Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/c899a622-f404-3044-83bc-25459ddb7206.roa
File:                     c899a622-f404-3044-83bc-25459ddb7206.roa (raw, json)
Hash identifier:          favfzGzfVL46w2zfuV46RdrmUN169BLA7npS5jLcoD0=
Subject key identifier:   E4:5A:57:D8:52:34:AB:60:98:13:30:1E:7B:16:A3:FE:C1:FB:E0:84
Certificate issuer:       /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Certificate serial:       010D0C9F4328584F45429173AA4DBF2AB89D4580
Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/c899a622-f404-3044-83bc-25459ddb7206.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     26703
IP address blocks:        66.102.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:91:73:aa:4d:bf:2a:b8:9d:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=7afa3f8b-8f96-4a8a-96fa-c8c3024673c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:fc:f1:e2:21:37:81:2e:3b:1a:b6:cc:9e:
                    ae:0e:64:39:dd:7b:75:c1:c2:c4:41:55:b0:95:c0:
                    da:f4:ce:9c:b2:04:f0:bf:03:17:25:98:5d:9e:fb:
                    69:36:a4:3e:d5:54:c7:e0:62:a5:13:04:58:24:96:
                    24:d1:4c:10:d8:d8:1e:84:93:41:08:37:07:93:77:
                    31:86:01:58:c2:c7:75:01:06:f0:76:1b:7e:54:ac:
                    82:19:2d:fe:23:ce:3b:98:b9:0b:bb:98:0f:3d:4e:
                    18:3b:16:9e:0d:a8:5c:ad:82:53:c7:85:c2:c7:1c:
                    7a:cc:6b:60:2e:47:75:ca:1f:49:5e:62:18:b6:c4:
                    f2:88:84:3e:1c:68:7e:90:c4:bc:a1:2a:95:50:ca:
                    fa:77:ee:43:6b:d7:04:ae:40:16:f8:ce:27:87:3f:
                    56:75:87:bf:4d:3c:1e:77:3e:44:3b:3a:b9:30:af:
                    ee:21:e2:90:b8:95:6b:21:82:75:63:51:6e:a2:5e:
                    3d:9f:38:bc:d3:51:3e:81:88:3d:24:7c:45:bc:7a:
                    7e:ba:13:24:16:04:87:af:b7:07:1f:07:7b:a4:ae:
                    11:4d:85:fd:1c:c0:f2:c8:f4:8d:ea:a1:9d:b4:47:
                    be:33:90:44:68:74:3b:ba:29:54:6f:4e:73:24:04:
                    bf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5A:57:D8:52:34:AB:60:98:13:30:1E:7B:16:A3:FE:C1:FB:E0:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/c899a622-f404-3044-83bc-25459ddb7206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl

            X509v3 Authority Key Identifier:
                keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0b:31:2d:04:4d:7e:a3:a6:80:19:e5:8e:ae:ad:3f:d2:2c:
         38:94:c0:42:d0:fa:e9:2f:cd:07:b4:86:b7:bd:0c:5c:da:89:
         b6:27:ca:5c:e9:09:24:1f:d8:3c:da:97:b2:fc:2d:0f:45:16:
         3b:7b:18:d2:79:de:81:6b:27:f6:04:7d:ee:7e:e4:e7:09:93:
         cd:ad:8d:29:21:75:55:28:06:e6:73:d2:35:4d:e0:f4:47:3b:
         14:ec:1e:cd:f4:74:e1:b4:7f:bd:2c:0a:b1:0b:17:b8:b2:f6:
         dd:c3:91:46:f0:00:4d:8e:37:22:bc:33:41:ec:11:3f:b8:8a:
         68:49:32:30:a4:20:6a:6d:f1:11:9c:35:c5:75:dd:93:b9:cf:
         c5:40:15:1d:bc:92:0d:32:46:48:6e:16:eb:85:ee:86:1c:95:
         2e:66:47:a9:62:b1:4b:d9:ab:11:b4:2e:96:5a:53:70:ba:72:
         f2:41:01:32:58:1e:9e:f0:b8:ee:6d:5b:81:73:0d:9d:a8:38:
         d7:32:a1:c3:4b:ab:1b:4f:12:40:92:50:14:5b:32:9f:6f:74:
         a8:c3:9c:12:77:24:a9:07:37:4a:77:20:37:fe:f9:10:b0:b3:
         26:03:8e:ea:36:90:30:ca:07:bb:ae:2a:80:d9:10:02:73:19:
         0c:27:57:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:50:59 2026 by rpki-client