Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d7d6f5e-9d87-39dc-aeb7-aa5e808b23fd.roa
File:                     2d7d6f5e-9d87-39dc-aeb7-aa5e808b23fd.roa (raw, json)
Hash identifier:          UWYDCZoo/fn5jRNSlILBXw/CFCNP7Pzq4a/0QrRvSCQ=
Subject key identifier:   91:59:C6:EA:AD:7A:43:1C:AC:C9:B0:8D:41:A9:F9:21:AE:E8:6A:22
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F57681ADD8AD4AC4A48434A80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d7d6f5e-9d87-39dc-aeb7-aa5e808b23fd.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        65.86.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:1a:dd:8a:d4:ac:4a:48:43:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=ad5927e4-701f-4eeb-8111-c96639c44b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a9:e1:59:76:18:02:f9:32:40:d4:57:38:6d:
                    c4:d8:d5:a1:e4:46:ca:94:bb:69:e6:17:93:fa:9a:
                    61:fe:cd:eb:fb:6e:9d:4d:65:6e:f8:46:af:12:ca:
                    24:2e:2f:29:b4:e6:df:e5:b0:a0:12:2e:74:17:70:
                    6e:7a:c2:62:94:e4:15:06:62:01:70:bc:b1:c1:4c:
                    cb:dd:55:76:85:1c:cd:31:ff:ba:f7:c3:ae:ab:9b:
                    f6:d6:4b:12:3a:e0:b8:df:cc:f5:c9:eb:bb:99:ec:
                    a5:f9:53:cd:7b:37:ac:9e:4b:b0:f9:fd:e8:eb:91:
                    1d:92:06:c4:78:c1:70:dd:5e:e5:c9:87:bb:90:12:
                    45:6b:60:ed:43:13:cb:d1:63:ec:ac:f6:4a:9f:30:
                    29:4d:af:16:69:76:0e:33:90:a2:7e:99:d6:65:4f:
                    35:34:ce:f1:d0:c1:5c:5c:2f:0d:c6:bb:37:d7:ba:
                    97:dc:b1:91:78:cf:08:ec:48:b0:13:98:0d:85:6d:
                    bc:31:7d:81:98:67:c6:88:65:e7:4b:ef:33:43:ef:
                    5b:79:ad:dd:60:df:a7:fb:7b:9e:00:ea:db:f6:7c:
                    9e:e7:5d:b4:61:30:2b:96:3a:a9:ab:4d:30:ba:07:
                    da:e1:1a:d6:72:e9:80:35:4c:88:47:e1:96:a0:b0:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:59:C6:EA:AD:7A:43:1C:AC:C9:B0:8D:41:A9:F9:21:AE:E8:6A:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d7d6f5e-9d87-39dc-aeb7-aa5e808b23fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:5c:b7:fa:59:bd:d7:99:eb:b6:a6:19:89:d2:e3:70:72:fb:
         4b:64:33:be:21:80:7c:9b:88:a4:e0:cb:67:d5:19:ba:81:ca:
         07:06:f9:15:24:e7:02:5e:89:35:76:34:a1:97:99:53:b1:3d:
         f9:f8:bd:d3:b4:59:2f:a5:18:7f:9c:79:8c:77:5a:d2:95:2a:
         71:c4:1b:a6:e2:37:39:50:4f:56:8e:83:50:87:45:0e:2e:26:
         ba:f3:50:83:56:52:c2:2e:04:73:58:3d:da:88:2c:b8:5b:7c:
         a6:a9:4b:29:70:c2:73:7b:20:07:fa:e6:5c:fc:f5:17:24:73:
         52:09:b5:de:24:55:83:af:20:89:f0:cf:bd:7b:da:ba:ca:bf:
         75:22:26:2d:62:2b:c2:49:1e:10:6a:01:15:3f:64:cb:a2:b8:
         43:3f:df:53:4c:7e:07:d9:bc:95:0c:ed:36:5a:e7:66:75:5f:
         92:90:42:12:ed:c1:b4:11:7a:68:6a:7a:62:c0:63:fe:46:e0:
         1f:b3:3a:38:e1:73:99:68:24:58:6f:a2:8d:27:7f:79:2d:83:
         28:99:d2:47:53:2a:c0:87:60:12:6a:6f:b2:10:35:09:ce:da:
         92:3d:74:b1:aa:c0:c8:68:a7:af:59:e6:1e:b9:68:7c:1f:86:
         3c:5a:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:16:27 2026 by rpki-client