Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/105d4a65-3ccd-416d-b5e4-90c31e99f3c8/53dd0e97-71e6-30fe-8244-757ce68cac26.roa
File:                     53dd0e97-71e6-30fe-8244-757ce68cac26.roa (raw, json)
Hash identifier:          sluzqTa5WYQpJyncBXMA/nv6kWqUzTpKd7rmew7rFtU=
Subject key identifier:   17:E1:D2:64:A8:9D:E0:21:30:48:50:E6:A0:58:6D:E8:F2:46:6B:4A
Certificate issuer:       /CN=105d4a65-3ccd-416d-b5e4-90c31e99f3c8
Certificate serial:       010D0C9F4328584F4974BCE78A393B9905A2A640
Authority key identifier: 34:D0:64:34:0E:E8:43:D1:E4:11:4A:11:00:1A:A2:7A:08:90:DD:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/105d4a65-3ccd-416d-b5e4-90c31e99f3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/105d4a65-3ccd-416d-b5e4-90c31e99f3c8/53dd0e97-71e6-30fe-8244-757ce68cac26.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     25853
IP address blocks:        65.7.128.0/17 maxlen: 24
                          66.44.192.0/19 maxlen: 24
                          72.18.96.0/20 maxlen: 24
                          2604:c380::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/105d4a65-3ccd-416d-b5e4-90c31e99f3c8/105d4a65-3ccd-416d-b5e4-90c31e99f3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/105d4a65-3ccd-416d-b5e4-90c31e99f3c8/105d4a65-3ccd-416d-b5e4-90c31e99f3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/105d4a65-3ccd-416d-b5e4-90c31e99f3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:bc:e7:8a:39:3b:99:05:a2:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=105d4a65-3ccd-416d-b5e4-90c31e99f3c8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c7067f44-bf1b-48df-bacf-6a427141ee0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:96:c8:f9:50:47:d4:d2:d3:50:fd:b3:0d:
                    79:fa:70:b8:84:68:65:af:87:2b:51:cf:ea:b8:1f:
                    dc:94:bf:db:18:ed:1f:5f:dd:ed:ef:fe:9f:08:7f:
                    a8:43:de:04:93:9f:92:66:c2:dc:c5:da:63:8d:04:
                    0f:8e:35:c3:9c:7d:f1:52:df:4b:f2:c6:bd:88:63:
                    66:6a:60:a0:99:27:3a:54:55:ca:df:0e:b0:8f:53:
                    24:3b:67:28:12:82:c1:74:89:fc:76:f3:cb:75:79:
                    0f:41:1e:da:5b:fa:86:bf:2a:6c:5e:3a:ab:97:b5:
                    f7:7f:0b:b5:6a:59:8d:4a:1b:79:0c:e3:0e:2d:a0:
                    27:8e:7f:f4:58:c7:8f:f6:d1:0c:da:8a:be:db:04:
                    a8:90:b8:b2:32:e0:1a:3a:54:06:cc:bb:88:82:d5:
                    c4:5c:48:06:cd:62:04:a4:65:42:12:50:1e:8e:ea:
                    8b:33:83:0a:3f:67:31:81:8f:cc:3f:dd:bb:a1:2c:
                    36:6e:58:9e:c6:20:54:c1:6f:0f:ad:72:a9:30:49:
                    67:0f:08:83:98:7e:86:2a:ab:c1:ae:d3:fe:a4:e0:
                    02:ef:c3:d4:d2:66:4b:e0:00:c8:64:56:a8:b8:35:
                    5e:39:6c:41:5e:51:71:04:93:2e:ff:a0:12:59:01:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E1:D2:64:A8:9D:E0:21:30:48:50:E6:A0:58:6D:E8:F2:46:6B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/105d4a65-3ccd-416d-b5e4-90c31e99f3c8/53dd0e97-71e6-30fe-8244-757ce68cac26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/105d4a65-3ccd-416d-b5e4-90c31e99f3c8/105d4a65-3ccd-416d-b5e4-90c31e99f3c8.crl

            X509v3 Authority Key Identifier:
                keyid:34:D0:64:34:0E:E8:43:D1:E4:11:4A:11:00:1A:A2:7A:08:90:DD:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/105d4a65-3ccd-416d-b5e4-90c31e99f3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.7.128.0/17
                  66.44.192.0/19
                  72.18.96.0/20
                IPv6:
                  2604:c380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:61:00:fc:5f:fa:1c:a7:e9:16:d9:de:9b:89:dd:ab:23:b0:
         9b:88:0c:9e:da:7c:ad:c4:33:24:90:20:98:3d:d4:c4:52:85:
         d9:c4:bb:3c:53:74:df:8f:ee:30:a3:56:8a:cd:78:02:cd:d5:
         82:8e:6b:12:af:ea:e3:54:79:97:c2:43:8a:c5:c4:8d:37:1a:
         a2:5a:7b:2d:e0:f7:53:e3:6c:2a:fe:2c:6e:b9:49:5a:31:d0:
         c1:58:41:35:82:f9:6c:dc:9a:4b:81:9e:a7:f3:1e:c9:36:15:
         f3:aa:e1:d9:86:5d:64:ff:94:b3:58:16:77:01:93:eb:2a:66:
         c1:19:47:71:ef:d0:e4:b5:b2:4b:f3:d9:be:79:fb:bc:75:a9:
         ca:2c:29:e2:42:4f:0e:20:ca:82:c5:d1:e3:28:29:f5:3e:1a:
         76:b8:5d:c0:aa:cd:8e:f9:16:5a:02:6f:85:80:a0:91:77:82:
         e1:c9:81:e8:ff:07:2e:b2:0c:87:25:bb:8f:f5:6f:71:91:56:
         ee:b8:e4:4a:a1:09:8c:0c:be:ac:03:0e:a0:f4:2b:a4:92:6d:
         80:b5:8c:9c:ef:dd:26:54:aa:4a:a7:c9:50:84:72:d4:4e:11:
         e8:c6:31:e2:64:5d:83:ad:43:42:1f:be:54:97:eb:77:85:c1:
         fc:e2:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:14:54 2026 by rpki-client