Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/0dd74c61-7894-33a8-b4bf-9a544e92c1f5.roa
File:                     0dd74c61-7894-33a8-b4bf-9a544e92c1f5.roa (raw, json)
Hash identifier:          h3C2KioOEoRFm9+epX5s5+DPAc2uBRSoLBCSb4AW9WA=
Subject key identifier:   74:2E:85:83:77:E9:4D:85:0B:7B:63:83:2D:86:69:39:44:D0:3A:79
Certificate issuer:       /CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
Certificate serial:       010D0C9F4328584F6FEEA43FAA36892F3D7C9940
Authority key identifier: E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/0dd74c61-7894-33a8-b4bf-9a544e92c1f5.roa
Signing time:             Thu 08 Oct 2026 19:51:01 +0000
ROA not before:           Thu 08 Oct 2026 19:51:01 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     62813
IP address blocks:        161.129.184.0/23 maxlen: 24
                          192.197.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:ee:a4:3f:aa:36:89:2f:3d:7c:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
        Validity
            Not Before: Oct  8 19:51:01 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=689a2ebc-8f76-42cc-9718-7d6b6fd174e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:99:43:77:7f:0b:21:35:98:5f:39:e3:c9:0b:
                    ea:cf:8e:09:ad:77:6c:64:67:33:69:cb:f4:aa:c8:
                    1b:04:55:dc:72:4b:ed:7e:32:7d:57:5b:05:a7:19:
                    fe:8d:3f:b6:40:4a:74:b4:2b:65:59:6e:ca:4f:fa:
                    16:7b:b4:70:94:08:ba:92:b0:f5:51:54:22:da:2d:
                    9d:f1:0c:44:62:89:3e:94:a9:cd:5e:30:bd:0b:1c:
                    7c:52:51:19:0f:49:08:0a:96:39:76:ab:7e:e7:bc:
                    5c:ec:7b:f9:d4:74:9c:ee:2d:97:af:42:ca:7e:44:
                    24:41:3a:f6:e2:81:6d:42:38:bf:35:05:45:c6:8a:
                    1e:f7:a1:23:91:fc:bb:81:6d:ad:66:93:c6:cb:5f:
                    bf:8a:e7:45:a9:6d:3e:d1:83:47:2c:f2:66:c0:d2:
                    26:61:92:aa:b0:98:7c:39:b5:a4:ef:ba:af:13:dd:
                    2f:4a:48:13:a2:76:0a:a9:c6:19:82:c4:4e:9e:a7:
                    12:85:3c:d8:dc:ce:93:cf:3d:23:06:de:46:43:b7:
                    c5:11:40:fb:a7:2e:15:3d:83:07:90:f5:e5:90:2a:
                    07:67:e1:cd:c9:cf:b6:b1:60:19:f8:cf:eb:ae:6b:
                    2d:b6:32:f0:90:dd:a1:db:94:83:b9:c3:ec:56:e6:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2E:85:83:77:E9:4D:85:0B:7B:63:83:2D:86:69:39:44:D0:3A:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/0dd74c61-7894-33a8-b4bf-9a544e92c1f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl

            X509v3 Authority Key Identifier:
                keyid:E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.184.0/23
                  192.197.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:3c:c9:79:76:1c:45:60:5a:f2:ea:ad:3a:e8:d4:bb:29:48:
         16:69:20:f3:ae:2b:02:1d:39:87:3e:75:ab:0c:91:90:ac:7c:
         14:02:2c:d7:ef:79:e2:4d:0f:b1:3c:c8:d7:27:12:67:79:e0:
         e5:eb:29:f9:45:46:90:4f:20:04:66:7e:49:fc:4f:57:59:f2:
         01:e3:ac:48:d1:d9:e7:d1:09:a8:69:97:c3:5e:d8:05:bf:7a:
         86:e4:04:97:0a:95:78:64:16:4c:80:26:2e:d0:ad:a5:e5:26:
         c4:91:c9:07:c9:6d:fb:82:d3:96:f9:fa:81:db:81:14:16:e0:
         46:c9:12:b9:ef:b3:2c:08:db:c6:4b:6b:dd:61:f2:91:e0:30:
         69:d3:90:88:2b:59:67:5a:58:26:6a:c5:0e:d7:d6:b3:87:61:
         33:72:14:8b:29:25:d4:57:f0:63:f7:33:f1:38:73:f2:4a:eb:
         c7:2a:31:30:60:75:ea:29:57:25:43:c6:96:2b:bf:2c:d7:11:
         c3:f4:15:c4:b1:f8:32:32:9b:e6:5f:24:6d:2d:f0:5c:fe:fc:
         84:f4:21:93:45:69:c6:4d:d2:30:e0:77:ff:bf:ee:d6:99:d7:
         e9:3b:8c:6c:9a:d0:51:f9:77:5a:e4:87:fa:1b:7f:9e:40:35:
         8d:f0:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:01:23 2026 by rpki-client