Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa
File:                     fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa (raw, json)
Hash identifier:          MAPAW06H+BrowFImz/T5rE2rqA4dpYMFdYTZrsHWBDs=
Subject key identifier:   36:C1:E3:5D:F1:C8:CC:E4:45:33:4C:F3:01:76:05:EB:AC:2C:66:62
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584F49746064C3D0A86EE3AF6AC0
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        66.178.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:60:64:c3:d0:a8:6e:e3:af:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2861435b-3d21-4237-8f96-faae90f94735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:63:d1:a0:fe:01:ec:46:93:ec:24:05:18:
                    4d:b3:85:34:43:1c:a5:26:2f:5f:5a:31:77:2d:c0:
                    88:18:cc:97:41:b6:47:60:4d:9a:b6:d1:f3:0d:7c:
                    e7:8b:60:7a:1b:ba:15:77:79:81:c1:bd:03:79:de:
                    a0:81:e6:da:06:61:7f:e9:97:d2:1c:fa:79:6f:90:
                    6d:83:c2:60:fd:c1:f6:08:4d:53:e3:59:4b:77:50:
                    ce:76:91:ec:33:ef:fd:3d:22:c8:24:b8:02:c3:61:
                    0f:6f:e0:0c:55:6d:84:c4:14:08:41:32:bb:ea:0d:
                    0f:68:bf:39:59:fa:fe:0e:ac:03:0f:b8:10:9c:6c:
                    52:77:9e:e1:7c:e7:9a:4c:85:f6:83:c7:75:ff:84:
                    7d:71:46:2c:34:33:e8:94:8f:cd:5f:f7:eb:eb:93:
                    db:fd:d1:84:21:37:5e:58:88:42:2e:05:93:a0:9c:
                    db:07:96:1a:f3:03:c4:b0:01:fe:99:4d:8e:21:47:
                    7d:74:a7:67:69:b1:21:1b:c6:77:a3:0a:2d:9a:f7:
                    b2:7a:40:1b:86:df:bb:3b:96:26:05:7b:ba:fc:cb:
                    dd:30:36:13:8b:4f:fc:8c:02:06:74:23:61:db:2f:
                    b8:01:a1:74:e6:91:4c:53:8d:ab:4c:c6:ee:6a:da:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C1:E3:5D:F1:C8:CC:E4:45:33:4C:F3:01:76:05:EB:AC:2C:66:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:25:90:39:2e:fe:03:b1:a5:1c:f7:bc:1b:58:d7:8f:79:5f:
         14:c7:bd:f0:6a:58:0a:7e:85:dd:0a:f0:30:fb:d1:8e:04:52:
         40:e4:9c:a7:cc:d8:54:55:4e:3f:c6:2d:24:e0:f0:04:16:43:
         df:e3:44:f3:e5:59:22:38:5a:d0:01:58:32:9d:58:85:5b:ec:
         fa:9c:32:61:99:12:9c:7a:74:46:96:6d:e4:d5:2a:4a:3e:cf:
         73:4c:cb:58:c7:48:59:33:59:e4:46:38:5a:5f:33:89:33:be:
         15:8f:61:9e:2d:09:2c:27:5f:f5:ad:25:d6:29:bb:b4:b3:78:
         86:1f:4f:f9:33:ae:49:f4:45:8b:ac:99:da:d2:37:45:21:2a:
         36:1d:88:54:5c:87:51:87:bb:69:7f:e9:5e:21:e0:46:b6:52:
         9a:cb:fc:58:34:cf:50:9e:3d:9b:3b:9e:df:e7:cd:fa:cc:dd:
         1b:2d:e2:e5:82:e5:60:1d:2f:d6:95:cc:ca:4f:15:4d:d5:d0:
         1f:81:8c:e1:b3:ef:8b:40:bd:5f:28:9b:72:18:fa:b1:f3:22:
         b4:94:ec:3c:76:d4:9a:90:53:7f:85:a8:e0:a3:b7:9e:08:bc:
         71:77:80:85:ae:a9:99:65:87:25:f3:8f:4e:97:30:d4:81:4f:
         fb:b6:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:00:48 2026 by rpki-client