Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/8b28b875-8e4a-3a37-91e1-d21e2482c4cd.roa
File:                     8b28b875-8e4a-3a37-91e1-d21e2482c4cd.roa (raw, json)
Hash identifier:          /g36ZNiL6kPMdiwzMRmaef3vxH2/qUhOfRJ8rtMZtYM=
Subject key identifier:   5E:36:8E:97:6C:03:16:D2:79:98:16:13:56:9F:C3:DC:F6:0C:C6:B7
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584F46A7D9AFF4A642F7CC9A8700
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/8b28b875-8e4a-3a37-91e1-d21e2482c4cd.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        66.96.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:d9:af:f4:a6:42:f7:cc:9a:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=3a9af0f0-2f97-40fe-9ca3-ad2355a37f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ca:49:b8:19:50:83:86:d3:82:17:28:e6:6d:
                    64:bc:77:56:b0:0c:99:b4:59:e8:eb:34:03:fd:25:
                    32:5b:ca:2d:4b:57:97:18:aa:38:1d:4f:d6:12:31:
                    52:7e:7b:2a:ab:73:9e:92:9f:6c:d0:9a:01:1c:2f:
                    37:21:dc:66:9d:98:9c:66:9b:16:f0:99:e6:af:ca:
                    a4:f8:63:22:aa:d4:42:7f:d1:d8:6f:fa:bb:07:18:
                    5d:e6:32:20:35:86:0a:48:bd:d8:54:60:4d:c7:ee:
                    66:1a:d7:dc:3e:07:a8:36:a9:fd:b1:e1:65:73:44:
                    77:27:10:4a:25:3d:8a:00:f1:dd:63:86:73:63:dc:
                    8c:34:c6:52:7f:7b:5c:0b:3e:e1:6a:ce:89:64:3e:
                    d7:0e:f6:74:46:9a:a6:a4:d8:d6:15:87:ca:f4:40:
                    4e:05:82:4b:01:71:69:c6:cc:7b:c2:e0:57:32:48:
                    b0:be:09:20:8b:9c:7d:87:e3:29:49:92:e3:88:c3:
                    22:44:8c:2a:d7:71:ae:b4:a0:5c:8b:30:4e:e9:ed:
                    9d:73:c8:07:99:04:08:fb:38:93:30:2e:98:68:ed:
                    3a:6a:cf:a0:10:84:a7:c6:1e:8a:51:21:54:75:5f:
                    e3:4c:c5:9e:fb:5b:2c:95:61:42:01:0a:b4:98:e6:
                    1c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:36:8E:97:6C:03:16:D2:79:98:16:13:56:9F:C3:DC:F6:0C:C6:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/8b28b875-8e4a-3a37-91e1-d21e2482c4cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ea:c6:da:75:35:d0:f0:e1:26:3d:2a:c8:d9:9c:c8:50:df:
         4f:d5:6c:a0:f5:22:01:12:bf:54:67:c4:f1:58:3b:42:5c:ba:
         ac:30:a8:04:0e:9a:a1:47:0f:6c:82:c3:89:5d:06:5e:e3:26:
         11:a2:b6:12:a7:6a:e5:4e:f6:05:59:5f:57:5d:3c:8f:97:07:
         9f:37:b8:66:29:8e:1e:4d:e7:26:c8:ce:11:f0:31:c5:84:1d:
         6e:3c:9f:9d:be:cf:9d:43:f7:88:ee:b1:fe:2d:7a:cf:70:b3:
         53:b9:a1:9d:a5:86:ef:c8:72:b9:1d:ec:f5:a4:89:38:85:80:
         e3:2d:5b:24:20:34:3d:8b:f8:52:05:e1:ff:f4:33:da:a5:23:
         23:49:04:d5:d5:f3:0e:cd:3d:f3:d9:7c:f7:e6:0c:81:63:d2:
         0c:ae:0b:54:7d:83:a8:13:45:b2:f8:a3:e8:1d:f5:f2:cd:1f:
         09:c3:31:ef:49:c8:75:f6:70:09:7e:66:b7:3c:94:98:46:75:
         d0:8d:58:a9:42:be:5d:0c:00:9b:c1:df:c2:fa:90:3f:e8:12:
         2b:45:22:57:e0:05:85:d1:cc:26:1c:6a:56:47:e0:9d:2e:95:
         00:25:be:f6:3c:dd:25:dd:e9:f8:0f:7f:9c:a4:53:61:6a:87:
         3e:a2:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:22:49 2026 by rpki-client