Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/411ca020-42e0-308e-8a0f-d97911ee968c.roa
File:                     411ca020-42e0-308e-8a0f-d97911ee968c.roa (raw, json)
Hash identifier:          rFNUd5/fC2zUrl99PIGbwmfFuclTwMUjCTgdziAJhko=
Subject key identifier:   F8:6C:0E:D0:E1:8C:A2:DB:DC:B1:CC:C1:66:3C:8A:65:7F:C1:BF:E3
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584EA79017D366EE5B78D02E9080
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/411ca020-42e0-308e-8a0f-d97911ee968c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13768
IP address blocks:        65.39.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:17:d3:66:ee:5b:78:d0:2e:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e780016f-9719-4f50-af44-f847a09551a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b9:95:07:7c:26:dd:fc:1d:2a:8b:93:ba:50:
                    69:e4:b1:91:96:1d:0e:b4:c7:6b:98:0a:20:c2:b6:
                    30:aa:7f:f6:81:0f:7a:98:70:56:03:eb:c6:40:11:
                    0c:5d:82:53:a4:7e:2b:79:c8:5d:2d:34:8a:5c:14:
                    55:4f:e9:e1:3d:16:df:d0:c6:30:2a:12:63:2a:3b:
                    21:3f:9c:58:07:58:d2:bd:00:ec:95:44:9d:bb:b2:
                    3a:54:1f:66:05:64:1c:c3:14:74:0c:43:59:71:4a:
                    41:8c:5f:8f:80:a0:02:12:16:dd:ca:a7:fa:45:ba:
                    2a:b1:ef:ac:90:1b:33:fd:b9:47:a4:82:70:e4:5e:
                    ec:0e:43:43:1e:3c:2e:24:f8:2d:69:e6:fd:d7:96:
                    f5:15:fc:8d:6b:da:31:7f:22:75:57:b7:a2:08:e3:
                    7a:16:2f:d0:e0:5d:df:31:1c:ff:6d:07:4f:94:62:
                    c4:68:31:a0:1f:b1:76:fa:db:7b:27:b8:d7:c9:f0:
                    35:38:70:84:fb:c2:76:53:40:db:b3:49:7c:9b:87:
                    3b:a9:08:87:f5:53:71:fe:36:06:2c:38:34:0f:3f:
                    ea:52:ce:7c:d0:32:6f:6e:cd:62:10:88:38:4e:cb:
                    d1:77:45:f6:fd:19:7a:6e:78:ea:0e:ea:65:7f:55:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6C:0E:D0:E1:8C:A2:DB:DC:B1:CC:C1:66:3C:8A:65:7F:C1:BF:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/411ca020-42e0-308e-8a0f-d97911ee968c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ad:1e:f2:fa:08:93:ef:57:df:b8:61:d8:5c:a2:44:e0:d8:
         b8:a6:89:07:72:55:ce:0a:9d:dc:65:a4:c3:82:e1:fb:62:3c:
         df:0d:d8:3a:1f:12:3c:5e:53:02:a5:ed:d7:ec:0c:16:50:e9:
         fc:44:5a:dc:c8:e4:7c:73:92:f3:27:9b:86:cc:17:d9:af:b0:
         85:d3:d3:dd:09:44:1a:ab:38:1d:b4:5c:90:9b:4e:1f:1e:1c:
         86:00:d3:a6:d5:ea:89:c1:cb:2f:b1:c2:e6:cd:2a:17:83:56:
         6f:98:e8:32:67:ee:8f:5e:07:b5:32:eb:b0:aa:79:89:1d:6a:
         3f:7a:31:73:02:41:de:2c:76:ce:18:1c:3a:48:0d:89:97:a8:
         76:32:fe:ba:b1:7c:6e:32:9e:e6:5d:e6:a9:09:ff:40:02:0f:
         3d:6d:6f:cd:a4:5b:5d:c7:c7:6e:14:ee:3a:47:6f:7d:c5:bf:
         5b:46:4a:7e:32:6d:fe:f4:1f:52:5a:fc:30:b6:8b:e8:34:b6:
         df:0e:c4:03:46:98:6a:b2:00:b6:f4:a0:7f:73:74:24:d2:70:
         d6:89:1d:20:d7:3a:00:d0:cc:47:1d:2a:66:75:93:dc:e2:db:
         68:26:41:11:50:2b:73:40:62:e2:9e:60:16:db:e1:e0:9f:ae:
         27:ac:17:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 10:39:25 2026 by rpki-client