Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/99095a86-a869-4aaf-90c8-eb6c55c8c3a7/cc115ef8-c288-3303-8edf-d9a7c3a4c2d1.roa
File:                     cc115ef8-c288-3303-8edf-d9a7c3a4c2d1.roa (raw, json)
Hash identifier:          y4BA518/jzD7Rlew0rgWHu/fvd7np+/dpQ47V+6tffo=
Subject key identifier:   7A:1F:20:62:C0:1A:C4:D8:75:CE:23:3D:14:50:69:A2:FF:F8:BA:E3
Certificate issuer:       /CN=99095a86-a869-4aaf-90c8-eb6c55c8c3a7
Certificate serial:       010D0C9F4328584E85E9B1164F8EFD97B28F0800
Authority key identifier: B4:C1:F9:AC:AE:80:39:0C:F9:98:4F:09:0C:75:09:B2:1F:54:3F:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/99095a86-a869-4aaf-90c8-eb6c55c8c3a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/99095a86-a869-4aaf-90c8-eb6c55c8c3a7/cc115ef8-c288-3303-8edf-d9a7c3a4c2d1.roa
Signing time:             Fri 17 Jul 2026 00:01:53 +0000
ROA not before:           Fri 17 Jul 2026 00:01:53 +0000
ROA not after:            Thu 15 Oct 2026 00:01:53 +0000
asID:                     402738
IP address blocks:        66.85.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/99095a86-a869-4aaf-90c8-eb6c55c8c3a7/99095a86-a869-4aaf-90c8-eb6c55c8c3a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/99095a86-a869-4aaf-90c8-eb6c55c8c3a7/99095a86-a869-4aaf-90c8-eb6c55c8c3a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/99095a86-a869-4aaf-90c8-eb6c55c8c3a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:e9:b1:16:4f:8e:fd:97:b2:8f:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99095a86-a869-4aaf-90c8-eb6c55c8c3a7
        Validity
            Not Before: Jul 17 00:01:53 2026 GMT
            Not After : Oct 15 00:01:53 2026 GMT
        Subject: CN=c1e86c84-55a4-4352-a798-6b68094b6410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:80:a5:75:28:72:e5:4f:e8:ba:0f:9f:dd:68:
                    cc:12:7c:50:0d:bf:1f:05:f3:66:f8:1c:f7:4e:af:
                    0d:5c:c7:b3:42:0a:4f:c5:5b:ad:91:d6:b0:92:da:
                    0e:9b:39:62:eb:52:8e:6a:c7:9a:63:28:70:98:fd:
                    d7:4c:bb:a0:ac:f4:1c:3f:8a:46:df:5b:8f:fe:d1:
                    42:d2:7f:3b:48:80:33:a3:bc:f8:8a:db:2b:76:25:
                    27:14:48:f1:55:d6:23:99:75:0c:09:e7:24:ee:9b:
                    cc:ad:d6:f9:e5:7c:cd:8e:7b:52:b8:2c:52:a5:a0:
                    a0:91:82:92:57:76:69:ae:18:3c:30:07:b1:04:1c:
                    a4:33:6b:94:7f:47:0d:be:eb:b3:2a:0d:89:ec:59:
                    a0:06:c7:c1:01:83:7a:47:24:5a:90:5a:9f:df:ae:
                    80:b1:12:17:9b:0d:84:52:89:25:0d:e7:47:54:37:
                    cf:41:88:43:49:ce:9b:39:87:b3:a6:e6:1f:94:47:
                    96:c5:a5:4d:51:b2:b6:f3:d8:97:ba:fa:a2:b9:00:
                    95:42:de:9f:b5:3c:97:f4:e9:cd:3a:81:30:52:d7:
                    69:e1:1e:fb:73:15:9a:e0:86:66:fb:d4:68:da:b9:
                    82:97:ba:45:c8:07:1a:20:e2:06:76:b0:ec:36:5b:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:20:62:C0:1A:C4:D8:75:CE:23:3D:14:50:69:A2:FF:F8:BA:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/99095a86-a869-4aaf-90c8-eb6c55c8c3a7/cc115ef8-c288-3303-8edf-d9a7c3a4c2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/99095a86-a869-4aaf-90c8-eb6c55c8c3a7/99095a86-a869-4aaf-90c8-eb6c55c8c3a7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:C1:F9:AC:AE:80:39:0C:F9:98:4F:09:0C:75:09:B2:1F:54:3F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/99095a86-a869-4aaf-90c8-eb6c55c8c3a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:25:4c:5b:61:99:e0:fb:68:df:cf:bf:35:15:da:9c:30:
         44:e5:29:97:25:27:a0:b6:64:80:f0:ae:a7:ba:a0:ae:a8:e7:
         a9:b8:ba:bc:85:02:70:e8:6c:60:ca:fd:ed:14:ee:f8:fc:fe:
         39:94:58:de:fb:8e:d3:db:c4:cc:98:80:9b:72:35:2c:1f:5c:
         ae:44:40:95:d1:a7:7d:bf:9e:ef:4d:04:d3:31:d9:1f:81:dd:
         6b:93:91:91:2b:d6:82:76:96:8a:fd:df:8c:69:cf:8e:07:9d:
         70:88:d8:6e:33:56:ff:7e:4b:f2:e6:ce:46:ca:28:b2:71:40:
         1e:31:7b:f6:dc:06:4b:53:63:b1:b0:3e:09:c9:77:ba:15:a1:
         9b:82:a7:35:7d:0d:d9:7c:77:0f:2d:59:98:53:ef:97:76:4d:
         dd:29:f3:2c:81:25:80:4d:3f:a6:ce:fd:87:3c:db:bd:f7:56:
         b3:c6:ee:c1:0a:b1:91:fe:e6:3d:26:81:82:98:04:06:48:38:
         33:1c:75:88:e2:57:bc:a0:cf:b7:07:31:87:66:9d:35:2a:e6:
         84:2e:8f:22:db:89:6b:04:89:ea:52:3b:1f:a5:99:6e:9a:f9:
         42:fb:78:42:da:3c:23:c2:8b:36:18:9f:a7:87:c4:91:29:de:
         c6:e8:7f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:26:19 2026 by rpki-client