Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8584e3d-2de4-333a-b52b-831df19e3f45.roa
File:                     c8584e3d-2de4-333a-b52b-831df19e3f45.roa (raw, json)
Hash identifier:          0hqabhA3OjpuFJLcNzsDtUi+6Hu7GH8UfPICYdwLBhQ=
Subject key identifier:   7B:CF:4B:D9:51:66:08:3C:27:7B:BE:69:CA:6A:7C:C3:08:52:F5:BE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6293022B1ED4653C6D468A80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8584e3d-2de4-333a-b52b-831df19e3f45.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        97.71.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:02:2b:1e:d4:65:3c:6d:46:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=415d086b-8ba6-46ea-a38a-963dba8cec20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:88:de:51:92:91:b8:28:5b:b5:06:d1:c9:
                    b4:15:e3:cb:fb:71:49:db:f2:c1:a7:21:61:6e:81:
                    cf:57:df:df:1f:2b:81:a3:50:bb:f7:02:93:18:db:
                    a3:6a:b9:ff:25:05:ae:6c:7c:3e:8a:63:ff:79:2f:
                    ef:d5:28:8a:0e:d2:fe:5e:62:59:01:0c:39:0e:d0:
                    bc:74:a8:33:4b:71:dd:a6:ae:c5:ff:a8:8b:38:f8:
                    ff:99:1c:be:90:23:7f:14:f7:78:c5:23:25:00:14:
                    56:b3:03:1a:67:8d:26:e3:2f:78:67:22:a0:6f:60:
                    3b:1e:7e:c3:42:58:2c:d0:55:92:d9:e0:4d:e3:dd:
                    5d:ce:ae:9b:b1:22:78:67:0f:89:f0:df:be:30:c2:
                    56:dd:48:61:3f:7d:aa:00:fa:78:84:c3:c3:e4:53:
                    c7:5d:23:6b:2c:43:a2:f7:11:82:f6:a5:4e:bf:59:
                    c4:d4:5b:70:8f:22:4b:44:1a:2f:c2:ce:9a:d0:3e:
                    d0:e4:5a:3d:a4:3e:87:52:8c:3f:46:0c:bd:17:3b:
                    ee:b7:59:d3:08:c1:fa:86:f5:d6:66:ee:96:7d:6d:
                    74:ab:ae:38:c6:ee:93:41:5d:d7:28:88:18:99:fb:
                    ce:2e:ab:12:5c:87:2c:e8:17:d6:48:bd:ee:75:c3:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CF:4B:D9:51:66:08:3C:27:7B:BE:69:CA:6A:7C:C3:08:52:F5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8584e3d-2de4-333a-b52b-831df19e3f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:62:1a:b3:f5:83:d3:5b:73:19:e0:d8:d5:48:88:3e:46:e7:
         7c:80:3b:91:00:5e:0d:5e:7f:d1:b7:18:a1:90:66:81:8f:f4:
         0a:6c:eb:2a:96:04:92:2e:db:bd:e5:6b:8d:80:33:5b:cb:23:
         41:38:1f:7d:9f:5c:72:2f:a4:e5:cf:dd:82:10:d6:e2:b4:0d:
         fc:8f:55:c1:d6:ca:e5:45:96:14:c0:c4:d9:f4:36:25:12:aa:
         97:12:6e:45:c8:ba:2f:fd:e5:53:f4:c9:62:f9:0d:a9:eb:45:
         c5:b2:4a:2a:5b:ec:b2:f8:1c:de:b8:a0:4b:30:12:cd:87:31:
         00:0d:c1:b8:dc:55:ed:ca:9c:30:3b:75:0f:2f:31:d5:9a:50:
         33:83:ec:86:3e:3d:30:48:3c:ac:a8:9b:30:29:01:06:04:48:
         1d:20:2b:d6:47:e0:a5:8d:11:87:16:42:c0:4f:49:9e:fe:91:
         fe:9d:22:4b:0f:a3:ee:3f:6c:c4:e5:a5:83:a2:c4:45:a6:80:
         c0:90:6b:b1:89:2c:73:b7:a7:02:4b:ea:b6:92:ab:ec:29:5a:
         65:53:f7:0a:ca:61:42:56:2f:81:b9:31:c8:89:98:6e:f6:6f:
         9d:3b:25:b3:ce:79:c0:55:14:9f:68:46:76:31:45:b1:3d:ba:
         e4:50:0d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 16:12:17 2026 by rpki-client