Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa
File:                     7957af23-cbb4-36ed-805f-7806f26e4b02.roa (raw, json)
Hash identifier:          OaNcII9o6E454G+I98G9G6bp3YvKBjy7wsuDkU8rBP0=
Subject key identifier:   DD:71:DC:DB:A5:45:AB:30:1B:19:6D:3B:43:A5:12:93:C3:AB:6D:D3
Certificate issuer:       /CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
Certificate serial:       010D0C9F4328584F655D6C984BF7F1AAD4AE1480
Authority key identifier: 0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     16385
IP address blocks:        67.43.86.0/24 maxlen: 24
                          67.43.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:6c:98:4b:f7:f1:aa:d4:ae:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=8bf9d357-a91d-4fb6-bb6e-bbfc4b13db8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b8:f3:bf:cb:67:13:5b:01:dd:20:a9:ae:1f:
                    b1:35:91:f8:33:19:7b:8b:94:17:1a:c5:b5:90:07:
                    94:3f:a3:ec:84:8b:fc:64:b0:56:5d:f1:89:51:75:
                    3a:e2:13:88:dd:c2:73:26:02:9d:b7:78:0d:5f:65:
                    8d:e3:2a:81:e6:7e:32:de:f3:29:ae:6f:e0:d5:4f:
                    7d:76:76:80:54:f1:d0:60:dd:69:53:96:7b:37:96:
                    be:58:f5:4a:57:61:19:63:7f:81:7f:2b:b4:2d:54:
                    39:97:72:11:85:d9:ea:b1:44:b2:ae:5a:1c:bc:ef:
                    93:60:f4:6f:81:20:f4:44:2a:4b:fb:a7:1a:39:d1:
                    d1:a0:91:0d:75:ab:76:71:b6:04:80:83:c1:52:fc:
                    81:57:1b:f1:59:d2:23:fd:b2:12:88:0c:15:ab:6a:
                    b7:69:f2:91:23:54:90:62:cd:4a:b3:c6:95:40:79:
                    bb:dd:c1:3f:47:bb:0f:78:70:41:a7:7d:04:c0:67:
                    0d:e2:22:0c:fc:21:ed:d3:1e:e8:4c:dd:51:9a:e6:
                    2a:0d:87:25:29:e2:e4:41:1b:86:aa:f7:55:c4:87:
                    5c:28:23:a3:82:4d:a0:07:6d:c1:46:0a:26:b5:92:
                    93:73:10:07:bc:49:f9:0b:60:48:59:35:2b:f7:91:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:71:DC:DB:A5:45:AB:30:1B:19:6D:3B:43:A5:12:93:C3:AB:6D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:65:e8:e0:a3:c0:d6:a4:05:47:a5:86:ca:d9:60:16:81:b8:
         ab:30:d2:d4:47:33:04:dd:62:aa:1c:9f:0e:37:b6:8c:3a:09:
         fe:c3:9d:c3:83:1c:c8:98:b1:eb:a5:00:33:1e:94:fd:f7:f0:
         7f:5d:09:33:54:20:38:eb:7d:7e:e6:70:c3:b1:0d:90:18:99:
         88:77:97:0f:39:41:36:93:dc:dd:47:38:1c:6d:ee:cf:9c:4c:
         30:83:87:07:4d:cb:2d:a4:d8:dc:a9:42:b0:9c:f5:17:8d:7a:
         4c:b7:c3:74:e7:02:de:f2:44:41:5f:3c:1a:ba:74:06:90:bf:
         42:c9:f2:da:70:d6:07:d7:82:2c:f8:8c:82:b3:ab:90:02:d2:
         a7:ad:b5:18:d9:19:38:06:cc:bf:e1:1f:f0:e6:97:9a:b2:c8:
         f6:fb:be:64:c5:c3:9f:44:e0:ff:43:f1:b9:63:53:8d:4e:9c:
         b8:44:ca:d0:17:5f:df:9b:b5:f5:27:98:d5:14:98:4e:13:6c:
         f4:67:6b:e7:05:37:7a:b0:ab:24:bf:2e:eb:87:69:f7:09:0e:
         98:f8:e4:17:93:0e:21:e2:df:f2:d2:4b:08:11:80:b9:68:1c:
         f5:d7:a1:7a:45:1d:5f:8e:e5:7a:10:29:ff:c4:e0:df:70:f8:
         a9:a5:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:39:12 2026 by rpki-client