Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/ea7b0631-1324-38ba-9568-5f3ed1a7d4f9.roa
File:                     ea7b0631-1324-38ba-9568-5f3ed1a7d4f9.roa (raw, json)
Hash identifier:          AOyxsDNii2QsIVFthKa//16kjkZZ7Gqij2+TGkK/pD4=
Subject key identifier:   A4:27:11:20:17:A4:F7:08:72:4E:71:3E:BA:4F:D1:C5:9C:57:F0:BE
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584F4973DDF83A780279E69524C0
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/ea7b0631-1324-38ba-9568-5f3ed1a7d4f9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     5769
IP address blocks:        96.20.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:dd:f8:3a:78:02:79:e6:95:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=709d43bc-3432-4387-ae17-86f130da0de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:c5:48:4a:c3:48:95:6b:b8:72:b8:5d:f5:
                    7a:f3:11:08:17:20:e2:24:fd:34:32:c2:a0:87:34:
                    94:16:66:46:7d:5a:d2:11:25:6e:8e:40:74:77:3a:
                    e4:d8:20:35:82:e5:ee:61:64:12:29:3d:70:55:5a:
                    e8:bd:77:00:f6:49:66:d1:5c:cc:b3:bd:fe:74:3d:
                    49:bf:ed:43:ab:0c:a7:29:42:45:e5:85:cb:f8:8c:
                    ab:7b:18:bc:94:95:bd:d2:c9:f5:20:f3:a5:63:84:
                    15:c6:9a:b4:3b:03:85:d3:38:6e:b0:03:49:fd:a8:
                    3e:34:31:0a:7d:b8:5a:b8:24:4e:2c:dc:c8:e5:f9:
                    3a:81:3d:bd:5e:82:32:c0:46:39:59:9b:95:62:03:
                    cf:55:2a:08:3e:d1:42:22:90:65:28:75:90:bc:9f:
                    b4:65:9a:87:89:6e:09:da:a1:f3:9c:66:7e:62:5c:
                    10:18:95:fd:47:a8:14:e9:14:3d:45:b0:fc:1e:b8:
                    24:c6:e9:d3:4e:e5:2e:8f:0b:9c:64:f9:5e:3e:43:
                    20:be:e9:86:6d:62:7c:75:fa:7c:74:c4:9f:66:39:
                    f9:62:fb:38:ba:79:59:b3:75:89:08:db:ca:df:17:
                    f1:22:75:dd:12:6a:fa:2f:36:1f:f5:65:13:a0:09:
                    53:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:27:11:20:17:A4:F7:08:72:4E:71:3E:BA:4F:D1:C5:9C:57:F0:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/ea7b0631-1324-38ba-9568-5f3ed1a7d4f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:88:57:1d:7b:d2:07:bb:02:1e:62:6a:66:59:c1:70:49:1d:
         3d:09:4e:ab:7f:29:20:bd:65:52:bd:38:e8:04:3b:b7:81:e5:
         ff:ab:3f:bb:a2:55:99:10:dd:b0:93:88:e8:30:0e:ba:db:fd:
         dc:89:21:84:55:63:4c:84:55:39:f4:41:79:19:30:a7:97:38:
         a0:d3:4f:f1:d2:9e:16:88:46:18:2e:22:f4:fd:0c:aa:4d:3d:
         ad:76:10:d6:51:cb:f0:fd:7e:e5:2a:99:be:5d:b8:4b:fa:fb:
         91:ef:96:2e:43:56:1b:3d:43:20:03:1a:cf:f1:d5:61:15:9b:
         e8:76:6d:06:2c:7f:e5:09:e3:f1:1f:37:59:a2:6c:f5:40:f9:
         56:a3:bd:56:e8:a9:15:b6:4e:3d:69:3e:47:22:04:e8:56:81:
         00:78:c8:b2:c1:ec:de:6f:93:78:87:57:7c:95:d1:b3:47:bc:
         c6:84:61:e6:fe:e4:1d:f1:2c:f4:87:01:c1:1e:6e:47:73:af:
         9a:66:3d:75:3e:c2:6a:ef:8d:2a:86:c5:97:f5:a6:72:a2:8c:
         ec:d0:7c:77:dd:ca:a5:10:1a:7c:13:af:4f:57:7d:de:fa:1e:
         42:ce:85:67:1e:c5:56:d2:b5:70:c4:b9:d6:bd:6f:08:3a:cb:
         7f:48:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:13:37 2026 by rpki-client