Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/003d76f7-bbc4-3be9-b47c-533d41cce145.roa
File:                     003d76f7-bbc4-3be9-b47c-533d41cce145.roa (raw, json)
Hash identifier:          gz/I/nhZeB26k0QJHpOnOi+OfKw3sbfnFb77AvUWCtM=
Subject key identifier:   7F:F5:EC:DE:DE:46:F2:A6:8F:F4:60:DD:5F:AA:FB:54:0C:EF:AA:F7
Certificate issuer:       /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
Certificate serial:       010D0C9F4328584F31B7B85711A00626E6C25EB0
Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/003d76f7-bbc4-3be9-b47c-533d41cce145.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     393816
IP address blocks:        66.219.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:b8:57:11:a0:06:26:e6:c2:5e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=1d2835c4-e347-463f-aa42-153a757a8edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:72:f7:d1:ea:06:e3:d5:98:21:29:54:d6:
                    52:28:3a:19:4b:f3:fa:52:97:44:7e:af:4a:83:2f:
                    9f:93:31:8c:4e:1d:d5:1a:23:01:e3:32:f9:c1:ab:
                    fa:b7:61:69:ba:4e:ac:ca:80:ed:1b:1b:3e:a1:5e:
                    39:44:98:6b:08:e5:db:53:bf:16:89:c9:df:bc:f0:
                    45:18:54:5a:e3:92:4e:f9:25:25:61:90:1f:41:0e:
                    11:6a:e9:6d:f3:b3:b3:70:a2:51:6e:c6:3e:5a:ae:
                    35:de:f8:4a:3b:3a:32:be:8c:61:02:cd:7d:69:9b:
                    32:74:12:75:db:5c:e4:1d:40:8d:54:27:bf:4f:e1:
                    bd:e3:e6:95:8a:68:43:91:c1:90:3c:fe:10:46:d1:
                    92:50:d2:9b:ec:b8:6b:9d:bf:f7:50:cb:09:f0:8c:
                    cb:2e:dc:a3:3b:be:63:94:68:13:a0:6a:9d:11:55:
                    b8:66:f7:5c:df:38:a9:f5:3d:6c:ac:f2:05:ab:7d:
                    bb:90:2d:0f:ac:4c:b6:6f:91:58:71:9d:24:4b:f1:
                    ce:72:9c:79:34:f2:41:35:dd:a5:3e:5a:36:65:f3:
                    1e:72:e3:ba:56:8a:5d:19:1f:71:36:50:c9:1b:45:
                    79:24:19:fa:39:f9:9e:8e:60:db:4a:09:bd:cb:a9:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F5:EC:DE:DE:46:F2:A6:8F:F4:60:DD:5F:AA:FB:54:0C:EF:AA:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/003d76f7-bbc4-3be9-b47c-533d41cce145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl

            X509v3 Authority Key Identifier:
                keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:70:09:b0:bc:24:81:01:3c:75:27:b8:f2:5b:40:e0:71:98:
         b1:da:23:3e:0f:06:3f:95:c3:63:db:c6:42:ac:2b:c2:fd:20:
         a0:df:5b:aa:a4:e8:ea:87:3c:8a:44:0b:d2:2e:7e:ca:0d:8a:
         82:28:55:2b:62:68:3f:64:65:10:8d:ab:5f:db:b4:b3:ea:e1:
         9a:23:01:6c:2b:e4:4a:fa:4b:b9:fc:bd:fd:98:58:98:a7:68:
         9c:04:97:f7:5f:ae:62:b0:70:b0:bf:48:24:e5:b6:18:a2:3c:
         e3:f8:ae:ad:25:73:be:0e:9b:21:39:a0:b0:e8:2f:ec:99:9b:
         51:ec:f2:83:8d:1a:cb:d9:42:0c:e6:c2:fb:05:9b:5f:ce:5e:
         f6:aa:88:98:be:77:46:9f:22:76:ac:d6:1d:a7:51:07:a0:d5:
         6a:f1:02:35:27:6d:d9:1e:bf:5a:e4:ee:e0:20:20:9c:16:7d:
         67:cd:fe:08:d2:ca:9d:9e:7a:d4:68:98:fe:11:a0:91:ed:6b:
         82:0d:fc:4e:84:1c:ad:78:2a:18:51:a7:70:a6:f2:fa:55:f4:
         22:e5:a5:7d:d5:b0:99:47:1f:27:3f:02:3c:40:bd:6b:63:7b:
         65:7d:56:e0:ef:5a:5a:9c:93:f3:84:42:81:70:d6:f9:fc:08:
         ae:ef:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:59:02 2026 by rpki-client