f:75:
                    9a:0b:35:0c:a8:d1:bb:71:0b:41:a1:5f:de:6d:49:
                    73:5a:84:84:cc:69:06:af:5b:2a:90:0e:41:78:62:
                    08:8a:85:da:38:37:8f:9b:6a:9f:1e:be:1e:81:a6:
                    f1:8a:87:d7:2a:d6:f7:78:be:74:4b:b0:78:de:e3:
                    33:af:8f:e5:17:e7:42:78:d3:36:8c:fb:60:3d:2c:
                    78:21:35:a1:20:1e:b8:c8:45:ac:5d:f4:15:db:ab:
                    6b:84:6b:ba:26:37:df:9a:31:de:c6:b9:9f:94:d7:
                    82:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9B:FB:66:92:C9:5D:B5:67:47:B1:A4:D1:DB:BB:71:6A:C9:A1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0ea5f20c-928b-3381-afc8-aedb931306e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.200.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0e:64:3a:ad:01:3e:7b:87:49:c9:c1:89:bd:7e:a6:6f:14:
         70:cf:4c:33:4d:79:dd:32:44:fa:0a:14:7d:61:3b:ed:d1:58:
         68:99:1f:c2:6e:06:18:3e:eb:16:29:97:b3:95:a5:ea:1a:4b:
         d2:87:29:04:47:ce:c1:09:76:ec:28:80:61:41:c6:26:e6:69:
         42:3f:aa:a1:d3:06:05:27:2a:b9:e9:3b:93:7e:fd:0b:0d:e4:
         ab:1d:a5:f5:59:b0:0d:31:13:de:84:b2:91:a5:1d:55:23:12:
         6d:81:e2:06:d7:1c:b2:91:63:15:22:8d:a5:ce:83:be:32:e2:
         d8:eb:ad:ec:80:3f:7e:79:3e:5d:d6:64:81:02:be:43:88:15:
         69:a9:b3:1e:78:25:3d:b4:cd:e0:32:d2:4f:f1:20:ef:ba:8a:
         02:3e:2c:dc:47:b2:e2:7e:6b:09:8d:47:31:0f:c8:07:d2:00:
         3d:81:c3:20:1f:b4:4b:51:65:aa:7d:d9:ee:33:79:75:40:1c:
         7a:4d:52:7f:39:7b:ae:7a:5e:ee:ad:fa:f4:16:08:db:62:43:
         34:eb:86:a9:4d:ea:dc:e7:26:70:5a:89:26:06:d9:de:a0:4a:
         e3:fc:37:89:a1:da:ff:0c:34:cb:fa:c7:fa:a0:ce:14:80:f8:
         e1:90:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:41:11 2026 by rpki-client