Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/6e382c04-a4d9-3361-b7a1-9f4c6dfadda6.roa
File:                     6e382c04-a4d9-3361-b7a1-9f4c6dfadda6.roa (raw, json)
Hash identifier:          j3db+Qqf3KGHs9oDiexM9zuOTItAcOKEHjew1ETsmGE=
Subject key identifier:   B8:E2:05:03:67:7B:11:B3:B9:1D:69:26:5B:87:3B:07:0E:7A:EA:C2
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584F19FCFEA261655EA5D31CC080
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/6e382c04-a4d9-3361-b7a1-9f4c6dfadda6.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     13536
IP address blocks:        209.198.66.0/24 maxlen: 24
                          209.198.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:fe:a2:61:65:5e:a5:d3:1c:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=bd27b098-3c36-4cb4-801e-f37487dd75c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:78:c7:0b:c3:9e:24:42:2a:64:dd:cd:f3:
                    94:d5:3c:99:c9:b5:ff:93:09:9a:97:ee:ee:1f:bb:
                    7f:fa:b0:c2:7c:fb:ec:99:13:89:3b:25:f2:d4:4d:
                    81:7a:37:93:75:47:db:7d:2f:92:47:51:c1:93:d7:
                    4d:b7:c9:be:04:dc:82:9a:70:14:f4:9c:d6:6d:49:
                    e9:40:2d:4c:82:b3:60:31:42:6e:ba:d7:4e:54:c3:
                    c4:df:6f:7f:c0:dd:15:4c:bb:0b:f5:a9:4e:87:ec:
                    a7:19:79:c5:32:84:05:12:1d:51:ec:58:07:fa:43:
                    2c:c5:4c:c5:c0:ac:4b:41:a2:bb:4a:db:6c:61:68:
                    e6:c6:26:75:4a:a6:5d:c7:ce:f0:50:00:2b:3e:af:
                    08:45:d0:e9:64:3e:17:28:a9:0c:3a:4a:8d:6e:6d:
                    c5:02:5c:00:a1:0c:85:f8:9d:37:28:40:14:6c:08:
                    98:65:e7:40:cc:dc:fb:ae:bb:03:ad:8d:1a:c2:32:
                    8a:ac:42:7d:02:ff:74:cd:88:f4:36:c5:3e:5b:99:
                    dd:e1:30:71:e9:cd:b9:fb:a6:af:7b:bd:d1:e4:5e:
                    4b:60:f8:00:b4:1d:45:b2:7b:6c:e7:f7:77:51:9c:
                    1a:f9:3a:6d:ed:10:ba:b2:2d:e2:88:e3:41:c1:30:
                    15:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E2:05:03:67:7B:11:B3:B9:1D:69:26:5B:87:3B:07:0E:7A:EA:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/6e382c04-a4d9-3361-b7a1-9f4c6dfadda6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.198.66.0/24
                  209.198.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:cc:64:a5:50:d0:b7:0b:0e:fd:d9:76:50:a6:6e:e5:96:53:
         7c:aa:ca:9e:37:41:4c:3a:c4:dc:3d:4d:bd:d7:5e:27:59:38:
         57:62:70:5d:2f:6e:36:f5:bf:25:5c:8c:a4:6a:37:2b:2a:94:
         70:25:3a:eb:41:4e:50:de:52:8c:27:ad:ea:10:95:65:b3:83:
         7c:d7:a2:de:b3:68:c7:cb:a0:2a:8d:03:0e:86:fb:13:0a:35:
         ac:bb:aa:22:97:34:5f:05:8d:96:de:5b:15:32:f4:7a:81:88:
         a0:42:f4:8e:d6:50:33:a3:73:92:ef:da:c7:3f:ac:9a:51:6e:
         a3:8a:3a:80:ea:5f:2d:b9:76:c8:30:a6:3b:04:dd:d3:ef:eb:
         36:08:67:60:57:ce:56:9a:7f:b4:2c:07:49:3a:9e:23:aa:b2:
         56:fa:9b:4f:2b:12:5a:15:4d:da:e8:ba:0c:df:5f:a4:86:a2:
         f1:9b:39:e0:1b:4a:b3:7c:89:95:13:4b:5f:46:eb:8c:72:e8:
         72:bd:11:b5:de:cf:a3:a9:8b:45:80:30:ea:2f:9b:52:ba:8a:
         0c:e0:c7:44:55:64:fb:99:01:e8:b3:8e:9c:10:94:94:11:e9:
         ac:f6:24:40:b5:80:26:06:50:21:06:bd:32:5a:b5:15:aa:f1:
         04:3e:38:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:48:25 2026 by rpki-client