Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2/f79c81f0-63cb-32f7-8cb9-7a90c480c8b2.roa
File:                     f79c81f0-63cb-32f7-8cb9-7a90c480c8b2.roa (raw, json)
Hash identifier:          V7dEiPBqYaurkcxeLN/yD+hCM06sGrjgVji190baPg8=
Subject key identifier:   70:2B:EB:14:D4:A8:58:41:C6:EF:7B:7C:FA:1D:50:0E:B0:D4:71:8B
Certificate issuer:       /CN=6b42cd94-a6a3-4e8a-a4e9-b685626858b2
Certificate serial:       010D0C9F4328584FAABF9DB4D30220F7323BC300
Authority key identifier: 34:E8:4C:5E:E4:2B:AD:7E:EF:36:9C:8F:B0:2C:61:5A:B8:DD:93:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2/f79c81f0-63cb-32f7-8cb9-7a90c480c8b2.roa
Signing time:             Thu 29 Oct 2026 21:28:57 +0000
ROA not before:           Thu 29 Oct 2026 21:28:57 +0000
ROA not after:            Wed 27 Jan 2027 22:28:57 +0000
asID:                     36399
IP address blocks:        198.161.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:aa:bf:9d:b4:d3:02:20:f7:32:3b:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b42cd94-a6a3-4e8a-a4e9-b685626858b2
        Validity
            Not Before: Oct 29 21:28:57 2026 GMT
            Not After : Jan 27 22:28:57 2027 GMT
        Subject: CN=cfa71d1d-c62f-4afd-8e38-c03840b9da72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:46:25:ce:ff:4d:65:e6:31:26:5d:40:78:
                    17:15:6c:aa:b9:f8:fb:35:0a:0d:f8:7b:7f:59:b2:
                    9a:33:0f:9c:0e:c4:81:7f:0a:25:4e:92:c6:92:17:
                    fe:88:c0:04:a9:d1:4c:45:20:97:b5:d5:a0:fc:1e:
                    1a:64:cb:41:88:a2:ef:5d:25:c5:db:37:94:d4:25:
                    ed:67:ff:a8:cc:67:18:1d:b0:14:fa:d7:1f:5f:d9:
                    13:e0:57:6a:40:38:1e:57:f6:c3:2f:6b:78:99:2f:
                    c6:dd:87:1e:38:d0:f6:d4:d3:28:49:9f:16:66:e1:
                    b1:a2:6a:0c:37:ad:82:06:8e:45:56:3d:02:88:84:
                    dc:26:e6:96:ba:f9:05:71:ce:85:88:19:e2:92:f8:
                    92:a2:89:5c:dc:b6:af:ab:b9:de:c0:0f:b7:a1:d1:
                    3e:86:14:3c:d7:87:bd:a4:94:d8:ff:04:10:83:22:
                    d8:48:78:94:f8:03:cb:5e:55:52:01:e4:f2:ca:2a:
                    ea:32:1c:8b:a6:42:f0:ac:45:4f:ba:49:2c:e8:83:
                    3b:23:a7:76:74:6d:bd:d1:98:d0:8a:75:6a:70:df:
                    47:71:1c:f7:4f:04:a4:8d:e5:74:2b:19:d2:54:8f:
                    13:f8:1d:aa:85:6e:f3:4b:06:5e:ab:e5:5d:01:e3:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2B:EB:14:D4:A8:58:41:C6:EF:7B:7C:FA:1D:50:0E:B0:D4:71:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2/f79c81f0-63cb-32f7-8cb9-7a90c480c8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2.crl

            X509v3 Authority Key Identifier:
                keyid:34:E8:4C:5E:E4:2B:AD:7E:EF:36:9C:8F:B0:2C:61:5A:B8:DD:93:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/6b42cd94-a6a3-4e8a-a4e9-b685626858b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:20:f0:0f:f3:5c:db:33:69:a5:66:bd:be:e6:06:11:a6:d5:
         ea:bf:f5:86:66:8d:43:a2:de:20:11:93:1a:32:16:0e:ee:98:
         7e:5f:f0:52:a9:8d:d0:d2:3a:8c:5a:ab:0b:25:a5:cb:d0:cf:
         15:5b:4c:ca:ee:3f:4e:82:db:c9:f6:e0:a8:dd:11:63:ff:8f:
         f3:be:c0:36:ff:b5:ce:f8:e3:01:9f:7b:6e:74:aa:e4:ed:da:
         7e:a9:1f:07:ec:9a:68:c2:d4:16:37:3a:aa:e8:d6:f9:16:98:
         f4:4e:db:c3:3d:12:5e:ff:c9:db:9a:86:11:a3:80:c2:d1:88:
         42:2a:02:4c:9e:44:34:29:30:18:20:2c:d6:62:22:19:d1:36:
         7e:bd:f6:4e:68:21:5c:ad:26:1f:a9:dc:03:43:22:79:54:b6:
         a5:90:49:d2:af:f0:8c:5e:4e:96:3b:06:ee:7c:7f:42:48:01:
         8c:8a:e4:60:43:16:20:b0:80:e3:22:0c:e8:16:b8:4a:07:0f:
         df:6b:8f:99:ab:a6:f4:dc:00:15:05:02:f3:2f:b7:4d:39:71:
         97:57:ee:6e:90:f0:7c:cf:17:e6:4f:56:48:88:41:8a:33:2a:
         37:1f:6c:dc:54:34:09:74:8e:84:c3:a0:62:f6:32:c3:4c:46:
         c6:e9:b0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:35:51 2026 by rpki-client