Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8cab5414-f464-3486-b1b9-cc43e86e830d.roa
File:                     8cab5414-f464-3486-b1b9-cc43e86e830d.roa (raw, json)
Hash identifier:          /GxqUWzv8Yv2e9AbLYE4dmFSJ3iOZ/zPgMet5jc3ivU=
Subject key identifier:   D7:8A:65:AA:08:AC:15:54:C4:73:0C:C0:98:C9:B1:91:0E:CA:40:54
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584F30528CADEAD84D1FD1618440
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8cab5414-f464-3486-b1b9-cc43e86e830d.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        66.193.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:8c:ad:ea:d8:4d:1f:d1:61:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=fe63e330-296f-4ec1-8d7f-88c2d5756258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:84:8d:72:3a:b9:10:60:c3:70:74:e4:8e:87:
                    e5:e7:0f:57:2b:6c:19:83:64:47:18:68:10:8c:16:
                    e2:07:9d:cf:8e:11:de:93:cf:1a:c0:1b:5c:6f:c4:
                    88:90:61:89:8e:d1:3a:04:98:8d:f0:3f:e6:84:cf:
                    f7:6b:63:e8:bd:aa:4f:49:08:0c:83:6a:c4:2a:ee:
                    c0:de:05:6e:97:1f:40:99:06:75:f0:16:31:85:20:
                    cf:99:fa:40:f8:f8:93:a6:34:d1:57:3e:6c:ef:ed:
                    f5:02:ab:4b:fb:c1:77:0c:6b:95:2b:50:3a:7c:23:
                    f4:cf:a2:66:0f:c7:e8:74:f3:1e:d4:1e:c8:25:10:
                    50:c3:96:84:8f:2b:2a:90:37:16:fb:43:67:72:76:
                    93:8c:5d:e7:30:cd:76:ae:64:38:9f:a8:2c:5f:a3:
                    8a:bf:c6:82:9b:08:cd:76:59:1a:9e:c7:12:77:eb:
                    24:cf:ac:80:3b:eb:17:62:61:c6:f6:0e:ea:03:69:
                    22:ad:07:c5:de:80:d5:58:7c:bf:9d:e3:d8:50:16:
                    9d:b7:ff:b6:c7:67:5a:4f:8d:24:15:5a:f9:33:34:
                    25:23:ca:bf:ac:30:8c:52:04:96:70:45:39:52:e9:
                    c0:33:07:e1:af:a6:48:95:f9:23:a6:2d:f4:84:32:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8A:65:AA:08:AC:15:54:C4:73:0C:C0:98:C9:B1:91:0E:CA:40:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8cab5414-f464-3486-b1b9-cc43e86e830d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.193.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:47:06:76:d7:18:e5:2a:e9:c3:63:6f:fe:60:6e:79:67:50:
         8b:a6:dc:d6:20:c2:62:8c:07:65:9c:52:42:a1:36:ef:bc:23:
         94:ac:41:8f:8c:67:0a:94:07:12:b7:fb:e3:ad:13:d2:19:8e:
         b6:1f:56:22:ea:5d:d4:4f:f2:de:43:7b:ff:95:37:11:07:f5:
         df:45:7a:56:89:2a:eb:5a:40:2e:e5:77:05:c9:c7:d4:f7:79:
         6a:56:a5:a1:0f:75:ea:de:93:84:01:e3:c8:7f:af:9c:54:c3:
         bb:04:60:8c:44:56:ea:2f:fb:b1:f2:da:2e:e7:db:f1:48:76:
         e2:22:6f:88:c3:01:ea:d5:5c:e8:f3:27:ce:5b:e2:58:b7:de:
         a0:06:20:ea:e0:1e:a6:97:00:66:b3:7e:69:e1:1a:38:dd:a7:
         26:de:d4:43:ed:25:57:89:9b:97:c0:80:91:57:9c:ae:8a:39:
         ea:e0:ec:ee:86:53:6b:f7:db:8b:88:f3:12:0f:c3:20:83:ad:
         ee:1f:8a:ee:81:a6:ec:18:9e:ab:01:10:5d:fa:5e:f3:02:3c:
         09:5c:e0:e8:45:1a:38:d5:85:12:d7:71:3f:cc:05:0b:f2:61:
         be:2b:d2:d8:48:d3:b8:6d:57:72:02:7a:e3:b6:7b:c7:56:41:
         f9:38:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:37:39 2026 by rpki-client