Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa
File:                     a940db39-8b94-3a45-8f58-c597de6ac74a.roa (raw, json)
Hash identifier:          hiSG2Jm71mVUyTbVKy1ZyLEIgDyd3QuV81l8P+eUhfM=
Subject key identifier:   17:2D:8F:5B:76:87:1A:80:E9:74:34:8F:05:54:06:0C:05:96:55:DE
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584EED520C43BE1D0A915E63FB00
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     399809
IP address blocks:        64.29.138.0/24 maxlen: 24
                          2607:f3a0:a00a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:0c:43:be:1d:0a:91:5e:63:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=ca84c1d2-2fbb-498d-b9c9-3e5e7c68bc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ba:52:36:7c:76:4a:4f:a4:40:42:0b:57:bb:
                    a3:73:89:d7:e5:86:08:ce:79:25:d2:9a:27:fd:09:
                    64:8d:9a:d3:90:40:44:ce:bb:80:3e:6d:ae:33:d1:
                    b4:df:8c:fa:33:d2:33:d4:2f:94:17:72:17:fd:e3:
                    19:d4:9f:6b:7c:60:7d:ce:0d:8d:8b:79:3a:48:88:
                    6a:a4:6f:67:82:59:4f:ee:64:f4:cf:af:00:84:69:
                    04:01:3e:3d:b8:54:83:84:23:47:3f:32:4f:83:d2:
                    8a:2c:4e:93:45:a2:58:62:60:d4:12:2b:bb:ca:cc:
                    23:04:38:ef:a9:ea:44:0a:2f:de:5e:33:f5:95:d2:
                    e3:7c:13:c3:80:e6:b7:d1:f8:7c:de:e0:4c:e8:4b:
                    f0:84:02:98:5a:af:12:d1:e2:2e:2e:50:37:46:dc:
                    15:be:74:41:dd:53:df:ad:30:20:0d:36:52:ce:fc:
                    a5:a9:34:96:02:bc:ca:d4:b3:05:c5:e3:d7:46:a6:
                    6f:d0:bf:58:0b:ce:19:97:a2:da:a0:f2:58:dd:4d:
                    7b:c4:3d:08:f1:00:6c:a1:f4:9d:6e:ba:89:1c:7f:
                    bd:7a:8e:1a:9a:60:a6:6e:1e:9c:e2:fc:6d:61:45:
                    e8:b1:f9:ed:a1:8d:0f:f0:4e:b2:7a:e6:be:43:c6:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2D:8F:5B:76:87:1A:80:E9:74:34:8F:05:54:06:0C:05:96:55:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.138.0/24
                IPv6:
                  2607:f3a0:a00a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ab:bd:dd:8c:68:1d:fa:12:8b:e8:ef:52:11:bf:38:e1:27:
         28:10:09:88:48:21:a7:38:36:ac:c8:a8:ed:ae:3d:79:56:29:
         d1:af:de:5a:fd:c9:db:fe:f7:90:a7:7c:89:fd:98:8e:48:57:
         a6:1c:63:3f:54:78:1d:5b:6e:66:90:71:b8:7b:f7:04:83:8b:
         00:42:0a:51:d5:05:39:03:bd:82:61:22:d9:0e:ff:2a:80:35:
         d9:b3:90:e7:a4:8b:d8:75:4f:b1:dc:6e:d6:19:bb:e4:ff:8d:
         c6:b9:b0:3c:70:f1:3d:25:25:96:b7:4b:04:51:4a:ea:5f:f3:
         11:cd:9e:25:cf:f5:3c:ad:db:05:a5:af:c7:5f:78:e2:1e:d2:
         38:f1:72:5c:5d:c0:59:27:ba:bb:3b:b2:99:6a:e1:dc:b6:37:
         96:80:e4:17:ea:fb:86:8a:92:61:dd:64:0f:72:89:13:c7:fe:
         84:3d:52:bc:5b:35:34:7a:d6:3d:c4:6f:cf:86:fb:ba:de:6d:
         fc:3c:71:7d:94:2b:81:19:c5:84:53:0b:00:cd:29:81:d1:1a:
         95:ae:bc:cc:a2:15:81:72:51:3e:55:c2:da:31:ff:8f:78:40:
         11:3e:cf:6c:f2:bd:49:d7:ec:15:1c:e6:47:34:cf:3d:b9:48:
         d1:36:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 03:01:59 2026 by rpki-client