Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/be832cd4-4918-33eb-9f9a-2d0d63eb66f2.roa
File:                     be832cd4-4918-33eb-9f9a-2d0d63eb66f2.roa (raw, json)
Hash identifier:          wEjBC/m6JukHsdp+rFMQfAiQH/Hp+WfIgjN8XrA92ho=
Subject key identifier:   DC:1C:36:7F:51:94:B1:7F:9F:16:DC:A4:02:32:CB:94:E9:CB:F1:8B
Certificate issuer:       /CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
Certificate serial:       010D0C9F4328584F8C72F2BB621FF4D33D93439F
Authority key identifier: 0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/be832cd4-4918-33eb-9f9a-2d0d63eb66f2.roa
Signing time:             Mon 19 Oct 2026 01:00:12 +0000
ROA not before:           Mon 19 Oct 2026 01:00:12 +0000
ROA not after:            Sun 17 Jan 2027 02:00:12 +0000
asID:                     32505
IP address blocks:        68.70.237.0/24 maxlen: 24
                          72.14.83.0/24 maxlen: 24
                          72.14.87.0/24 maxlen: 24
                          72.14.88.0/24 maxlen: 24
                          72.14.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8c:72:f2:bb:62:1f:f4:d3:3d:93:43:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
        Validity
            Not Before: Oct 19 01:00:12 2026 GMT
            Not After : Jan 17 02:00:12 2027 GMT
        Subject: CN=44eedcbd-c93c-4a28-97ed-9940456cceb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e3:03:09:91:66:8f:9a:0f:f0:44:7d:58:97:
                    89:01:63:2d:71:55:91:e8:c3:d8:6b:60:d3:e5:b8:
                    43:95:71:de:07:30:25:3e:21:1e:f4:77:46:ce:47:
                    0d:cd:5a:cd:92:a2:0a:e9:4d:65:35:14:8f:26:2b:
                    2c:4d:c6:a1:8f:dc:c0:cd:c5:08:23:ed:ab:76:fe:
                    e3:ec:e1:bd:a4:de:f5:1b:d6:b7:0c:0b:bd:73:a1:
                    50:5a:15:33:a0:ce:14:0b:32:8f:66:8b:38:56:17:
                    24:99:19:82:3e:da:71:a7:fd:88:59:cb:5c:53:44:
                    2b:c4:33:7f:77:ca:49:38:58:04:31:7c:95:f9:ad:
                    cf:3c:f6:0d:23:f1:73:5a:c5:a5:77:41:bb:1b:9d:
                    42:b9:42:0f:f7:3f:a3:9a:07:d5:1d:c0:5c:d7:cc:
                    38:1c:bc:e3:71:dd:26:00:17:69:f2:cf:e5:3b:58:
                    9c:02:dd:03:6b:cf:7c:db:61:80:c1:76:2b:a7:7e:
                    5d:9f:6c:ed:27:ec:7f:a9:4f:b3:4c:ce:7c:58:44:
                    f7:db:b0:f2:0a:40:cd:62:11:61:c9:9b:2e:74:d5:
                    cd:db:27:e5:fc:a4:1b:33:6a:5b:85:08:1e:13:ad:
                    c7:87:b8:80:95:d3:20:c9:3d:46:5a:9f:0d:80:59:
                    70:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1C:36:7F:51:94:B1:7F:9F:16:DC:A4:02:32:CB:94:E9:CB:F1:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/be832cd4-4918-33eb-9f9a-2d0d63eb66f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl

            X509v3 Authority Key Identifier:
                keyid:0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.237.0/24
                  72.14.83.0/24
                  72.14.87.0-72.14.89.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c6:81:a8:91:03:31:43:d1:37:c1:da:1f:e9:1a:cf:98:5e:
         ba:3f:0b:dc:f3:b3:c8:55:4d:ce:23:fa:e6:e3:65:2c:a6:37:
         9a:4a:d1:d3:9b:b5:6a:2e:8e:0a:96:15:4c:0f:c2:c0:a3:f9:
         e9:c4:32:8d:71:1c:20:32:95:0d:9f:6a:a3:1e:fe:82:b1:e1:
         cd:1b:03:a4:b4:e4:81:3d:10:95:68:d6:90:90:fa:68:d1:5a:
         ec:f6:51:6e:81:23:36:f5:9d:c5:69:55:3c:36:a5:14:47:f0:
         11:f2:15:9a:88:96:8f:31:27:a3:3a:42:2c:2e:a2:a1:e5:aa:
         6f:dc:ec:6a:26:29:44:e5:2c:26:04:91:34:aa:7f:8d:f3:de:
         4e:39:e6:c4:f5:f1:05:34:f8:0c:bc:59:e7:9b:89:df:12:1b:
         bf:77:f9:d8:c8:21:0d:3d:89:9c:74:55:d2:a2:a3:2b:c3:25:
         33:c1:1c:4e:9e:19:81:f2:e1:8b:58:d0:77:dc:f5:e0:5e:b9:
         97:23:7f:61:be:20:b0:e6:a3:b9:bb:89:c4:5b:ae:77:b7:ec:
         21:3e:9a:6c:18:e7:c5:fd:d5:fa:d1:13:57:40:09:01:18:51:
         37:cf:b6:13:6a:a7:5e:aa:56:e4:0f:33:07:38:5f:3a:bc:b6:
         11:19:c5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:39:45 2026 by rpki-client