Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa
File:                     959c9920-c69e-389b-8a68-5c4dc7a13333.roa (raw, json)
Hash identifier:          t9DHmID1ZgCbdqTnv5lg6NYMIrn1pxqK30cQBaFUvEA=
Subject key identifier:   EE:3B:2F:B6:CB:FC:8D:95:40:C8:42:97:35:F8:C9:14:32:7B:40:D9
Certificate issuer:       /CN=74b205b0-206e-45a4-8d98-55b99a30a8f4
Certificate serial:       010D0C9F4328584F58CD57F0F7DA5024CF4830C0
Authority key identifier: F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     12155
IP address blocks:        65.75.240.0/20 maxlen: 24
                          199.36.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:57:f0:f7:da:50:24:cf:48:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b205b0-206e-45a4-8d98-55b99a30a8f4
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=882cf829-a7b7-410a-ac3d-eb6665226b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:93:3f:a0:31:09:7c:53:bb:9d:02:99:41:9f:
                    60:d6:3d:4a:83:1f:43:6f:f4:d3:e7:4d:30:1f:b8:
                    f1:9a:25:56:c3:4d:2e:2f:9e:52:fa:a7:e3:04:c7:
                    74:ae:5e:27:03:5a:cf:35:d8:48:96:b0:2a:ed:3a:
                    23:8e:63:b9:55:73:cf:b9:a1:ef:12:d4:d1:db:d5:
                    b1:f9:36:e2:07:b9:47:b5:19:78:44:24:15:41:eb:
                    c1:fe:46:d2:4f:ae:d4:7f:ba:1a:8f:76:46:53:94:
                    d6:8b:6f:87:23:bf:91:68:15:0a:7a:a3:94:f4:82:
                    dd:c5:37:f6:fd:12:97:10:8b:7e:5b:27:d3:98:03:
                    37:04:72:66:6b:65:2d:09:d2:6b:54:a4:92:99:de:
                    11:41:1a:fb:81:32:38:c3:88:41:88:e9:c1:2f:8e:
                    95:e6:fc:a6:16:2f:16:e5:a4:c2:ed:27:dd:26:75:
                    e8:1d:b3:50:40:ec:93:64:29:77:9d:12:9c:ac:32:
                    77:60:2c:6f:76:4b:b0:e5:ad:91:71:2c:96:44:77:
                    1f:53:45:58:d8:8a:59:a8:bd:31:dd:4f:df:fb:3e:
                    01:34:4d:a4:ca:c9:5e:df:8b:fd:42:2d:c8:26:f8:
                    77:0d:2e:89:4a:7c:a9:d7:6f:c0:f4:ef:80:d0:2a:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3B:2F:B6:CB:FC:8D:95:40:C8:42:97:35:F8:C9:14:32:7B:40:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl

            X509v3 Authority Key Identifier:
                keyid:F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.240.0/20
                  199.36.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:53:cd:d8:33:f4:66:97:66:97:5b:69:d4:0f:9a:38:1a:cc:
         11:37:c8:07:73:4d:27:f4:97:e4:d3:d3:ff:4e:8e:d9:9f:2e:
         ad:06:31:b1:60:22:4b:18:88:39:3f:df:bb:3c:cb:9f:53:e5:
         12:a4:0d:25:d0:ff:66:c0:b8:56:26:de:b2:f0:88:99:c1:89:
         ca:18:49:f5:23:68:91:94:cc:75:3c:ca:5d:55:49:f9:9e:71:
         8a:04:3a:94:36:19:88:31:38:0f:5a:70:6c:d8:ad:45:6d:90:
         42:2c:2b:7d:ac:47:18:32:c2:d7:26:5e:8c:12:bf:22:6b:8a:
         2d:62:ed:56:d2:8c:f9:9e:dd:ad:dd:24:df:2a:1d:d3:dc:67:
         af:5f:e5:7f:98:d5:fc:e4:de:35:b3:06:fd:b6:ae:ac:46:1b:
         f7:d1:cc:c0:2d:66:c5:4e:3a:76:b8:34:fa:bd:15:e2:55:fc:
         f3:27:a6:95:fe:2c:42:de:d0:d6:84:89:4d:c5:b5:8e:92:52:
         9c:e7:57:3a:5d:5b:aa:f0:c2:2f:65:eb:bf:0d:27:d4:20:90:
         c1:ef:f4:ed:46:5d:61:0d:1c:9b:79:7d:7c:61:28:b4:86:32:
         df:98:e6:da:4e:10:d3:65:5b:70:92:6a:d5:24:3b:de:9d:fc:
         f2:c2:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:49:49 2026 by rpki-client