Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/42e41324-e0fc-3e5c-b991-39cf95216788.roa
File:                     42e41324-e0fc-3e5c-b991-39cf95216788.roa (raw, json)
Hash identifier:          hbs/LV0pCz/pxkfurYJcqyd9S0EOFUrnf2ZXQA3mFw8=
Subject key identifier:   5F:34:6A:A2:28:97:3F:0C:85:F3:77:C0:71:EA:E9:31:7A:D5:D0:92
Certificate issuer:       /CN=1851cb45-f2c7-47f9-9317-3b3cb02a6178
Certificate serial:       010D0C9F4328584F655D65FFA20F7AF173238D20
Authority key identifier: 16:96:63:7F:0B:FB:AB:75:3E:40:58:C4:0E:E9:83:4A:FC:B6:26:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/42e41324-e0fc-3e5c-b991-39cf95216788.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     33607
IP address blocks:        66.146.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/1851cb45-f2c7-47f9-9317-3b3cb02a6178.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/1851cb45-f2c7-47f9-9317-3b3cb02a6178.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:65:ff:a2:0f:7a:f1:73:23:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1851cb45-f2c7-47f9-9317-3b3cb02a6178
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=7fc8172a-4f43-47d2-9546-daa239401f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:37:c6:c0:09:57:be:57:84:9c:52:27:c7:93:
                    5e:60:75:6b:f0:73:4e:da:e9:96:75:8e:02:72:61:
                    2b:ee:8d:e6:ba:11:f6:94:b9:ce:3c:f5:d7:b5:49:
                    7f:c0:1f:0b:e7:d9:76:d0:35:ba:56:d7:4d:6e:82:
                    58:18:d6:57:b5:b4:57:3e:9d:33:26:f4:5a:b4:de:
                    e0:fe:02:33:a1:d5:1a:1f:c8:95:8c:d7:d5:0b:97:
                    1b:d3:f9:89:d8:ba:df:9f:8f:46:26:98:9f:bf:f6:
                    9c:68:ee:66:c5:29:b7:f8:e5:f0:d5:24:9f:fc:55:
                    61:93:f6:d5:c4:7c:b5:1e:49:5d:82:ae:b0:f9:bd:
                    d5:52:ed:a1:0b:b2:20:6f:60:89:eb:09:77:55:2a:
                    4d:94:ca:c4:16:09:ec:e5:84:ab:01:eb:4b:f3:8e:
                    a9:02:a7:cd:4f:dd:16:7b:6f:0b:a2:d5:b2:b1:fa:
                    3f:fe:5d:53:da:77:2e:ef:9e:6a:bc:72:64:94:ff:
                    83:50:5b:94:60:c4:c3:6a:64:f5:d7:3a:f5:a8:02:
                    c4:22:5d:fb:3b:ab:7e:b9:3f:7f:c5:9f:42:91:96:
                    24:9b:29:e3:fc:62:12:93:4b:1d:93:53:de:99:3a:
                    d7:c1:81:df:42:50:75:5a:57:f3:62:1d:e6:6c:e4:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:34:6A:A2:28:97:3F:0C:85:F3:77:C0:71:EA:E9:31:7A:D5:D0:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/42e41324-e0fc-3e5c-b991-39cf95216788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/1851cb45-f2c7-47f9-9317-3b3cb02a6178.crl

            X509v3 Authority Key Identifier:
                keyid:16:96:63:7F:0B:FB:AB:75:3E:40:58:C4:0E:E9:83:4A:FC:B6:26:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ab:5c:ac:f1:07:00:3a:eb:85:8e:90:45:1f:16:90:c9:83:
         4e:9e:ac:2c:ed:76:4d:60:85:23:14:c5:6d:8c:bf:e5:d6:b6:
         9b:e8:f6:1b:8c:0c:69:64:c6:39:8d:30:0d:4c:a8:9c:05:e2:
         ff:d5:36:24:18:02:20:27:d2:d7:cb:84:ab:c5:90:87:ae:88:
         74:d5:93:1f:8e:15:bf:ef:8d:18:32:6a:be:b2:b4:f3:6b:0c:
         ec:59:a5:39:ef:9e:13:fa:0e:fa:12:14:60:21:d1:5b:5c:da:
         14:74:f7:cb:52:a9:31:28:57:c0:98:81:7a:4c:cd:8a:fb:50:
         07:66:44:b5:bb:f7:c2:7b:5b:a6:0a:94:25:61:97:3f:be:46:
         3d:ff:d6:a7:ca:c2:41:96:dc:0e:5b:36:36:7e:cb:55:bf:d4:
         c0:27:a8:9a:b0:55:4d:5c:ee:6a:0f:4f:b0:d8:b1:94:eb:81:
         2a:c3:2a:7a:dc:48:51:43:1a:f5:ad:aa:57:2e:0d:ed:56:53:
         7e:17:76:d0:0c:0d:ae:c5:6f:3a:e7:bc:dc:bf:1a:6e:86:12:
         72:e6:07:c4:4e:e7:39:bc:71:bc:ff:4b:d2:32:db:50:17:be:
         7f:e0:44:be:02:3e:d0:f2:a8:aa:d9:0c:ee:98:e9:65:91:0f:
         a2:b2:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:59:36 2026 by rpki-client