Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa
File:                     9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa (raw, json)
Hash identifier:          5NJIYCMQa9kulotIFJR8+5KXcQDWfSc57hrcsZQHVm8=
Subject key identifier:   46:11:4D:89:CF:A6:10:DB:60:E8:3B:2A:BF:A2:5F:39:2E:BC:00:3D
Certificate issuer:       /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Certificate serial:       010D0C9F4328584F43DD597DFA86193E4C32C600
Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     11766
IP address blocks:        66.60.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:59:7d:fa:86:19:3e:4c:32:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=7b1e0395-db0f-47d8-bbda-c51ee3efe3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:87:09:f1:67:5c:bd:60:d4:18:d8:39:a8:
                    8e:e9:62:1a:66:71:62:5d:35:29:83:9c:c1:a7:e6:
                    fd:2a:7d:b6:56:3e:75:6c:09:c2:43:b4:df:73:18:
                    2a:fb:34:8c:9a:a6:10:c0:ec:15:0f:a5:ca:5c:76:
                    f0:34:3c:1c:f9:8f:af:d0:2e:d9:37:bf:c7:19:50:
                    aa:94:25:aa:8f:68:77:d7:36:6a:0c:65:7e:a0:e4:
                    7e:20:10:94:4b:ac:e0:ae:bf:cd:03:9c:fa:7e:fb:
                    98:82:a3:66:04:69:6e:df:f7:6d:05:52:e5:e7:ef:
                    1e:47:91:bf:3e:9d:89:1b:11:fe:82:ee:2a:a1:e9:
                    ec:d5:08:78:f0:d4:58:57:00:8d:c5:5a:23:26:ba:
                    fc:67:96:18:54:8e:40:73:fc:f6:e1:2f:ee:8a:e9:
                    d3:e1:e2:9d:3a:97:9a:7d:a6:fc:ea:89:d4:67:35:
                    2a:d3:c8:89:c9:2c:66:ed:cd:e7:48:75:83:f0:5f:
                    8b:3a:4b:74:68:a5:89:6d:36:53:2d:88:f9:d6:4d:
                    9d:12:0d:34:aa:62:b8:f7:33:4e:8c:77:f4:32:40:
                    b5:7d:0b:31:e1:fb:dd:b9:b9:95:5b:8c:be:da:9d:
                    41:92:22:c6:4b:09:7f:cf:81:b1:8a:ae:ec:99:a6:
                    cf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:11:4D:89:CF:A6:10:DB:60:E8:3B:2A:BF:A2:5F:39:2E:BC:00:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl

            X509v3 Authority Key Identifier:
                keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.60.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:89:ed:21:be:a0:5c:e3:b3:92:e0:31:fd:be:28:ee:ed:d9:
         6e:12:d2:de:42:3d:0b:b9:2d:4b:04:e3:33:2b:c1:7c:ca:e4:
         e3:17:e6:f2:2d:21:16:51:6e:b9:62:1b:57:8f:94:20:98:9d:
         8c:84:cf:85:ab:f0:86:31:9c:1b:34:8a:48:c2:3c:b2:f7:90:
         be:7f:8b:0c:31:79:53:12:5c:94:dc:75:51:d9:aa:e1:1e:73:
         5a:c7:4c:9f:44:61:83:4a:cc:aa:88:a8:e3:48:90:4e:bb:36:
         fc:ea:1d:6e:d0:7c:a0:a5:88:85:1d:6e:1b:c4:7d:27:cb:ef:
         10:e7:0b:f0:8a:70:3a:df:b4:60:09:ff:d7:d2:f1:f1:43:2c:
         4a:7a:7c:6d:45:cf:2a:e9:ce:a6:7d:d5:51:61:cb:2b:99:52:
         cd:7d:ed:df:8a:aa:a6:08:b5:90:03:2b:04:85:29:16:34:cb:
         14:11:a3:22:bd:3d:0e:06:eb:8b:48:8e:c3:d2:6c:ec:1b:28:
         56:02:77:e3:d0:1d:62:7e:e3:21:60:1e:6b:73:12:fa:ab:04:
         5c:22:8f:20:79:ae:dd:2b:6c:78:02:10:dc:ed:5b:c1:bc:64:
         a4:d4:1d:90:1f:9f:a2:2d:f9:d4:85:03:b2:80:5f:68:dc:59:
         ae:4e:88:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:38:19 2026 by rpki-client