Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/1924c5e3-fe29-3974-b342-23ed1087bc47.roa
File:                     1924c5e3-fe29-3974-b342-23ed1087bc47.roa (raw, json)
Hash identifier:          aKzMN1MdpAmKHfKEv/EIB2FioAbLRg/tkFb/nY/N2Dg=
Subject key identifier:   6C:1F:3B:81:90:EC:60:30:3A:20:69:67:E7:78:E1:6D:AF:FA:9B:A4
Certificate issuer:       /CN=0a609de0-040f-42a5-990f-417b65a086a6
Certificate serial:       010D0C9F4328584F7BB30D2F0B2743AF22CF8B00
Authority key identifier: F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/1924c5e3-fe29-3974-b342-23ed1087bc47.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     20347
IP address blocks:        66.22.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b3:0d:2f:0b:27:43:af:22:cf:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a609de0-040f-42a5-990f-417b65a086a6
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=c03f58da-e38c-47d9-a46f-c8dc619bd607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:75:50:2c:1e:64:06:f0:84:d3:ab:5e:26:
                    ca:fa:f4:bc:05:ae:0d:f8:78:8d:49:16:d1:7b:13:
                    40:e4:25:a3:86:07:64:fd:f9:16:05:ca:c3:9e:32:
                    bd:cf:6d:d5:49:c3:89:9c:ae:ba:60:63:5e:b4:97:
                    ac:64:f8:3d:93:84:30:07:1f:96:50:42:57:27:a2:
                    e5:2a:d6:ee:96:4b:c6:28:4f:78:cf:21:ec:b7:85:
                    3e:38:99:dc:59:f5:b0:13:ea:4c:81:91:41:c8:d3:
                    bf:be:e8:8a:54:91:d1:74:74:d5:da:80:03:fe:d2:
                    4e:db:d0:55:da:8c:26:9e:c0:aa:d6:ea:5b:05:26:
                    51:62:f7:d7:f1:79:a2:71:6d:85:6d:93:25:06:9c:
                    02:42:ca:b9:f8:56:d0:6e:f1:bc:03:4a:09:7f:ce:
                    ef:52:21:5f:6e:ec:6f:fb:aa:3f:93:9d:4e:0c:fd:
                    c3:26:ff:75:ae:4e:7d:61:bb:42:8d:6e:99:f6:49:
                    83:09:13:74:0d:53:02:9e:86:8f:8e:db:97:cb:2f:
                    6b:cd:ac:35:9c:00:e7:45:b9:0b:1a:24:4b:b4:fb:
                    22:79:8a:bf:87:83:e2:ea:4c:aa:3f:5f:d4:18:05:
                    01:ba:65:5e:c2:03:d8:b7:53:60:7f:b1:f0:56:a7:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1F:3B:81:90:EC:60:30:3A:20:69:67:E7:78:E1:6D:AF:FA:9B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/1924c5e3-fe29-3974-b342-23ed1087bc47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl

            X509v3 Authority Key Identifier:
                keyid:F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8d:3a:34:fb:c9:60:0f:73:1a:b2:f5:ad:c7:be:23:5f:51:
         bb:44:19:6c:7d:6e:92:f6:17:07:43:00:af:45:41:19:dd:5b:
         a0:d7:a7:d3:94:e3:ee:e0:b9:7c:ec:73:80:2a:de:3a:00:f2:
         70:62:d8:7b:4b:86:4c:66:80:bf:45:57:27:22:c3:9b:f5:dd:
         5b:db:c6:b4:85:db:09:76:21:09:b4:4e:3e:07:a2:a2:55:a0:
         ec:fc:81:0e:43:9c:eb:82:ca:99:b7:66:ae:5d:5e:99:36:52:
         45:96:43:e4:09:25:4d:35:ca:fa:e9:32:5a:70:06:c4:46:74:
         e3:69:71:62:fc:f3:7c:0c:4a:43:e8:43:6c:4a:cb:ad:de:c7:
         da:28:3e:3b:fc:5d:57:8f:12:5e:e8:e9:b6:09:0c:b9:73:85:
         68:fb:31:c7:36:01:8e:14:37:92:5f:14:a3:76:ee:1f:17:f2:
         fc:2b:b7:f1:99:43:05:a7:67:b1:fe:38:ce:6a:75:36:3b:9a:
         d5:1e:5f:b9:6b:6d:56:fc:16:4c:bb:99:4b:f7:13:e3:8c:2e:
         b0:ea:c6:a1:f0:89:fc:d6:70:23:35:51:23:b9:86:c1:c4:90:
         d5:8c:a1:f7:3f:50:dc:fa:ba:62:dd:ee:62:8e:1c:57:7d:67:
         d9:b7:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:07:42 2026 by rpki-client