Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9b9d0694-ffe5-3f08-acd7-9b277f185b47.roa
File:                     9b9d0694-ffe5-3f08-acd7-9b277f185b47.roa (raw, json)
Hash identifier:          fjABVMZC84GHPavpt2jTxuM/g2PTbm35rUbsBLZMJ3o=
Subject key identifier:   C7:ED:11:7E:41:05:48:25:AC:D2:AE:BD:BF:66:A0:67:DF:BE:9B:07
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F49889BF52F9C068C7222FEC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9b9d0694-ffe5-3f08-acd7-9b277f185b47.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        216.75.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:9b:f5:2f:9c:06:8c:72:22:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fb2a149b-d37a-47db-8dc5-33dccda7d656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:1a:51:d3:7f:25:d4:a1:0a:c8:41:d4:bf:
                    74:4a:9a:52:a6:10:96:cf:74:4e:78:7b:7d:8f:1c:
                    b9:84:3b:37:5c:de:bd:55:15:d4:a9:04:07:5d:ee:
                    b0:e6:5a:3c:4f:44:4b:ea:8d:2d:46:b1:43:0f:34:
                    86:70:ae:2a:fa:cc:23:db:a4:9d:c9:ce:6c:29:32:
                    63:96:1c:2d:25:95:fc:cf:e7:8e:31:cc:8e:1c:84:
                    df:d4:49:6b:58:a6:76:a4:c8:b5:85:af:f4:2c:82:
                    dc:28:44:b1:e1:8a:a6:b9:14:d5:45:7b:1d:10:63:
                    34:e7:96:fe:b9:8d:36:95:a0:da:51:2f:56:c4:48:
                    e0:ca:df:32:5e:e3:32:48:96:aa:d3:03:cb:e3:7f:
                    41:e9:d0:6a:df:81:1a:1d:57:a2:db:c9:bc:d0:12:
                    3a:55:f0:73:0a:30:e4:77:f4:82:be:58:6a:2c:ec:
                    70:dc:75:d1:bd:e5:38:c4:01:dd:70:45:1a:de:b0:
                    45:61:af:2f:ce:ae:ff:2f:65:51:16:a2:59:b3:7f:
                    66:de:b7:f5:16:47:9e:cf:39:aa:1b:15:e2:d0:7f:
                    e9:1d:ff:72:5a:86:74:84:8e:9c:db:f6:0a:4c:e2:
                    c9:67:66:86:57:b9:b9:ae:85:5b:65:52:fb:76:31:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:ED:11:7E:41:05:48:25:AC:D2:AE:BD:BF:66:A0:67:DF:BE:9B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9b9d0694-ffe5-3f08-acd7-9b277f185b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a3:7f:e4:ed:95:d7:9d:45:3b:53:9a:bc:2d:83:13:79:f0:
         6a:56:db:01:81:7e:67:dd:7f:cc:91:db:c2:e8:36:f8:c0:aa:
         49:26:58:24:43:f4:6f:e5:0b:19:98:23:d9:80:fa:96:b8:79:
         f9:73:82:e6:11:e3:78:7c:21:9a:04:1e:8c:e4:ab:e4:d7:3e:
         94:14:ad:bd:36:a7:4d:ca:ea:d2:aa:8f:b8:82:89:e3:5f:0c:
         28:2d:5e:24:a9:20:1f:1a:48:f4:eb:db:cf:cc:8e:69:98:c6:
         0a:83:f9:f8:3b:e8:22:07:0b:a2:f1:d9:88:6e:b8:8c:26:e9:
         6d:14:e0:d4:8e:25:39:8e:4c:5e:ce:90:7d:06:49:a0:1d:c4:
         74:0a:f3:ce:fa:01:4d:03:10:97:1d:e7:c7:73:c2:58:a9:2a:
         bf:ce:92:a7:7a:f6:69:44:6b:16:12:46:b8:d6:dc:5c:e6:59:
         b3:72:94:35:24:6a:a9:6d:7a:bc:42:27:e1:bb:df:aa:be:f0:
         28:b5:60:e9:ef:c7:56:f9:17:22:8f:63:1c:3a:50:7d:ac:b3:
         5c:0c:41:ba:bb:8a:a6:d6:fb:74:ac:e1:57:04:50:3d:4b:3f:
         0f:cd:3e:fc:f3:eb:a9:93:c0:5a:8c:14:8f:ee:0c:ae:96:2b:
         15:20:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:57:15 2026 by rpki-client