Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/ee77fc08-8a2a-3964-b76f-21c67879fb01.roa
File:                     ee77fc08-8a2a-3964-b76f-21c67879fb01.roa (raw, json)
Hash identifier:          RltwqExb3VDJiQcagcsQPgxKsFALLoTx9B59u/u52kk=
Subject key identifier:   41:D5:42:7E:E8:FF:1D:67:F3:AA:42:BD:AC:77:96:72:2A:7C:01:4F
Certificate issuer:       /CN=2c2fd90f-0e05-4f71-b5cb-8a9269f851b3
Certificate serial:       010D0C9F4328584ED484C68D1E5974A3058F26D0
Authority key identifier: B0:C8:F7:D4:D0:7F:E8:C8:D3:44:83:DB:53:38:B2:65:B1:85:48:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/ee77fc08-8a2a-3964-b76f-21c67879fb01.roa
Signing time:             Fri 14 Aug 2026 03:47:25 +0000
ROA not before:           Fri 14 Aug 2026 03:47:25 +0000
ROA not after:            Thu 12 Nov 2026 04:47:25 +0000
asID:                     16509
IP address blocks:        192.152.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:84:c6:8d:1e:59:74:a3:05:8f:26:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2fd90f-0e05-4f71-b5cb-8a9269f851b3
        Validity
            Not Before: Aug 14 03:47:25 2026 GMT
            Not After : Nov 12 04:47:25 2026 GMT
        Subject: CN=15fdbd8f-f561-46c0-b0db-199da3b9a55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:df:20:86:c7:35:fc:07:0d:4a:ef:8b:fa:f7:
                    24:6c:3b:5a:33:6a:cf:2c:38:0c:37:26:41:47:d9:
                    0f:4b:b5:76:81:92:71:39:80:2a:5d:b0:33:4e:51:
                    66:90:5d:c6:88:a9:b1:58:22:72:6b:04:33:c8:2e:
                    8a:ff:31:1f:f5:ff:de:0e:d5:14:1c:31:4b:53:f2:
                    f8:d9:d0:ae:2a:5a:f2:b5:ea:cd:41:e0:84:1a:67:
                    d1:b5:f5:5a:3c:c2:93:42:3c:f8:c4:4a:25:51:6f:
                    ab:02:0f:51:92:e4:fb:2e:2e:f4:38:d0:59:6b:88:
                    2e:6d:c5:5e:63:9b:98:bc:5b:85:20:c5:ea:36:fd:
                    c5:6b:17:76:17:38:63:58:6c:01:70:f5:ce:38:37:
                    d7:01:e3:85:14:b5:34:d3:a6:f4:f4:0b:85:31:27:
                    d1:5b:57:42:f6:74:4c:d5:d2:f8:32:5c:c7:a7:cd:
                    96:e1:fc:8d:a3:ef:3e:bb:10:e3:13:d6:c3:46:15:
                    95:1a:31:23:b6:47:37:97:dd:f9:72:74:f6:9b:76:
                    75:9d:15:55:9a:fb:ae:9f:cf:eb:e6:31:9c:33:2f:
                    b3:8d:b5:d8:36:cb:f1:26:a5:e8:92:33:20:52:0a:
                    37:c3:79:e3:6c:9e:66:d0:66:05:a4:89:62:57:18:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D5:42:7E:E8:FF:1D:67:F3:AA:42:BD:AC:77:96:72:2A:7C:01:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/ee77fc08-8a2a-3964-b76f-21c67879fb01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.crl

            X509v3 Authority Key Identifier:
                keyid:B0:C8:F7:D4:D0:7F:E8:C8:D3:44:83:DB:53:38:B2:65:B1:85:48:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d4:be:e6:cb:b0:73:1e:5f:0f:e3:58:a1:62:bf:8d:44:0f:
         b4:24:30:b6:e5:58:d6:2b:2e:83:14:19:75:ca:3e:65:92:1b:
         8b:7f:69:49:a5:77:1b:f6:10:40:ab:9f:99:a4:cf:c2:79:06:
         6f:b8:2b:c8:94:b3:d8:e9:da:67:ab:06:ed:10:e9:f0:c9:c4:
         79:ab:3e:88:9b:ef:96:fc:0c:6b:e6:fb:2d:c1:c6:bb:62:e6:
         2d:d3:8b:af:68:e2:78:67:8a:0a:14:18:46:46:08:70:ec:db:
         42:b0:e6:e3:93:57:8d:ba:6c:5e:80:b7:d0:b8:5b:13:17:8b:
         81:72:89:29:bb:4c:67:07:06:31:1e:51:30:8b:79:f1:8f:ac:
         c0:e9:52:d0:72:88:7b:54:b6:79:44:a0:fe:d1:71:89:4a:4c:
         9a:70:52:8a:eb:d6:33:49:2a:a5:b9:52:c7:6e:9b:d7:1a:ec:
         bf:b2:13:0a:00:16:3e:9d:a3:c0:99:33:7a:02:a5:29:19:97:
         65:6b:a9:ab:a3:07:f4:e4:ec:fa:b7:62:cc:c7:32:4a:54:a4:
         5a:8e:af:16:82:0f:5a:bf:66:0c:e7:56:ec:e3:d8:28:91:37:
         a2:78:82:90:f1:1f:17:4d:b6:e1:69:43:91:6c:86:b7:56:7d:
         90:6a:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:26:00 2026 by rpki-client