Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa
File:                     ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa (raw, json)
Hash identifier:          OkmhKtBBOpnohP8j6uTycbENp4LQM8ur5AvU1lywxA4=
Subject key identifier:   A1:DB:93:47:48:D7:54:F1:EA:8E:09:3E:43:43:87:98:76:F6:0F:28
Certificate issuer:       /CN=963d4056-3f23-44ec-b1f1-7cd94eb68a9d
Certificate serial:       010D0C9F4328584F024218158EFA11F3D4E75CC0
Authority key identifier: C3:0E:F9:11:90:2F:AD:35:85:5D:50:D3:51:35:00:EC:1F:0F:4D:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     979
IP address blocks:        72.172.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:18:15:8e:fa:11:f3:d4:e7:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963d4056-3f23-44ec-b1f1-7cd94eb68a9d
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=d273748c-61a6-4f84-ba45-272e0c390909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:04:71:1d:57:69:a4:bf:5a:89:0d:e0:cc:e6:
                    06:41:44:6f:b7:f6:29:1e:ad:f7:96:3a:ea:a5:00:
                    97:e2:a1:6d:fb:07:df:06:56:72:76:a8:3f:df:ad:
                    a9:50:53:78:bb:18:2d:84:91:a5:54:bc:1f:1a:02:
                    71:be:19:9f:3f:bd:72:99:39:a7:67:b6:98:58:37:
                    96:f5:07:10:cf:73:8c:2f:1b:cb:6f:f6:a7:45:ae:
                    cd:1b:9b:2e:6f:c9:4c:43:40:1c:04:75:96:07:bd:
                    7c:f1:f5:82:cc:d5:05:ac:a0:77:e8:d5:67:20:66:
                    b0:ec:34:21:bf:27:dc:13:4d:42:2b:e9:a2:c5:45:
                    a9:1c:0e:7f:e0:d2:a7:48:fe:9b:ee:0a:7c:14:16:
                    a7:58:4a:d6:3b:51:fd:33:35:8c:f7:02:c7:9e:4d:
                    2e:10:ad:9f:df:1f:c5:9b:71:16:66:d5:7f:2b:98:
                    fd:9f:53:9a:93:97:b4:20:90:85:77:36:50:18:5c:
                    fb:93:f3:50:5e:f7:8b:0c:f8:9f:d7:6e:cf:98:2e:
                    36:6d:6c:73:f7:4d:05:8c:f4:75:a9:86:6b:bc:47:
                    0a:7c:a4:7b:4c:5c:26:98:ed:66:bc:4d:72:2a:c5:
                    a0:a6:ec:74:00:6a:49:a1:a1:52:09:af:bc:a4:a6:
                    a3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DB:93:47:48:D7:54:F1:EA:8E:09:3E:43:43:87:98:76:F6:0F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0E:F9:11:90:2F:AD:35:85:5D:50:D3:51:35:00:EC:1F:0F:4D:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.172.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:87:f0:1b:1b:88:e4:c0:71:0d:98:29:c1:b5:22:ff:ad:1e:
         1c:93:bc:71:41:6f:9a:67:cd:4a:0a:35:96:21:a3:e2:64:e5:
         a3:98:e6:59:d1:86:86:4c:fd:c5:7e:1d:fa:eb:87:b7:fd:6f:
         5f:10:c5:e2:05:c0:a2:3f:a7:b6:c1:79:4c:53:d6:9b:55:46:
         a4:91:20:93:6e:0a:c4:79:d1:67:ba:0f:58:ca:bd:85:ed:39:
         28:9c:4f:dd:d4:35:0c:9b:91:fc:dd:ae:de:44:97:c7:9b:7b:
         d5:b3:6d:8b:5f:be:f2:90:2e:6f:78:b7:f6:80:f9:ea:0f:51:
         2c:a4:3e:93:44:32:fe:2f:d2:c6:a2:c5:39:cd:ae:40:28:34:
         c6:03:e6:19:82:59:e7:4a:e7:36:cd:98:9d:be:88:7a:5f:f7:
         90:18:b1:35:30:83:40:9d:6c:4e:34:4e:b2:a9:38:50:6e:bd:
         44:cd:4f:a9:0d:21:85:0f:4a:3f:da:3e:5a:f8:7d:af:a6:2b:
         eb:fd:c2:a5:05:b2:50:b1:5c:0f:3e:c1:77:aa:c1:2f:b5:f4:
         0d:81:61:10:da:c3:b4:cc:ad:9e:1d:dd:5a:43:d7:5f:50:9c:
         85:e8:67:7c:ee:83:d3:43:cd:b5:bb:32:e0:f2:26:fe:c7:7b:
         00:32:06:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:17 2026 by rpki-client