Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8adcd82a-3c49-3f83-930f-c5383b5afcf1.roa
File:                     8adcd82a-3c49-3f83-930f-c5383b5afcf1.roa (raw, json)
Hash identifier:          /gU4m9XXmvHMLQY9PUceU9+B0582u+mguzCzMYmErnQ=
Subject key identifier:   E9:07:46:C8:59:93:9E:43:C4:8B:A5:59:32:55:B6:07:3F:81:A9:CE
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584F5C8ECD2482AEE8A272D66B80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8adcd82a-3c49-3f83-930f-c5383b5afcf1.roa
Signing time:             Thu 01 Oct 2026 21:17:33 +0000
ROA not before:           Thu 01 Oct 2026 21:17:33 +0000
ROA not after:            Wed 30 Dec 2026 22:17:33 +0000
asID:                     13768
IP address blocks:        64.239.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:8e:cd:24:82:ae:e8:a2:72:d6:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Oct  1 21:17:33 2026 GMT
            Not After : Dec 30 22:17:33 2026 GMT
        Subject: CN=5345e131-4b64-4d4a-ad69-8be0d750e7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8a:3c:8b:dd:3a:58:0e:9b:51:ce:24:89:76:
                    2a:6b:cd:72:fd:18:54:60:83:aa:dc:ed:5f:39:51:
                    8e:ba:db:b2:7c:2e:5d:3e:fe:2f:df:64:b5:ac:d4:
                    55:7e:eb:b6:3a:c0:28:41:13:b5:15:4d:80:43:0e:
                    c6:e9:fc:85:54:da:77:c3:ef:1c:1b:20:53:00:73:
                    8d:57:ed:bb:b8:2a:97:82:7b:28:32:ff:ca:de:22:
                    5a:5b:cf:2b:0d:69:8d:bf:d7:80:13:a0:c3:93:6f:
                    bd:2b:6e:9a:07:fd:8c:c1:ea:15:1f:2c:44:0d:4a:
                    7e:da:43:e1:24:e7:a5:a4:7e:01:29:8f:34:f6:7a:
                    1b:68:dc:ce:fb:d2:5f:cb:a3:d7:e4:db:f6:28:2d:
                    60:90:7c:9d:73:bb:80:4a:d1:f1:87:82:46:e1:a6:
                    d2:62:40:14:f4:e6:d1:10:5f:9e:38:f1:06:b7:35:
                    62:6e:27:f4:00:98:b6:67:fe:40:4b:d1:c8:e0:1c:
                    5e:68:40:16:f8:08:da:64:b4:b7:e3:24:00:35:fc:
                    ad:cc:61:e8:c3:21:e3:d6:04:b5:be:ad:a0:47:40:
                    dc:e5:9c:4c:06:a9:b5:53:8e:cb:69:ae:cd:6f:f5:
                    7d:45:0a:75:e2:d9:8b:65:78:a7:b8:8e:99:87:71:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:07:46:C8:59:93:9E:43:C4:8B:A5:59:32:55:B6:07:3F:81:A9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8adcd82a-3c49-3f83-930f-c5383b5afcf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:68:05:11:2f:0c:37:9a:9c:29:b9:e6:df:3d:2c:39:0e:60:
         d1:30:04:d4:15:fa:18:38:e7:3c:cc:98:81:6c:11:71:89:bb:
         d5:44:cb:6d:2f:b2:7b:93:6a:e1:20:4a:6c:b3:07:72:4f:12:
         e9:8b:f9:d7:e2:12:8f:e2:3d:75:52:5a:39:de:cf:18:ac:a2:
         d6:c3:5c:3c:de:d7:7c:16:f0:99:60:3d:f1:b9:0a:3e:5a:ee:
         25:24:9c:e9:d3:2e:3e:f9:1d:e1:07:6d:a6:42:60:29:fb:1b:
         eb:88:bf:f9:61:59:ed:fc:2b:1e:d5:38:79:c4:a4:7d:ff:18:
         9c:57:68:dd:a4:93:96:87:8a:7f:aa:0f:54:bc:1e:82:04:a5:
         57:e3:75:b9:b3:1b:10:4e:b4:ce:48:aa:18:c7:53:67:e5:1d:
         8f:6c:81:34:db:65:be:b5:9c:2d:7c:61:2a:ac:75:d5:c6:6a:
         08:19:45:1c:53:7d:dd:8a:da:ed:33:78:4e:1e:4e:f9:8b:03:
         83:f0:82:1f:38:08:ab:00:7b:dc:96:d5:22:75:bf:fe:b5:b9:
         ad:7e:c4:68:4e:71:ca:c7:8b:bd:66:f4:9d:c5:24:c3:2d:70:
         c4:65:45:b3:3a:60:0f:8e:b5:43:ab:6b:5c:62:c2:20:bf:1a:
         28:ce:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 07:50:02 2026 by rpki-client