Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/bc93b2b4-d41f-3bd9-919b-9053712773e8.roa
File:                     bc93b2b4-d41f-3bd9-919b-9053712773e8.roa (raw, json)
Hash identifier:          rPwGdz15DnR5g7qxVUZf48XihR1fMD8a0UB9VTEtnMw=
Subject key identifier:   96:CA:1F:9D:84:EF:01:98:13:AF:2D:C7:2B:10:79:41:F5:7B:A6:76
Certificate issuer:       /CN=dc2ecd40-9d55-4ab1-8df6-7395a80279a8
Certificate serial:       010D0C9F4328584F49746A88584AA01AFF190BE0
Authority key identifier: 9C:EE:7A:9D:DD:DA:BB:C8:7D:F0:32:84:F3:0E:33:EE:93:42:31:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/bc93b2b4-d41f-3bd9-919b-9053712773e8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27560
IP address blocks:        66.242.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:6a:88:58:4a:a0:1a:ff:19:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc2ecd40-9d55-4ab1-8df6-7395a80279a8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5e10cef3-31a6-4428-a572-99bc911370cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2a:cd:ea:9d:d7:ba:c0:40:1c:32:c9:52:d2:
                    bd:42:f7:60:90:ac:be:25:15:41:b3:42:1c:b5:d9:
                    be:26:c9:7f:c0:44:97:de:4b:c1:69:0c:65:3f:92:
                    29:ac:0d:27:ef:d3:25:98:1a:3e:b2:0f:d3:92:78:
                    7a:b6:9f:7b:52:93:40:f9:27:44:91:81:fb:01:28:
                    22:0a:90:08:56:c7:0b:43:60:26:e7:be:d4:a6:bc:
                    2c:5a:1c:37:f8:ba:fa:b9:57:fe:89:cc:88:12:37:
                    09:61:41:96:65:d4:57:ec:94:4e:28:e6:0e:f1:8e:
                    bc:b1:00:16:13:f7:63:00:38:90:93:51:a7:b8:dd:
                    96:6b:51:5e:26:c3:c7:eb:b6:ce:16:69:73:79:a9:
                    85:51:42:89:ee:b6:8e:90:d2:37:9c:7f:e1:8e:ac:
                    a4:8b:13:43:85:9a:91:7a:76:90:a8:06:9f:5a:5b:
                    36:cc:54:55:05:58:15:49:7b:14:95:a1:d4:15:25:
                    41:59:27:32:59:1c:c5:61:81:54:2d:3e:a4:37:fd:
                    77:c8:31:fc:61:e8:4b:6b:5b:5f:92:a9:24:c3:aa:
                    56:97:71:20:54:b0:87:b0:da:a9:c3:22:0c:ed:e4:
                    cd:ee:bf:89:f7:87:ee:6f:36:ad:41:4f:4d:ce:5e:
                    c6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CA:1F:9D:84:EF:01:98:13:AF:2D:C7:2B:10:79:41:F5:7B:A6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/bc93b2b4-d41f-3bd9-919b-9053712773e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.crl

            X509v3 Authority Key Identifier:
                keyid:9C:EE:7A:9D:DD:DA:BB:C8:7D:F0:32:84:F3:0E:33:EE:93:42:31:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:99:9a:46:a6:5f:76:2c:87:71:0f:8d:c0:43:74:71:95:cc:
         ff:a0:23:c7:98:03:4e:ad:95:f3:c6:cd:a7:f5:f0:3e:5d:6c:
         2a:28:a9:97:c1:8e:e7:9a:90:90:88:8e:20:22:bd:a0:34:bf:
         1c:8a:f2:03:3d:49:0a:4d:28:1b:2d:b4:97:ae:9f:01:4a:10:
         54:d1:64:0b:e5:c5:7c:26:df:b2:3f:07:d7:9b:82:4f:d1:19:
         32:65:3d:16:5d:be:e0:1c:c2:e8:1f:95:7e:75:a1:4e:49:bb:
         8b:ee:76:38:a3:1b:6c:75:41:4a:53:7a:b2:aa:1e:1a:5c:e0:
         cf:9c:8e:43:1b:68:2d:c0:77:a8:24:3c:10:e1:76:da:c0:af:
         a5:1d:e6:4a:c0:0f:4d:c2:a4:70:ef:d9:37:f0:a1:3f:7c:8a:
         bc:0c:d7:12:95:0f:20:78:61:c4:16:35:f8:e9:5e:4c:9f:e3:
         83:d9:f5:0d:c1:99:15:20:7d:f3:4e:d6:7f:84:a0:42:ff:2c:
         d5:b3:7e:fb:c7:ac:4c:25:db:e5:97:bd:7c:44:8c:a1:4b:13:
         13:17:87:17:71:35:38:7e:ac:5b:0c:2d:67:66:4c:3c:a8:15:
         4a:0a:c9:42:d0:01:55:ed:f9:67:f3:d5:69:7c:64:29:a4:b8:
         1b:6e:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:29:35 2026 by rpki-client