Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa
File:                     c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa (raw, json)
Hash identifier:          48P8+2UhL7StA6CHdEFHdUV3AJdXP1zI8oCTTkmnkkk=
Subject key identifier:   31:51:68:12:E7:E6:54:EC:E2:D8:5D:EA:4C:74:01:57:91:5E:2B:19
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584F698D81B522D77EF6ADA4E380
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        65.37.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:81:b5:22:d7:7e:f6:ad:a4:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=d0c2d024-5b58-47e1-b419-7f5506752f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:16:10:fd:fa:bf:47:f3:42:06:73:de:b3:49:
                    f4:d7:9b:27:43:f7:02:39:a9:2f:bc:48:14:69:d6:
                    0e:0c:9e:1b:d3:1d:cd:18:86:a4:a6:61:b0:a0:bd:
                    6a:c9:99:85:6d:0f:96:60:bc:9c:25:2f:f7:7d:ca:
                    c4:71:fe:53:2b:18:2a:10:13:2d:23:f5:fe:1f:50:
                    b5:78:7d:fe:f1:c9:1a:5e:c4:cf:38:4f:2b:d5:6d:
                    9d:f1:d3:9d:e5:12:ce:8e:2c:b9:1c:de:f9:bd:62:
                    8d:f5:b6:fa:98:41:94:0d:88:69:4e:4e:9b:45:80:
                    e4:22:99:81:db:35:ef:36:07:e5:a2:4d:b6:78:e7:
                    0b:a3:ec:e1:04:74:78:ff:82:05:03:e7:66:97:47:
                    3f:f3:d2:28:71:4a:6a:e7:fd:ec:ca:fc:4f:02:76:
                    c2:ee:75:a6:0a:22:26:93:2f:e8:c1:08:ae:44:f8:
                    32:67:29:07:56:87:77:52:ac:81:79:b0:a3:e1:22:
                    01:27:88:8b:5d:af:c4:28:6f:65:c0:d1:8f:c3:12:
                    1e:a6:88:fd:23:dd:64:19:46:c9:5e:2c:06:52:59:
                    7f:e3:14:d1:ca:04:6b:da:5f:0d:75:94:dd:bf:ae:
                    75:89:f4:6a:55:d1:ac:5a:18:2d:24:f1:c6:45:9f:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:51:68:12:E7:E6:54:EC:E2:D8:5D:EA:4C:74:01:57:91:5E:2B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:60:26:8b:6c:29:3c:e0:a8:b4:26:70:f5:d3:e3:fe:ca:de:
         36:dd:62:a8:79:3e:0c:84:fe:21:bc:61:c1:c3:60:21:c6:d9:
         46:61:a8:ee:0f:1a:67:2f:58:ef:cf:8f:50:32:25:12:4a:21:
         da:47:19:c2:08:45:9b:ec:a0:99:0d:3b:e9:f9:72:2f:3a:c4:
         e4:ee:ea:a9:12:d9:20:83:1c:66:2f:d9:84:de:9e:0d:45:e8:
         cd:83:28:50:d9:b0:cc:6c:5c:8b:8f:b6:e1:cb:9f:fe:35:61:
         18:89:82:fa:ef:f7:ce:f1:38:b6:93:fc:50:f0:fe:a6:53:25:
         d4:3d:ad:c3:4d:12:8a:b7:f5:82:1c:16:c5:33:89:c1:e8:df:
         f8:4e:b3:cd:c5:01:62:35:fd:58:9e:24:72:f9:1c:5f:7d:cc:
         38:7a:84:29:2a:6c:7c:37:1c:b8:9f:39:c1:1c:d7:a3:6b:36:
         62:58:a9:53:6d:ef:8f:9f:b3:ef:b8:b1:d3:4f:0e:e2:23:d9:
         01:b2:ef:32:df:3c:69:20:50:53:fc:28:76:f8:05:ad:6c:35:
         cb:43:f7:61:48:0b:15:38:5a:33:21:32:79:ec:19:e4:e3:2a:
         98:de:35:fc:2b:15:4a:85:10:87:d6:33:83:8d:6a:aa:e9:b2:
         33:ff:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 18:39:10 2026 by rpki-client