Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/57bbcea5-b469-3fcd-a8d8-d1ff3e78de83.roa
File:                     57bbcea5-b469-3fcd-a8d8-d1ff3e78de83.roa (raw, json)
Hash identifier:          2Hj2VYUppH++Kr7KPaJVigW8O0bnXULCGzx9JC+hVnQ=
Subject key identifier:   34:EA:19:2D:EE:E0:66:DC:87:34:71:79:AE:2D:49:F2:5F:04:CB:04
Certificate issuer:       /CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
Certificate serial:       010D0C9F4328584F4976D1574C3631A8D7B10600
Authority key identifier: 93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/57bbcea5-b469-3fcd-a8d8-d1ff3e78de83.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20371
IP address blocks:        66.111.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:d1:57:4c:36:31:a8:d7:b1:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=75e50cec-75d0-4f58-9ffa-3458d4092cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0c:9d:0d:01:8c:cf:a3:ff:70:f2:41:2c:58:
                    45:13:13:60:68:2f:8a:72:a2:43:35:1f:ed:b9:8f:
                    c0:2f:3e:2d:f0:4c:a6:fc:48:f6:f5:3c:65:6a:fe:
                    65:7a:62:e0:b4:d6:9c:ef:c5:00:4d:aa:0e:df:06:
                    c4:36:80:04:81:b4:86:59:93:16:6a:72:55:33:9f:
                    23:1e:82:2c:e4:6c:ee:5c:80:f0:92:5e:bd:1e:8c:
                    ff:a0:4b:df:db:11:2b:98:b8:0c:a7:dd:2d:e2:bf:
                    29:e1:1b:b6:1e:c4:9f:de:ff:62:bf:4e:51:89:a7:
                    6e:71:b3:60:c6:ce:bd:1b:41:e6:39:5f:12:ca:5f:
                    ee:30:e2:6c:8f:e7:e3:0d:f1:2a:8f:b1:75:25:3c:
                    df:5f:b1:09:5f:3c:47:af:7f:52:89:74:51:3d:84:
                    1d:2e:3f:40:92:4c:11:34:a8:45:68:f2:16:ef:f7:
                    b4:1e:26:cb:e5:9d:27:81:16:6c:1d:af:5e:0f:1f:
                    ca:66:28:49:6c:73:b8:15:97:90:e9:22:9f:9d:3e:
                    20:cb:0f:c9:e1:56:24:c0:38:df:d8:a9:7a:4b:ea:
                    1a:15:5b:5a:76:fd:98:b8:e8:48:66:cb:3a:be:24:
                    94:fb:e2:85:ee:1a:db:e4:ea:30:56:92:68:51:fb:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EA:19:2D:EE:E0:66:DC:87:34:71:79:AE:2D:49:F2:5F:04:CB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/57bbcea5-b469-3fcd-a8d8-d1ff3e78de83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl

            X509v3 Authority Key Identifier:
                keyid:93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.111.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:79:6c:ce:d6:0f:86:42:69:8f:32:0f:eb:8c:8b:d6:90:ea:
         6e:ec:2b:78:87:ba:4f:79:98:17:b4:9e:d4:9d:55:f3:0d:48:
         14:fc:42:7a:37:a2:97:22:6a:94:a7:13:2f:55:52:ab:79:b8:
         46:f2:c7:1d:cb:9e:bc:47:60:08:fc:47:8c:80:7c:0a:d4:c4:
         d0:92:79:97:1c:ec:85:51:a9:13:59:80:22:d2:fc:cd:c5:d7:
         d1:a8:4f:a3:ef:95:45:fa:c4:f2:af:ee:4b:42:4c:9f:bf:6e:
         e5:4c:79:2d:6e:26:66:7b:00:11:a8:4e:04:f1:ca:72:08:48:
         55:88:9e:b3:5d:ae:1e:9e:fa:f2:0c:5e:79:19:56:e0:11:12:
         e7:c9:71:52:8a:e4:b2:6f:40:f4:90:a4:e4:09:50:ab:2f:01:
         89:59:f0:0c:3c:19:26:79:99:20:ed:a2:0d:91:76:46:2b:b5:
         cc:21:94:f6:ff:d8:e7:32:a1:99:79:0d:c4:67:e2:b3:c0:1c:
         65:66:f7:4a:b3:3d:9c:c3:a5:00:7d:46:f4:43:74:50:67:c4:
         78:dd:e0:6b:fa:ec:2a:ba:6b:d6:7b:94:7b:9e:13:22:63:be:
         9f:d3:d3:76:3d:51:b0:5c:ab:a0:88:4e:70:f2:c6:be:2e:54:
         7f:1a:26:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:09:49 2026 by rpki-client