Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/96694673-67c0-3a28-be12-a89684be83cb.roa
File:                     96694673-67c0-3a28-be12-a89684be83cb.roa (raw, json)
Hash identifier:          R84FUif3s/MjpwLnO5YUaYhsi/px1exZZ12An6JiB1o=
Subject key identifier:   39:2E:EE:DB:8A:F9:9B:8D:CB:3F:02:90:33:67:FB:B7:15:E9:58:C5
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584F1467A23FEB653D91A3D2A580
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/96694673-67c0-3a28-be12-a89684be83cb.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     399575
IP address blocks:        206.204.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a2:3f:eb:65:3d:91:a3:d2:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=b5b43e14-97cb-44e9-8d97-d9b0599187b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:2c:73:60:b0:fb:89:e3:c2:7c:31:3b:fb:
                    6e:55:fa:23:3a:4d:4e:78:9b:63:7d:bd:4a:9b:e5:
                    fe:46:e7:27:69:eb:67:3b:93:4a:77:6e:2a:f1:51:
                    12:d7:61:83:5c:dd:35:63:8e:3b:81:f3:c5:e3:99:
                    4b:46:39:8b:0e:83:5b:82:a2:ad:33:bd:79:8d:22:
                    6e:4f:38:46:06:78:19:82:e7:3c:f9:41:b3:b8:54:
                    4e:3c:a4:7f:04:95:30:68:f6:f6:e5:00:e5:f2:56:
                    d6:d0:0b:3f:25:9f:7c:01:38:f7:8a:d1:11:39:6b:
                    73:30:4a:d8:a8:46:fc:3b:d1:ef:b2:40:f6:85:4e:
                    8a:a0:7c:5f:c5:d6:34:dd:bf:a3:ab:e5:b8:a2:f8:
                    ed:2a:ac:5b:cd:28:49:6a:d8:c2:5d:a7:60:35:12:
                    8c:d2:ef:1b:84:47:86:da:98:8c:40:f9:e3:13:c5:
                    8d:32:d6:66:2e:c9:76:30:f7:48:e7:c8:9f:c7:b6:
                    b5:21:ef:cb:c6:c8:cd:cf:22:16:f4:59:bf:31:c4:
                    c0:0d:26:33:45:41:0d:6c:d7:3f:1e:57:a5:74:11:
                    38:8d:84:2e:14:40:c2:3e:29:53:db:bf:03:85:dd:
                    cc:a9:3d:54:a6:74:90:23:91:0e:c7:02:6e:68:db:
                    22:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2E:EE:DB:8A:F9:9B:8D:CB:3F:02:90:33:67:FB:B7:15:E9:58:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/96694673-67c0-3a28-be12-a89684be83cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:16:d1:5f:91:75:e6:03:fa:e8:33:08:4d:88:0a:8d:83:
         b6:9a:87:88:1a:8b:cb:25:7b:98:2f:b8:c9:62:36:44:fd:82:
         51:67:80:99:cb:7b:0f:ce:e5:75:40:32:9a:14:1f:37:13:c1:
         87:ba:07:85:93:06:cf:e7:ec:5b:19:26:88:91:35:df:db:1a:
         56:d1:9a:dd:00:6a:7d:05:fa:ff:95:07:75:ab:83:d3:af:b4:
         9f:40:3b:90:f9:78:07:0c:fa:66:65:50:1d:d1:f0:c1:87:6b:
         50:22:56:60:e5:98:a8:ca:df:89:96:a5:7a:b5:b1:b5:f0:04:
         5f:d7:a7:17:94:ad:21:09:f8:fd:b1:9b:6c:e5:d8:fd:5a:35:
         60:7a:e6:86:49:61:f6:c3:bc:0f:8c:91:4e:cf:3a:0f:1e:cb:
         21:ea:8b:dd:76:da:c3:24:b8:16:39:24:16:41:9c:42:f4:9e:
         d9:b8:f8:a7:71:f1:ab:ac:74:49:ba:3f:16:c3:de:7d:65:40:
         1f:39:ac:d4:c5:c1:b2:11:35:d9:38:f2:a9:f2:24:da:dd:02:
         be:e7:f8:8c:90:1c:f6:6e:46:a5:65:2e:aa:07:17:05:85:48:
         68:9f:09:02:0b:5b:f3:ad:0d:a1:66:cb:2f:8d:ee:65:8d:f6:
         ee:e4:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:11:22 2026 by rpki-client