Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa
File:                     3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa (raw, json)
Hash identifier:          uUhxxNxF6zjRO+anSDAs2xXsU/oo+jm8AKqtTUwA5uY=
Subject key identifier:   66:E9:1B:0F:BF:F4:B0:0D:B0:95:D0:C1:6A:80:D6:76:19:0B:54:45
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F4328584E7E94F998904A8E92C6A63D40
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     26914
IP address blocks:        166.93.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f9:98:90:4a:8e:92:c6:a6:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=50291fcf-41ba-4df9-8eea-bceb5e0ea5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bd:c7:82:15:7e:9e:db:b7:ae:13:f0:bc:4d:
                    cd:46:e7:d0:53:7a:8d:c8:77:b1:25:d7:67:25:82:
                    0d:30:bf:3f:0c:8d:7b:db:f1:00:e2:c3:64:b0:0c:
                    58:cd:ff:41:31:17:91:7b:0b:ec:23:4e:2a:7a:b3:
                    95:fd:08:ef:d0:43:6e:b5:43:94:0c:2c:e8:29:16:
                    d2:9a:28:dc:f0:d3:15:ef:64:9d:9a:a0:cc:53:34:
                    46:d7:10:e7:20:e9:49:2f:97:2b:b8:2c:0f:dc:05:
                    84:12:04:6d:d0:3c:24:6b:21:b3:f1:9d:fa:ac:91:
                    f2:c1:bc:5e:af:01:af:dc:1e:51:5d:84:42:76:c8:
                    78:6a:fd:2b:db:51:f7:99:53:d4:dc:21:be:a6:57:
                    ae:5e:51:93:fc:3d:aa:51:7a:43:02:ac:9b:51:9d:
                    d7:1c:16:84:cd:05:8b:c5:29:d1:fc:b0:41:e9:45:
                    b6:e6:7b:68:03:bc:ee:e7:89:6a:3a:ae:d7:aa:a4:
                    dc:79:f9:15:ad:45:e4:df:cd:33:08:dc:da:a4:eb:
                    90:b0:49:12:3f:2b:7a:71:cf:25:03:7c:ae:5e:06:
                    13:15:fb:87:1d:a0:68:44:17:11:fa:95:d3:88:1c:
                    31:13:48:0e:df:af:b0:2a:16:19:98:aa:12:37:1d:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E9:1B:0F:BF:F4:B0:0D:B0:95:D0:C1:6A:80:D6:76:19:0B:54:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.93.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f0:02:bc:69:44:a4:00:69:3f:b9:54:7f:ae:c6:c1:00:97:
         f6:15:1f:8d:36:bf:d3:ed:e5:96:43:cd:7e:87:24:46:94:e8:
         b8:05:cb:1a:06:ad:05:2b:78:62:54:b0:2b:69:00:4d:48:a9:
         8f:18:cd:b9:1b:c6:1b:c5:6f:4c:cb:21:47:5d:a9:2e:0a:71:
         cd:f0:0d:4e:55:bb:7e:ea:96:e6:f3:dd:93:33:6e:f5:ff:1e:
         53:e5:67:4c:5b:bc:ca:ea:9f:f7:4f:cd:7c:89:0e:b5:85:78:
         0f:3c:c2:02:8f:14:a5:49:0f:a2:e7:24:a2:95:0f:b3:c4:ed:
         2f:d0:eb:9a:d6:c2:94:44:90:2d:27:8d:5d:1d:de:02:16:59:
         12:60:cd:b6:3b:f2:07:ad:9e:14:fc:da:18:69:3e:d5:dd:55:
         6d:fc:1d:dc:09:e3:61:23:96:fe:2a:f5:b0:e8:eb:93:ba:c1:
         59:bb:f5:af:fc:78:58:8a:7f:53:8c:e2:23:23:1d:65:73:a8:
         46:46:e5:86:1c:1c:13:df:ae:d0:0e:14:ce:21:02:fa:47:a2:
         d7:28:a3:4a:e3:bd:f6:6c:2f:8e:e6:ac:ec:53:9a:69:a5:c0:
         25:0c:e1:d7:10:10:40:25:99:45:94:42:da:38:c7:91:12:43:
         ec:3e:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:31 2026 by rpki-client