Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa
File:                     7a58c066-a3a1-386d-87a0-7cb55812f128.roa (raw, json)
Hash identifier:          qeMO90biNxkwnCsoDDh7W9G7+DlMKXbn6QIznkv2dkM=
Subject key identifier:   F9:F6:DE:B9:29:12:0C:80:02:49:AE:0A:89:E9:5A:CF:C5:3D:1F:40
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F4328584F4976CEFF2C8367459B99D000
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15171
IP address blocks:        64.66.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:ce:ff:2c:83:67:45:9b:99:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b4df3b1d-2dc4-4f30-95a2-64f1461559f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:ea:1c:61:34:1d:2c:01:09:ba:69:6c:90:
                    7d:90:11:22:82:1e:41:b0:bf:4a:47:57:88:f8:68:
                    3c:6c:cc:60:f9:2f:c8:34:74:ea:6d:76:52:58:26:
                    07:0b:d7:a8:6c:e3:ed:83:05:ab:1d:54:14:9b:f1:
                    27:c3:8e:84:a0:63:79:d4:dd:9d:1d:03:57:93:d6:
                    76:db:46:55:23:35:08:33:e2:08:7e:52:e9:43:a0:
                    9f:e8:d6:6a:47:a9:80:62:8f:34:fd:cc:20:33:8e:
                    49:48:7e:f1:0f:f4:85:7a:db:3c:e0:a6:33:df:49:
                    25:35:fb:8d:b7:38:d6:e6:6c:54:fb:e5:f8:1e:31:
                    e3:5f:62:82:3f:51:df:d0:fd:99:57:f2:d5:d0:5d:
                    c3:2c:fe:e5:b6:26:2e:d9:82:ea:df:1b:af:99:7f:
                    93:b4:59:93:70:a3:a5:02:be:4b:bb:f5:14:50:c8:
                    ad:ad:60:c5:c6:b5:ca:d1:8a:97:e1:ee:21:41:52:
                    59:1a:a4:ef:24:3a:28:80:66:75:e2:43:33:4b:ab:
                    ab:31:f8:f9:30:54:cb:3b:52:68:c5:2b:58:92:6e:
                    eb:bf:b8:be:c4:60:6b:c6:64:39:2e:aa:b0:99:13:
                    fd:c4:10:90:7c:a1:1a:fc:b9:67:6f:b1:83:5f:44:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F6:DE:B9:29:12:0C:80:02:49:AE:0A:89:E9:5A:CF:C5:3D:1F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:92:8e:00:cd:35:ea:49:0f:00:f5:f4:4a:4c:dd:a1:ef:fa:
         68:68:72:dc:1e:ef:72:d6:6e:64:a7:6d:d2:41:8f:71:d4:89:
         0e:bf:da:06:45:a4:27:f7:09:49:94:a9:15:74:48:36:62:43:
         ad:d3:f4:02:2a:87:c4:27:11:32:5a:75:5f:07:7f:a1:03:44:
         a4:14:43:dc:fd:d1:91:e3:46:0c:a0:1c:fa:1f:3b:6f:5e:07:
         ce:68:7a:30:39:7b:10:40:80:29:71:3e:11:86:51:39:10:e5:
         eb:a9:73:6f:2f:37:c5:99:bb:0d:1c:6e:ba:88:12:b7:3a:a5:
         05:a8:0f:8c:e4:85:f1:f1:6d:30:c4:30:39:89:ac:96:9e:53:
         68:ea:3d:ca:35:e3:95:38:33:01:c2:d8:71:cb:73:50:4a:53:
         a9:80:0b:fc:f5:51:0f:3a:ed:e0:64:ee:0b:11:1f:e5:4c:fd:
         62:4d:68:69:18:87:77:8f:88:5d:5d:d2:94:c5:71:39:05:a1:
         e7:77:f6:5f:64:7c:44:4c:f8:70:ae:0f:c4:b9:ce:f8:ae:79:
         35:d7:07:24:88:d5:03:15:49:b5:97:64:dc:ec:92:78:b4:bd:
         07:65:b5:e3:df:95:33:a4:f2:93:d3:17:e2:15:2e:90:db:6e:
         24:7c:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:17:25 2026 by rpki-client