Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa
File:                     3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa (raw, json)
Hash identifier:          05LFfExI7v7ETsqdKXnntA4XISurG6FCc8iaAISgegU=
Subject key identifier:   E7:A4:1A:68:FB:56:97:29:33:52:2D:9B:22:24:FB:4E:B9:D8:BE:76
Certificate issuer:       /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
Certificate serial:       010D0C9F4328584F82ADCEDADB10444D53AE2AC0
Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     29
IP address blocks:        128.36.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:ce:da:db:10:44:4d:53:ae:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=65f3026e-969f-47ee-a0c0-09e6acd5b06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9e:87:55:aa:18:50:ec:ba:d8:aa:56:e1:b3:
                    c7:4b:8c:92:a8:c4:64:32:e2:9f:d7:6f:a6:b3:cd:
                    de:3c:27:88:5d:dd:33:93:3f:6b:88:93:3a:7a:e7:
                    04:be:ff:c4:36:5a:d6:3c:48:f8:e9:54:ee:bf:37:
                    7c:2e:8c:2a:46:88:19:66:02:3e:01:49:d6:db:9d:
                    21:ca:41:70:53:ca:bc:e3:47:56:ad:b4:db:02:f2:
                    38:b4:0f:13:da:36:fe:c0:61:a1:6a:e6:12:bd:0d:
                    b6:71:9f:e6:80:bc:16:a6:68:1e:aa:7c:9c:ac:b1:
                    4b:c2:d1:78:ae:5f:d2:88:bb:46:33:2d:f9:3a:08:
                    7d:bd:f0:82:62:e5:29:e0:71:43:68:9f:b2:9e:88:
                    d8:83:7d:18:43:13:7b:fa:46:df:e7:ed:da:cf:35:
                    fb:b7:54:30:48:55:50:64:79:cd:c4:4d:d7:f3:f9:
                    9a:8b:58:6f:48:a9:e6:b2:0a:ae:3c:87:45:c2:d4:
                    d9:4c:0a:0a:45:9e:67:d8:69:89:2d:bd:87:f4:83:
                    2f:90:3e:0d:77:42:c1:0a:76:8b:c3:b6:2c:ad:50:
                    60:b9:d9:76:08:81:ca:e0:dd:5e:35:4e:62:5e:7f:
                    83:7c:ce:91:68:3e:50:cb:42:09:86:c5:e5:df:a1:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A4:1A:68:FB:56:97:29:33:52:2D:9B:22:24:FB:4E:B9:D8:BE:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl

            X509v3 Authority Key Identifier:
                keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.36.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:91:86:9d:92:5d:a1:22:c7:03:ee:ef:db:48:e3:f5:3b:31:
         05:44:b5:cf:0b:5d:de:9d:47:dc:f3:8d:78:92:8b:24:95:2f:
         21:f2:8c:bd:c4:42:05:17:e0:ff:06:84:f6:33:dc:00:2c:f0:
         3a:f4:66:8a:0b:f4:dd:37:ee:00:fc:f0:ad:11:8d:a9:be:c2:
         3d:6b:75:16:5b:db:c7:5d:61:42:53:5a:2c:b4:68:3d:12:31:
         e0:b5:a8:ea:39:6f:26:4c:74:64:97:8c:19:03:e8:51:f3:cb:
         c2:cf:f3:89:ff:d1:ed:e0:b3:cd:5b:58:6a:2f:b9:57:23:fa:
         17:05:d2:b9:a6:4a:dc:a3:92:a0:98:f8:a6:08:7e:f5:6c:de:
         cf:78:5e:d0:dd:e8:b2:5c:db:29:76:0c:ca:2b:d0:07:29:88:
         33:d5:1e:36:0f:a3:2e:44:be:5a:12:33:42:76:0e:d5:98:ac:
         ff:e9:98:95:a6:c5:a5:fe:a0:8f:ed:91:33:8d:25:b2:e1:73:
         db:35:57:e2:52:05:02:cd:85:41:a6:49:e1:de:ad:9e:99:71:
         99:c7:05:a3:38:e1:dc:7b:0b:13:2d:3b:de:72:d6:c0:18:88:
         72:93:33:96:58:d4:48:f8:fa:72:c8:9c:d4:42:e1:40:d2:85:
         13:44:98:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:55:52 2026 by rpki-client