Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/0a4f85f8-d007-3b6c-b72a-222b64951050.roa
File:                     0a4f85f8-d007-3b6c-b72a-222b64951050.roa (raw, json)
Hash identifier:          W0fHrjbgpWhI0ZryuzYWLJVnaEy31PDE/oYG9cP1row=
Subject key identifier:   86:32:EA:97:C6:08:72:9D:AA:FE:E2:D1:E2:DC:62:94:F5:F4:93:BF
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328584DCDC5A279A5F01A49F205B800
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/0a4f85f8-d007-3b6c-b72a-222b64951050.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     88
IP address blocks:        66.180.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a2:79:a5:f0:1a:49:f2:05:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=41c94204-f944-41e1-bd5e-1b1fde8bfa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:6e:a6:ef:39:d7:44:53:dd:b2:9b:d5:5e:
                    e1:0a:15:52:76:aa:25:c4:f3:df:61:b4:75:99:bc:
                    d4:e3:e8:a8:90:bb:5f:87:86:60:08:7c:19:7f:26:
                    92:ed:f0:90:77:49:d1:d4:b8:28:e7:75:7e:ef:c1:
                    85:fa:01:39:68:a3:a9:64:1c:16:d4:0f:6f:ba:d7:
                    31:1c:82:b8:59:8f:40:dc:0d:9a:9c:ab:7e:2a:79:
                    1b:d5:e1:55:e9:36:33:9f:0a:6b:74:d5:3c:16:86:
                    b9:32:3d:0e:74:86:29:b8:35:e4:34:d0:46:1e:f7:
                    a0:4e:20:35:07:55:f4:45:1e:23:cc:9a:f7:28:00:
                    85:72:d1:86:89:11:2e:d8:71:a5:86:7c:11:c2:c2:
                    35:88:51:65:a4:a6:3b:96:df:0d:1e:70:1e:67:fe:
                    cb:46:9a:41:75:ca:43:63:a7:ea:f6:4e:c6:af:79:
                    eb:00:ea:8a:ac:67:eb:22:f6:12:e0:f8:50:1d:3b:
                    85:9d:59:fb:0f:48:90:9b:a7:e7:be:cb:f7:15:26:
                    8c:85:53:a0:13:6f:c9:3e:8c:f4:c1:70:38:cf:9f:
                    b7:e6:fa:2e:3d:1c:37:90:6a:47:ce:cb:89:d7:38:
                    01:89:5c:1b:ce:8c:d8:49:87:24:92:ef:dd:18:e9:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:32:EA:97:C6:08:72:9D:AA:FE:E2:D1:E2:DC:62:94:F5:F4:93:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/0a4f85f8-d007-3b6c-b72a-222b64951050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:6f:f8:fc:8a:9f:df:1f:12:f4:cc:b6:1b:f9:33:6f:78:68:
         d9:ba:48:d8:55:ed:68:ed:b2:70:4a:1b:bc:15:8c:39:23:4c:
         4f:95:a9:c0:6b:f8:8f:c1:f4:9f:8d:49:ba:fd:e0:b8:37:9a:
         a8:2a:76:74:e6:30:f2:e8:4e:3a:62:5b:00:19:cf:a7:00:63:
         e3:22:4d:64:cf:60:49:fc:e7:fe:f6:95:78:14:bb:a9:1c:ef:
         b5:59:29:f8:eb:2d:d9:50:35:50:0c:61:ce:e2:55:c9:d4:71:
         af:d7:7e:eb:37:a0:54:94:d2:ee:c8:2e:84:b2:c3:6c:46:09:
         dd:9c:19:25:3d:9a:c0:9d:ae:55:3b:9b:a6:21:a8:df:ed:d5:
         4f:2f:c1:55:67:b2:01:b6:79:6a:2b:5d:f3:f1:46:b4:71:00:
         04:51:e8:eb:0a:b0:8a:66:36:2a:04:ae:f9:bd:0d:b4:7c:d5:
         33:f8:6c:85:f4:02:61:5e:8a:4b:53:57:07:a0:8b:d0:35:27:
         d1:3f:c8:97:08:56:91:62:72:0b:0c:80:37:da:bb:11:48:cd:
         3f:ae:40:f0:67:67:3b:27:d6:d2:05:22:e9:5b:0d:8e:b4:3d:
         ec:64:32:2c:ef:61:a8:f1:f0:c3:a9:f1:c5:1c:61:2f:eb:1e:
         0d:b9:1a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:22:55 2026 by rpki-client