Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/334883b2-9678-32f4-a815-405b63a85f62.roa
File:                     334883b2-9678-32f4-a815-405b63a85f62.roa (raw, json)
Hash identifier:          m0t181aO06lm9ebKRL2ejyKL2mGJirmbpmmG5dpc6zg=
Subject key identifier:   DA:E9:32:29:A2:AC:C1:0C:18:05:07:5A:5B:B2:D2:23:F4:64:4D:E0
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584F5CFD590A5FA5AEC44BED6F40
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/334883b2-9678-32f4-a815-405b63a85f62.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     40933
IP address blocks:        65.19.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:59:0a:5f:a5:ae:c4:4b:ed:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=a0c0eb63-1fa0-4ddd-b4ee-5f9bc3489d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:ac:85:28:9c:08:4e:fc:79:a8:61:ad:94:
                    00:2a:fc:a8:7f:99:79:15:1a:2c:58:73:bd:81:8d:
                    65:2b:7a:c7:ef:5f:4e:d1:3d:d9:f5:37:b3:32:96:
                    19:18:16:41:39:93:bd:1e:55:50:98:22:6e:6b:9b:
                    e7:f4:67:f1:d8:81:7c:e6:54:b1:00:31:67:cf:bf:
                    80:dd:1d:82:73:fb:22:86:91:ae:f4:4a:e2:80:45:
                    d1:99:48:86:65:5d:24:98:d5:3a:9d:5c:00:45:1e:
                    a7:1f:b9:04:8f:66:66:7a:29:8d:24:98:2f:1c:ab:
                    81:5a:98:2e:11:b2:d2:b7:af:7a:b9:d5:69:b8:f2:
                    73:ba:41:80:16:71:f5:44:ff:bb:e1:4b:51:c4:49:
                    2d:0d:00:ce:49:a8:e4:a2:7a:b1:66:4f:e0:f4:ca:
                    6e:99:88:ec:d0:9e:50:a4:25:db:20:c0:bd:24:1d:
                    5e:8a:88:70:7d:e2:29:ef:04:e1:86:b4:6a:a3:f9:
                    5d:9e:aa:84:8f:bd:9f:ff:4e:15:73:b0:49:d0:ab:
                    eb:60:b6:5c:5f:03:e8:0c:f1:5c:8f:89:9d:92:44:
                    5f:40:9f:d7:37:e9:c7:53:a0:c5:b6:82:36:df:37:
                    2d:7a:c4:4e:6c:16:4f:f0:f1:4f:fe:e1:f1:f8:4a:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E9:32:29:A2:AC:C1:0C:18:05:07:5A:5B:B2:D2:23:F4:64:4D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/334883b2-9678-32f4-a815-405b63a85f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b2:ae:d1:48:9a:ea:72:30:8f:a8:7c:3f:35:18:5c:a9:a3:
         6d:4e:0d:7c:ec:7f:1c:76:6c:1f:96:55:d5:c6:aa:4d:7e:59:
         69:c5:7a:11:03:70:a8:5a:7e:b8:10:45:63:f8:e5:e2:4c:ee:
         9f:8a:2e:4a:de:9f:09:98:f0:07:57:b0:20:ba:44:fe:b8:33:
         95:79:4c:e5:2e:88:7f:61:41:04:e9:28:46:63:95:1a:e2:69:
         82:64:db:8b:9d:8e:25:da:6c:93:2f:65:67:20:0c:07:6d:0c:
         65:57:ef:fa:b2:2d:11:09:a1:43:fb:22:c6:de:80:c2:a2:41:
         61:e2:ee:52:16:67:42:7f:9a:96:dc:c4:fd:07:bd:3a:23:d0:
         41:7d:75:78:11:31:e8:c4:da:d1:b7:94:f0:37:82:2b:02:68:
         48:73:ae:cf:b7:c3:ac:8c:88:2e:4a:5e:59:6a:2b:06:e3:46:
         13:f9:98:da:87:64:93:55:c9:87:2b:45:13:d6:a2:f9:70:8f:
         c3:04:da:83:42:b2:7e:e4:b8:79:f9:1a:30:4e:c5:f6:bc:b2:
         53:b0:ea:a5:83:53:c2:a5:80:34:d8:46:6b:92:a1:27:7f:fa:
         88:ba:7e:24:f2:72:a4:d1:eb:63:8a:b9:33:4f:43:d9:3d:8e:
         88:b5:8f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:50:09 2026 by rpki-client