Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce92321e-55a2-39eb-9c79-ff8bd19a1091.roa
File:                     ce92321e-55a2-39eb-9c79-ff8bd19a1091.roa (raw, json)
Hash identifier:          K8fvfcTkcw5kba1igBfrONrTvwESbZiTJINdWhZZm1k=
Subject key identifier:   FE:9D:3C:0E:BE:99:C7:7B:F1:F4:FB:7C:72:E3:C6:7E:66:8D:13:89
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584ED550B80EA1C379EEA34B7780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce92321e-55a2-39eb-9c79-ff8bd19a1091.roa
Signing time:             Fri 14 Aug 2026 10:38:20 +0000
ROA not before:           Fri 14 Aug 2026 10:38:20 +0000
ROA not after:            Thu 12 Nov 2026 11:38:20 +0000
asID:                     6079
IP address blocks:        65.86.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d5:50:b8:0e:a1:c3:79:ee:a3:4b:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 14 10:38:20 2026 GMT
            Not After : Nov 12 11:38:20 2026 GMT
        Subject: CN=b0904a99-7fd9-4a50-9a1a-4f3bc00a1e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:04:e4:17:a5:86:a7:43:25:3e:b1:c7:12:
                    39:48:d5:11:3d:11:a0:1c:3b:85:e5:84:d7:a1:01:
                    a8:36:b4:a4:f6:2d:2d:1c:02:ff:0c:c5:b3:27:0e:
                    77:23:e7:fc:56:eb:80:52:87:b9:64:62:b8:6f:fb:
                    3b:48:09:7b:ca:9c:cd:1c:75:89:d7:e1:ad:e6:73:
                    d3:55:e7:e1:fe:3e:43:e0:6d:d5:b8:dc:24:95:d0:
                    9e:b3:73:f8:0e:37:c8:3b:10:d7:0c:c5:c9:27:e0:
                    c8:d0:be:ce:bc:80:26:89:46:f8:78:c3:22:1b:51:
                    21:91:85:01:3b:9a:c5:c0:ab:51:95:b5:60:8e:17:
                    60:54:ed:a9:b1:af:7b:f4:fb:8f:86:0a:0e:a2:47:
                    cf:78:13:62:00:fb:23:27:a2:a7:3c:9e:9a:f3:ef:
                    8e:13:62:46:f1:70:b1:6f:e7:b3:be:c3:f9:3b:62:
                    ce:d6:7b:26:8a:35:1f:a5:cd:8e:22:cf:6b:90:df:
                    9e:78:21:d1:91:6b:b7:8f:3f:5e:95:16:31:80:ae:
                    8f:9b:db:53:10:7a:ef:a8:05:93:89:33:62:84:7b:
                    ec:f8:b9:75:95:45:ae:d9:98:ed:ff:98:a6:36:dc:
                    b8:2a:b8:6d:2c:da:5b:0c:ac:32:48:d6:93:fd:69:
                    14:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9D:3C:0E:BE:99:C7:7B:F1:F4:FB:7C:72:E3:C6:7E:66:8D:13:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce92321e-55a2-39eb-9c79-ff8bd19a1091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:07:03:21:2f:f2:d3:61:a1:05:f8:a6:ce:80:14:73:24:40:
         87:1e:28:f0:33:df:9c:ca:a0:9e:ef:4e:9b:81:07:47:f7:11:
         52:91:34:46:c0:a3:96:04:38:6e:ac:85:0a:09:1b:3b:99:97:
         62:82:8f:43:04:5f:f2:23:23:26:27:f4:5b:75:91:75:25:d1:
         7a:6d:19:07:fd:8d:9e:3a:1e:0a:5a:ce:fc:de:bd:5b:b7:1a:
         29:5b:83:4e:79:e6:00:e5:9c:60:df:47:f4:af:ef:f7:a9:36:
         0b:61:31:64:80:3b:9b:c5:55:8a:a3:13:c7:25:10:40:3d:5c:
         09:6e:62:b1:e2:b0:43:fb:ba:19:ed:94:77:40:aa:82:48:75:
         28:a8:e6:e4:8b:1e:7a:02:a0:1f:92:08:7c:d6:76:80:c3:16:
         b9:ba:8d:e5:b8:9d:0c:de:c0:46:26:39:71:b2:fe:b7:e3:a1:
         db:7a:28:92:65:02:b8:f5:09:70:61:ba:d3:55:85:5f:db:86:
         f4:89:a6:b0:d7:5b:cd:eb:98:54:9f:3e:4a:f6:13:35:63:de:
         8a:e3:77:57:45:56:22:ab:e1:eb:4b:23:62:2a:c9:17:18:06:
         fd:5d:56:0d:e6:28:e6:e6:90:28:cf:0b:65:52:7b:87:1e:a9:
         c5:92:c1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:27:40 2026 by rpki-client