Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/963087eb-7dc1-3773-bc74-c2cb8e34e8d0.roa
File:                     963087eb-7dc1-3773-bc74-c2cb8e34e8d0.roa (raw, json)
Hash identifier:          i9MZMSG+T22SM6NrxlXuB8MGZbO+r8UgsRIWG8Ex+wM=
Subject key identifier:   72:EB:6F:5D:98:62:03:31:C0:A2:3F:9D:96:03:4E:0F:12:B9:3D:0B
Certificate issuer:       /CN=01664fbf-983f-4876-bc33-31a4d5aed031
Certificate serial:       010D0C9F4328584EDC91ED8A982629305B74F398
Authority key identifier: 95:4A:A5:D9:F8:E6:3A:D1:5A:18:DC:1C:28:6C:38:83:F9:ED:B9:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/963087eb-7dc1-3773-bc74-c2cb8e34e8d0.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        65.110.52.0/23 maxlen: 23
                          65.110.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:ed:8a:98:26:29:30:5b:74:f3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01664fbf-983f-4876-bc33-31a4d5aed031
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=22ba155a-d905-4f6e-9de6-e6efb900439e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:44:02:27:6f:79:82:95:02:1c:0f:5d:5c:fb:
                    e7:67:f7:72:28:e2:81:d9:cd:ba:f2:fd:3d:45:50:
                    21:05:c7:6c:bb:5d:57:05:3c:aa:c3:72:c8:2b:1b:
                    c4:cd:7b:f9:d6:a6:ba:73:e2:97:1b:1d:df:5e:45:
                    0f:02:cb:0a:7a:0e:89:69:65:ff:c2:98:10:9a:4f:
                    c5:45:66:c7:28:db:9f:d0:0a:90:69:c3:9e:5d:fb:
                    47:7d:43:a7:4e:76:5e:fa:19:f6:62:29:b5:4b:8c:
                    ff:83:ed:7e:1b:4e:d0:0d:f8:f0:7f:3c:9e:b2:08:
                    ef:1e:da:9a:d3:a8:b4:72:f8:09:d9:b4:4f:f2:1c:
                    c6:ed:a9:59:f8:86:09:81:eb:17:93:bb:bc:fe:ef:
                    1f:72:79:5a:d5:15:26:2b:65:1e:64:3a:63:b0:17:
                    c4:68:07:34:88:02:51:d7:56:07:5b:9f:f5:1c:1d:
                    04:c0:dc:70:81:0e:fb:a7:e7:a5:2d:4d:cd:4a:8c:
                    f5:5c:13:69:61:ff:64:af:d8:e6:92:48:72:e0:99:
                    73:58:97:a8:96:5f:93:c5:6a:4a:f5:40:aa:3d:59:
                    e0:a0:a8:3f:a4:66:11:c1:68:90:50:1a:85:87:07:
                    8f:35:65:e3:e2:5a:fb:da:68:ed:77:2b:95:21:91:
                    e6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EB:6F:5D:98:62:03:31:C0:A2:3F:9D:96:03:4E:0F:12:B9:3D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/963087eb-7dc1-3773-bc74-c2cb8e34e8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.crl

            X509v3 Authority Key Identifier:
                keyid:95:4A:A5:D9:F8:E6:3A:D1:5A:18:DC:1C:28:6C:38:83:F9:ED:B9:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.52.0-65.110.54.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:70:58:b2:0c:0b:24:ef:a1:5d:69:f4:98:9e:9a:6c:0f:07:
         97:d6:8c:7b:6a:11:7e:5e:ad:a6:43:4d:00:1b:78:99:58:c6:
         ad:2a:ee:2c:77:fc:1d:a9:7f:c8:72:9e:a3:db:0f:46:12:42:
         c6:09:14:19:a7:92:b8:75:ed:d2:52:79:3e:55:4d:ff:12:db:
         d1:64:fb:ad:92:b8:38:5a:cb:d1:27:0d:de:b5:04:1f:3d:46:
         45:fe:2f:6c:80:6b:a5:99:bd:34:e7:f9:da:bf:78:d6:8e:f8:
         29:e5:4a:ba:cb:15:72:ce:2b:0a:49:94:1e:9b:44:7f:39:65:
         68:8e:e0:72:27:22:04:e4:d2:fb:59:cd:8f:c0:2e:74:0d:89:
         ec:ed:70:5e:f6:31:1a:14:76:54:e7:a3:11:ac:1c:03:e3:2c:
         b0:be:41:5b:9f:4f:02:5a:e0:db:1d:41:dd:58:66:6a:6c:44:
         87:06:a0:c2:b1:ea:05:ae:e9:e2:8b:e7:66:99:0f:3b:bd:50:
         3c:d7:3a:5b:1a:8f:b1:c8:81:bd:9e:d3:d3:b3:9a:08:08:ce:
         a5:91:1a:3d:e9:28:ae:9e:15:3f:0f:c3:b3:01:ec:74:f3:26:
         3c:68:82:8a:ca:cb:cf:39:e3:89:1b:e3:04:12:f4:d7:0f:58:
         a6:ab:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:39 2026 by rpki-client