Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/334883b2-9678-32f4-a815-405b63a85f62.roa
File:                     334883b2-9678-32f4-a815-405b63a85f62.roa (raw, json)
Hash identifier:          qB4QOJ1TIAVCi7QBnWZXgJuSoo+I6NU2AzSL53RJTkc=
Subject key identifier:   0A:1D:42:39:8E:65:66:57:53:10:A6:F7:1A:76:97:85:90:A9:96:2C
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584EBA7EFF63AB1B0ED9FEEA5118
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/334883b2-9678-32f4-a815-405b63a85f62.roa
Signing time:             Tue 04 Aug 2026 20:04:45 +0000
ROA not before:           Tue 04 Aug 2026 20:04:45 +0000
ROA not after:            Mon 02 Nov 2026 21:04:45 +0000
asID:                     40933
IP address blocks:        65.19.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:7e:ff:63:ab:1b:0e:d9:fe:ea:51:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Aug  4 20:04:45 2026 GMT
            Not After : Nov  2 21:04:45 2026 GMT
        Subject: CN=85725c94-789c-4f8b-ac86-4452b852cf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:8b:bc:60:c6:52:e9:63:35:7a:ce:45:d4:
                    00:e8:3b:02:49:90:37:1d:8a:41:8b:e2:1a:af:72:
                    18:53:b0:0e:f5:38:0d:c8:76:c1:b2:b3:0c:56:ec:
                    84:ae:c1:d7:98:cb:df:55:e5:27:cf:14:8d:9a:75:
                    17:80:b8:9c:7d:a4:08:ba:5f:1f:0c:36:67:56:c9:
                    6c:09:72:13:bc:25:8a:9f:09:99:98:a2:19:23:80:
                    2a:87:26:36:bf:0c:36:2d:ae:08:6b:76:28:98:97:
                    1f:8d:c5:74:a9:c7:94:4e:f4:3a:3f:e4:d7:2c:72:
                    9e:5c:56:02:1f:8b:e0:6a:29:f4:b0:60:e3:1b:8f:
                    9c:e3:1d:71:04:c9:6f:0a:e4:fb:bb:63:59:60:65:
                    25:7f:7e:46:39:9b:3d:f1:ce:a2:5d:f5:d2:58:ee:
                    56:35:57:59:f0:a4:80:83:7e:2d:26:96:3a:f0:97:
                    3a:4e:91:68:c7:68:71:dd:77:eb:d1:23:61:ff:45:
                    80:d7:23:a2:14:07:e7:80:92:98:cf:3a:61:f8:6a:
                    77:68:1e:e9:1f:ed:ae:db:e9:08:6b:77:af:7e:47:
                    6d:bb:7b:ff:92:18:9b:d5:bc:f3:b8:ce:53:bb:bc:
                    0a:fe:15:76:69:02:d4:7c:9e:a6:af:6f:af:8e:c4:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1D:42:39:8E:65:66:57:53:10:A6:F7:1A:76:97:85:90:A9:96:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/334883b2-9678-32f4-a815-405b63a85f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:f3:44:09:85:28:9c:70:c7:38:83:59:14:7a:8c:9b:cf:d1:
         c8:a1:f4:8d:75:33:60:52:49:d8:5e:03:b5:7c:65:a5:59:ea:
         da:5b:5e:8d:f6:b6:4b:76:bd:63:24:d9:7e:18:e2:1c:43:f5:
         f1:75:b6:d1:73:6b:8c:58:21:9f:ff:8f:a4:c7:8b:87:be:97:
         8f:fd:65:bc:9e:a5:2b:c2:f1:f2:3c:cc:a4:81:da:6b:8a:9c:
         86:cf:9e:eb:f8:67:8d:19:8c:f0:71:ab:7e:ae:e2:80:5d:47:
         d2:2c:d8:93:ad:ff:0b:42:93:53:92:a3:c6:86:86:e2:63:8d:
         cc:d7:0f:b9:9b:23:68:21:73:99:5e:92:df:fa:97:6a:51:09:
         17:e5:cb:e7:eb:6b:6e:04:aa:d7:fb:41:63:f8:71:1a:a0:b0:
         6d:7b:b9:33:cc:23:f2:5c:38:6d:c0:86:1d:ad:e3:74:7b:27:
         b9:10:06:d9:e9:57:ca:c2:ba:94:ad:45:3f:17:63:55:73:df:
         60:5e:7f:8d:99:0e:05:1e:ba:f3:cb:35:f8:66:87:0b:60:0a:
         29:2d:79:4b:64:c0:2e:dd:33:0d:15:b9:ca:ad:5e:38:a6:3c:
         b3:f7:95:4d:c5:59:87:be:75:ca:71:fe:78:14:5b:7e:90:c3:
         3b:6f:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 05:33:59 2026 by rpki-client