Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/98cc4b93-8674-37a5-881c-444b5c8aef3b.roa
File:                     98cc4b93-8674-37a5-881c-444b5c8aef3b.roa (raw, json)
Hash identifier:          RPbqkZ8VTK7ASDzPH15vMi5Zdby4K/SxNMwC0dcmIcU=
Subject key identifier:   74:C8:19:73:4D:09:BB:92:AE:59:0D:D7:91:AA:89:BD:FB:C7:7A:D3
Certificate issuer:       /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Certificate serial:       010D0C9F4328584EA7871565BC70DD1E865A1580
Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/98cc4b93-8674-37a5-881c-444b5c8aef3b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20326
IP address blocks:        64.130.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:15:65:bc:70:dd:1e:86:5a:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4c8c65cc-15d9-4698-9859-29d33c107b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:67:7b:d9:ba:18:bf:27:aa:bd:1b:45:cf:
                    80:4b:3a:84:85:6b:91:1b:6c:e0:ff:84:26:56:ae:
                    99:8f:bb:e0:6c:51:13:0c:be:c8:47:6f:3a:e3:e3:
                    db:68:17:26:1a:af:17:2f:64:08:30:35:7a:c3:a6:
                    dd:d6:fc:97:a2:8d:fc:5b:09:a0:59:ad:cd:a4:24:
                    1b:db:9d:0f:da:39:6d:51:5b:b2:c9:4c:f6:e3:da:
                    b4:93:0b:15:fe:af:ba:8f:3e:16:a6:35:b8:b6:ef:
                    da:93:ec:77:24:6d:a7:f6:4b:78:e9:ce:4b:39:0e:
                    ee:0c:4e:bb:07:82:37:90:86:e6:69:64:cc:26:d7:
                    83:70:a2:1a:7c:e5:f8:8c:6b:c2:64:7a:a4:0e:a7:
                    95:49:16:bf:aa:c2:6c:b7:48:e5:e9:18:74:70:ec:
                    f9:0d:73:e5:07:56:bd:21:35:7a:0d:da:a4:b4:b3:
                    6b:dd:6b:43:b6:11:8e:64:10:92:54:02:0c:7a:fa:
                    cd:cd:ed:06:af:fc:f8:42:77:a3:95:fe:56:f6:38:
                    40:87:61:19:43:2b:76:97:ac:19:43:78:67:38:6d:
                    a6:3a:eb:fb:05:3c:85:06:97:b5:3d:58:b9:af:f0:
                    f6:8e:81:4a:9f:f7:7d:07:f3:d2:2f:a1:06:d6:53:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C8:19:73:4D:09:BB:92:AE:59:0D:D7:91:AA:89:BD:FB:C7:7A:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/98cc4b93-8674-37a5-881c-444b5c8aef3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:13:aa:5b:7e:51:a9:64:c7:95:f9:d0:68:78:49:9a:e9:8a:
         53:70:5a:25:00:38:bb:90:55:13:e8:96:26:38:fd:2c:e1:d6:
         aa:96:ed:ef:51:13:8b:36:c7:50:eb:3a:f9:70:5b:98:51:ad:
         30:9c:25:f7:50:b9:21:8d:8f:26:38:a9:b8:f2:30:44:75:f8:
         54:92:d2:e2:0c:e8:c4:e3:c6:5c:66:ea:34:e6:7e:87:bf:fd:
         e2:2c:87:93:90:8d:76:22:16:10:da:0e:a9:d7:5e:36:92:75:
         5d:84:28:b6:cd:8f:36:25:0f:02:81:c3:c3:58:9a:09:d0:0e:
         ba:6c:f1:79:4c:1f:70:f8:38:6b:72:ef:79:67:4f:cd:45:f6:
         84:10:78:d3:ed:e2:0d:0a:62:5e:74:a9:19:97:b5:f8:8e:5a:
         b4:86:9b:34:35:c9:29:2f:e4:53:4f:22:c7:88:48:db:59:09:
         a9:41:6b:f3:e6:3f:f7:d0:3c:73:1b:21:92:26:65:3c:f8:2d:
         1b:ad:2a:76:c5:46:56:37:89:9b:93:a5:3b:89:74:14:38:7c:
         95:ea:24:6b:d6:67:d6:2f:18:f8:a6:05:27:21:d9:bf:ef:fb:
         32:02:95:b9:45:4d:64:c8:61:30:86:94:3d:5a:6c:15:bf:25:
         75:69:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:02:25 2026 by rpki-client