Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/e9bb7b7c-8b52-3bd4-a1c6-a0888160ba13.roa
File:                     e9bb7b7c-8b52-3bd4-a1c6-a0888160ba13.roa (raw, json)
Hash identifier:          +r+CUjBkOxy5idc3Xv2kcFrE3kg6l+zqq6DRfhA7iZI=
Subject key identifier:   C9:AF:C4:31:16:64:6B:EA:29:8C:40:16:8E:B9:FC:E7:0D:12:D3:DA
Certificate issuer:       /CN=45172e0b-02b7-43fc-843c-98c0f87cafa4
Certificate serial:       010D0C9F4328584F331D3279765B2540BF1CB480
Authority key identifier: 6D:29:CD:58:DA:B1:10:CE:4D:CC:52:5F:D6:FD:71:2D:D8:DD:AE:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/e9bb7b7c-8b52-3bd4-a1c6-a0888160ba13.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     33554
IP address blocks:        66.51.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:32:79:76:5b:25:40:bf:1c:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45172e0b-02b7-43fc-843c-98c0f87cafa4
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=8c3111e9-c362-46a5-b05a-3ea45ed7e5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:22:8a:a4:78:22:84:b6:7c:d9:be:06:d9:86:
                    65:eb:a5:31:c9:7e:fe:d5:54:d5:7f:a7:52:2a:5d:
                    8d:1b:5c:51:9c:f9:83:3b:30:7d:65:2d:99:9c:82:
                    0d:7c:54:82:60:81:43:bc:48:2c:2e:26:6a:c1:36:
                    f7:10:4f:57:c5:7c:d2:da:3e:7c:6d:6e:e9:a9:54:
                    9c:ef:29:e3:b4:4c:3e:06:2c:56:d0:df:f6:a8:7e:
                    d3:74:b8:10:f4:7f:2f:d1:b6:44:3c:fa:dd:1e:d9:
                    71:19:5a:71:52:cd:de:44:9e:4d:b9:fa:1e:21:04:
                    17:f7:1e:59:d0:5c:5a:52:eb:4a:76:7e:7c:20:ee:
                    e1:7f:86:11:09:f1:4a:0b:82:7f:e2:20:98:00:26:
                    9f:d0:b4:78:99:bc:d9:49:94:fb:7e:a9:d4:66:0a:
                    0e:e4:26:23:ea:41:63:f9:c5:93:6d:c4:f7:74:a8:
                    ce:55:64:54:28:18:62:cc:10:3c:f7:e8:bf:9e:46:
                    7a:d3:3f:5a:51:b0:c8:49:a1:00:86:10:d2:d3:51:
                    fc:5e:78:ad:10:98:85:10:26:13:76:3a:c4:d9:ee:
                    8f:d2:40:e8:1a:eb:40:a8:96:f4:7b:df:74:74:7e:
                    70:65:31:06:19:2d:95:33:bd:4a:03:3b:86:1d:bc:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AF:C4:31:16:64:6B:EA:29:8C:40:16:8E:B9:FC:E7:0D:12:D3:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/e9bb7b7c-8b52-3bd4-a1c6-a0888160ba13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.crl

            X509v3 Authority Key Identifier:
                keyid:6D:29:CD:58:DA:B1:10:CE:4D:CC:52:5F:D6:FD:71:2D:D8:DD:AE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2f:78:8e:86:c8:d9:4c:a1:d4:e3:eb:c7:3e:3c:75:9c:a3:
         61:06:94:56:cc:21:17:8a:a7:3d:aa:0a:00:7e:9d:29:79:df:
         cf:bb:1b:5e:c7:95:b2:1a:33:4b:26:93:f0:d6:81:0f:d4:9b:
         07:92:e9:4b:40:3b:38:6c:e6:96:bf:4c:fc:50:37:00:38:cc:
         48:30:e1:97:5d:77:d5:5d:03:61:1a:58:30:f6:11:9e:0c:d3:
         9c:a8:ba:54:d1:33:34:16:37:a9:30:b6:4a:7a:ce:69:5e:aa:
         5b:29:3e:a2:cd:f6:6b:39:fe:39:16:57:03:b9:26:05:5b:f4:
         41:c1:f7:ba:69:03:a0:5b:9e:59:97:fa:28:51:35:52:17:11:
         a2:b3:2e:7a:53:27:26:6f:fa:0a:b7:4e:c7:b4:c1:07:b7:46:
         82:67:b6:e3:24:ea:28:13:d4:b8:0c:c1:91:7a:fa:9f:b7:2a:
         e3:65:f5:41:5e:ec:f7:4d:ea:8c:d0:39:fd:6e:50:94:bf:6d:
         b4:de:a5:a7:ee:d5:e0:00:d6:ba:2c:fc:31:e5:d9:ac:94:d6:
         09:b0:aa:7a:4d:77:76:20:53:ce:6e:e7:4d:48:c0:cc:67:e6:
         e4:8a:8f:45:02:dd:aa:54:49:91:67:a2:e0:10:57:96:35:de:
         75:9b:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:12:56 2026 by rpki-client