Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/62440b64-15b6-3631-8355-c7674813697a.roa
File:                     62440b64-15b6-3631-8355-c7674813697a.roa (raw, json)
Hash identifier:          HiIOh8M4OEnrD/ZRPc9clRfLHnaNG5b9CwEBfFcgHjg=
Subject key identifier:   AF:AD:9D:05:78:99:C1:EF:8D:7A:8B:F1:A9:3A:0A:AB:CE:0C:41:A2
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F4328584F6292CC7B3AD03DEFDBB1A680
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/62440b64-15b6-3631-8355-c7674813697a.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     31898
IP address blocks:        153.84.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:cc:7b:3a:d0:3d:ef:db:b1:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=ffd53472-cd3c-44dc-aee0-0c7039fd3002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:f3:a9:e3:c6:e0:b6:59:b2:11:bd:36:de:
                    ab:fe:2f:67:0a:5b:d2:47:f3:4b:a8:1d:31:bf:e9:
                    7d:04:c4:41:d3:82:d8:5f:31:5b:a4:fd:be:d0:28:
                    4d:69:2b:4b:9b:03:b7:d1:e0:73:56:80:9c:e5:79:
                    3d:b7:a0:26:db:59:3e:58:89:ad:e2:db:06:ae:9c:
                    f6:b6:d9:aa:59:d1:9f:85:25:a5:5f:59:62:f7:9f:
                    01:5a:a3:7d:31:9e:7a:b3:77:84:e7:5a:e3:3e:32:
                    2c:c5:a2:64:63:0e:24:38:68:c1:2a:c2:db:ca:74:
                    bd:20:f0:d8:f8:8a:9d:18:0c:f3:60:04:86:ec:03:
                    37:f9:c8:0e:8b:24:b3:95:0a:ec:01:3d:5f:ae:84:
                    fb:92:97:a3:00:81:8b:a4:38:29:de:9f:97:0f:db:
                    ea:02:81:ed:09:50:18:b9:9d:c9:9e:25:15:3e:28:
                    ed:b3:23:d3:fa:d8:8b:d3:9a:41:f9:02:b8:61:96:
                    31:1b:07:ec:19:6d:7e:27:ff:37:9a:ab:9d:b7:ad:
                    fa:9d:df:fb:b0:f7:bb:e1:e6:af:1b:93:c7:38:1e:
                    19:d1:93:ca:80:d4:71:ac:bb:dd:52:68:79:85:98:
                    58:d7:97:aa:85:b5:dd:2c:d1:ea:d3:c7:39:9c:9b:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AD:9D:05:78:99:C1:EF:8D:7A:8B:F1:A9:3A:0A:AB:CE:0C:41:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/62440b64-15b6-3631-8355-c7674813697a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.84.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:bf:42:ea:d5:d9:24:3a:4d:7c:35:c2:0e:87:a7:2c:c0:7b:
         fb:ad:b0:7f:1f:55:d9:24:95:87:3a:9f:ae:78:ca:ee:a9:19:
         d5:43:ba:31:b5:b4:ce:f5:84:e2:9a:15:2b:93:cc:de:ab:9f:
         41:c3:39:ad:75:70:73:3c:63:b8:5b:ce:3b:44:87:11:9b:e7:
         cb:8d:1c:0b:0c:39:f8:2b:2b:be:87:dd:a4:95:89:7a:93:c0:
         ef:7a:e8:d9:de:bc:15:97:ae:a4:1d:65:28:87:01:2a:bf:ef:
         65:9c:cd:f6:85:1d:cb:51:ee:92:b4:30:d8:6f:c5:91:88:9f:
         a4:dc:8e:af:62:30:e8:c6:ff:da:3f:8b:51:c2:51:7d:d8:c8:
         b3:8d:56:f6:c0:c5:e4:0f:11:c2:b9:9f:9a:81:71:75:e2:77:
         ae:2a:a1:1f:8b:1e:c4:19:eb:cc:be:59:09:77:39:80:b7:94:
         38:95:f3:41:0b:33:68:a7:d1:2b:76:86:98:59:ee:96:9c:3d:
         08:96:62:ef:a7:14:98:1a:2d:ea:9b:1c:37:06:05:6c:44:3c:
         95:00:30:86:ec:52:83:42:b8:d2:b0:87:7f:09:48:43:f2:cb:
         8f:7c:50:a7:ea:8c:41:eb:b9:12:81:ec:4a:d3:9b:fc:8e:fe:
         84:85:11:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:23:03 2026 by rpki-client