Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/fb6a12af-190b-3067-8716-4ef29d2f8f01.roa
File:                     fb6a12af-190b-3067-8716-4ef29d2f8f01.roa (raw, json)
Hash identifier:          ls8NE2IP1M6sNI066EjbWBKOrCBqEgp9LR8505pvfXs=
Subject key identifier:   8C:F4:8F:B6:96:F2:C4:08:4E:4A:8C:B3:F3:B2:CB:4D:30:8D:72:13
Certificate issuer:       /CN=16564b80-06fa-4597-9f31-8d1b758675ab
Certificate serial:       010D0C9F4328584EB847428F6BE0EB6B798B46C0
Authority key identifier: 9B:87:45:65:6C:F6:39:96:61:20:F6:A3:64:E6:E7:5F:82:3F:71:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/fb6a12af-190b-3067-8716-4ef29d2f8f01.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     3657
IP address blocks:        66.7.96.0/24 maxlen: 24
                          66.7.97.0/24 maxlen: 24
                          66.7.98.0/24 maxlen: 24
                          66.7.99.0/24 maxlen: 24
                          66.7.100.0/24 maxlen: 24
                          66.7.101.0/24 maxlen: 24
                          66.7.102.0/24 maxlen: 24
                          66.7.103.0/24 maxlen: 24
                          66.7.104.0/24 maxlen: 24
                          66.7.105.0/24 maxlen: 24
                          66.7.106.0/24 maxlen: 24
                          66.7.107.0/24 maxlen: 24
                          66.7.108.0/24 maxlen: 24
                          66.7.109.0/24 maxlen: 24
                          66.7.110.0/24 maxlen: 24
                          66.7.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/16564b80-06fa-4597-9f31-8d1b758675ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/16564b80-06fa-4597-9f31-8d1b758675ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:42:8f:6b:e0:eb:6b:79:8b:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16564b80-06fa-4597-9f31-8d1b758675ab
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=00a2b0f0-08c2-4d98-ac9b-a709d779981a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:63:a4:56:a9:29:d8:ce:54:73:c9:f0:ac:b4:
                    09:a8:bc:20:3b:58:40:da:00:fc:4d:36:06:3e:8d:
                    ec:b8:55:4b:22:d0:0b:f5:bd:f5:0b:cb:d3:99:76:
                    f3:df:62:aa:f7:f6:e2:d2:f5:3a:e4:73:75:db:8b:
                    0f:a9:d4:7a:c8:b5:5c:07:a8:d8:e1:3a:7a:df:ec:
                    29:a5:d2:d9:55:2e:80:81:68:82:f1:df:a5:31:32:
                    7d:c0:8e:d9:91:24:af:2f:a8:de:5c:a5:d7:66:f9:
                    94:9c:38:1d:53:7f:3c:6a:45:52:e2:42:4f:99:60:
                    16:b8:d0:8a:70:a1:77:da:6c:10:f9:e5:27:5a:0b:
                    1a:b3:26:ed:52:35:3b:c3:0b:8a:8d:98:86:dc:9e:
                    f3:55:4c:44:4d:6a:99:ee:40:a3:70:d7:a6:fd:69:
                    50:bf:04:b3:ec:33:df:a6:be:7d:96:a3:cd:7e:34:
                    30:94:09:0a:3c:bf:05:41:c1:eb:e9:c4:7a:59:cc:
                    3d:1d:84:45:b0:2c:5a:2d:16:e0:61:d4:f6:8e:48:
                    ae:9f:6f:ea:a0:37:dc:4f:4d:12:ce:9a:f2:6b:ff:
                    e8:cc:bf:14:b4:89:62:96:67:88:63:d6:c6:a7:38:
                    2e:12:d2:ff:4a:d2:54:61:a3:0a:52:10:06:65:2d:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F4:8F:B6:96:F2:C4:08:4E:4A:8C:B3:F3:B2:CB:4D:30:8D:72:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/fb6a12af-190b-3067-8716-4ef29d2f8f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/16564b80-06fa-4597-9f31-8d1b758675ab.crl

            X509v3 Authority Key Identifier:
                keyid:9B:87:45:65:6C:F6:39:96:61:20:F6:A3:64:E6:E7:5F:82:3F:71:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.7.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:bc:d3:bc:35:03:f5:6d:e1:b7:82:5d:8f:d9:37:51:7f:01:
         8a:83:8f:cc:4d:a9:ab:18:8c:a6:2b:bd:75:1f:e5:75:03:ce:
         41:aa:18:f3:c5:01:fe:00:5a:b2:7d:fd:5f:2f:b4:2d:29:f8:
         82:81:4e:f9:7d:7c:bb:65:63:ad:8a:e4:05:c4:23:6f:66:0c:
         a9:b0:aa:44:b3:65:ca:7d:93:10:65:63:d0:0d:65:cc:8a:81:
         1f:a2:fb:ca:02:91:a8:f8:3f:01:b7:d5:d6:cc:d7:8b:b0:a6:
         af:ce:de:2f:b0:4f:2e:0d:f0:e7:a0:fc:07:4a:89:cf:8f:a6:
         ef:6c:f2:ca:cc:58:24:93:21:12:b3:5a:28:1e:1d:3e:85:e6:
         f8:8d:aa:6c:e6:a5:5e:b2:9f:fe:67:67:b9:b8:5a:f9:0c:19:
         6e:9d:51:b0:e9:ce:fb:61:bc:33:32:ca:b5:2f:6c:6e:02:bc:
         aa:11:24:cb:0b:a1:16:61:08:38:8a:75:30:00:1d:ee:83:9c:
         48:02:72:bf:38:7b:3d:d4:1d:72:9d:b6:64:f5:a7:c7:86:3f:
         53:5a:32:47:b8:9f:ec:85:30:e1:1d:73:35:d5:14:2b:4b:d4:
         47:37:94:80:59:c9:5a:40:64:a3:3e:e3:91:30:26:c2:34:e6:
         1d:87:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:48:57 2026 by rpki-client