Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2fcc13d-453e-305d-8287-681db63e6def.roa
File:                     e2fcc13d-453e-305d-8287-681db63e6def.roa (raw, json)
Hash identifier:          J9sdSBfzZ0jxqXJYfaWFDVh8eyMtHnCMxQ9jEHawEt0=
Subject key identifier:   8F:4F:E1:CA:6C:10:1F:35:F7:9B:77:FB:63:CF:D0:A0:56:2F:7A:B7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F331D1267DC3B76B23D765C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2fcc13d-453e-305d-8287-681db63e6def.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     26643
IP address blocks:        199.58.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:12:67:dc:3b:76:b2:3d:76:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=5490bed8-eb53-4be4-a0ea-c76d0cb9d515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:59:f0:98:59:04:f2:e3:32:cc:2e:8e:47:3e:
                    5f:b4:3c:d0:be:de:61:89:a2:fd:49:bb:37:c3:f4:
                    79:d6:de:3d:9d:b9:27:d2:bd:54:06:68:20:47:53:
                    73:3e:59:c4:4f:8e:4a:7f:aa:be:fd:d9:f0:36:64:
                    31:d8:fd:aa:f7:9e:c7:29:d2:bc:fd:1d:17:4f:51:
                    f9:7c:7b:b8:6a:ef:92:d5:85:7c:7f:a9:df:e9:08:
                    5d:6f:23:6f:c3:84:8f:46:ab:c6:4d:d1:3f:b4:2c:
                    87:fa:9e:35:12:ec:24:b8:8b:f0:e1:8e:9f:cf:ca:
                    19:18:e7:b8:38:9d:6c:dc:b3:26:8c:12:5e:cb:4d:
                    d6:7d:08:1a:52:59:8a:e1:6e:7f:36:b6:d5:68:45:
                    bf:45:91:dd:bd:cc:9c:39:ae:37:03:34:2b:9c:b5:
                    83:d9:3c:04:6e:37:ea:7b:86:69:6c:c9:5a:89:9b:
                    aa:48:f3:03:c3:5d:4a:fd:20:2f:0a:6a:c0:42:65:
                    8e:2e:72:1a:4f:6b:db:f1:05:19:4b:30:16:3e:2e:
                    1e:59:79:e0:8f:64:51:54:f2:a1:3a:0c:8b:bf:0d:
                    76:cd:9d:f4:2e:28:ee:47:7c:75:d5:1f:78:7d:b1:
                    25:a7:1d:aa:1d:39:ff:03:be:74:a0:81:7b:e5:31:
                    fc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4F:E1:CA:6C:10:1F:35:F7:9B:77:FB:63:CF:D0:A0:56:2F:7A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2fcc13d-453e-305d-8287-681db63e6def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ce:ef:ce:60:a1:65:47:d8:fa:1f:8a:ad:f9:5f:e1:31:cc:
         35:0a:7c:0f:c0:bf:10:03:5a:a1:74:52:9a:cc:37:1b:58:0c:
         17:3a:23:b9:e4:a1:93:39:34:1a:2e:06:3c:50:e4:80:2f:99:
         96:8b:d8:d7:4c:96:53:20:ca:85:5a:2b:82:c9:66:ca:7f:5c:
         62:5c:f2:75:1d:d6:e6:33:b1:eb:49:f4:06:e1:f9:df:b8:8b:
         1b:3d:87:1d:ec:35:93:99:03:ec:4b:5c:d4:e4:68:13:f6:69:
         4d:2f:be:86:e1:2f:a5:47:ff:94:bc:2d:c3:83:bd:20:6b:04:
         3c:8a:60:a7:20:da:14:12:e7:af:46:7a:61:db:7e:69:27:82:
         7b:8b:90:1a:d2:f6:f2:28:f3:73:e2:39:5e:d9:f0:6c:cc:ca:
         ea:a8:c6:83:8d:3b:e9:0b:b8:5f:2c:14:20:b2:ef:31:c1:e0:
         36:e7:b4:d1:03:71:7f:1f:32:18:91:0e:06:be:a4:83:7c:f2:
         c2:c3:73:31:da:32:bb:90:45:c0:8e:af:a4:59:3a:82:16:7f:
         da:dc:37:dc:cc:b7:99:2b:fd:a3:73:b3:fe:c5:dc:3f:b5:92:
         66:9a:c1:4a:21:fa:dd:be:06:e1:be:f7:9c:8b:9a:57:e7:6d:
         4f:67:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:22:50 2026 by rpki-client