Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94233acd-14ba-38ff-a254-8bd4238f8e8d.roa
File:                     94233acd-14ba-38ff-a254-8bd4238f8e8d.roa (raw, json)
Hash identifier:          PUI3RgG/dxtFYvCyCXpJbJS358l8N+E1NqHFCjJz1Aw=
Subject key identifier:   4B:3D:0A:D8:D0:7A:75:3D:D3:40:29:41:D5:63:79:B4:0E:02:B1:AD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F4975F9F62879B641C668FB40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94233acd-14ba-38ff-a254-8bd4238f8e8d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        66.54.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:f9:f6:28:79:b6:41:c6:68:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0f56d096-23df-4e68-8b89-d8b872cc8c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:49:91:50:64:27:c0:e8:30:2b:2e:5f:18:
                    98:af:26:73:5f:78:ef:db:5d:bf:5e:89:54:70:85:
                    f9:8a:04:31:b7:10:82:43:f6:1f:78:06:c4:80:2f:
                    21:3c:f4:ac:52:6f:c6:24:d0:cd:63:96:4d:6a:fa:
                    69:ae:fe:30:c6:9c:33:77:7c:b3:53:80:d4:fc:d9:
                    b5:eb:06:90:ef:18:6a:6e:c0:67:21:b5:c5:5b:a1:
                    90:8c:7a:d8:b5:0a:09:90:42:27:0a:67:2b:e8:73:
                    bf:00:74:a2:c1:38:dc:7c:a3:f5:3b:d2:56:bc:ee:
                    42:8c:d1:53:b6:7e:85:6b:03:9d:b1:98:a6:ff:84:
                    8b:eb:74:8d:4b:9e:a7:48:12:18:ed:4f:08:a6:47:
                    6d:9f:a3:29:d5:46:b3:d4:ae:f4:6d:93:53:60:b4:
                    32:3c:98:2f:97:cb:75:bf:2b:b1:40:fb:a6:ca:8c:
                    ca:2e:eb:fb:69:d7:c9:cc:68:c3:79:2a:a1:16:ba:
                    7e:10:05:4b:f8:52:58:b4:02:7d:1f:23:d9:6d:fb:
                    e9:e9:23:6a:e2:51:0e:b2:4f:2e:1e:b7:f1:16:48:
                    b6:cc:b2:79:da:90:6e:31:ff:28:31:0f:c8:34:60:
                    9b:22:ef:a4:72:69:e1:d6:b5:39:74:eb:9b:31:3d:
                    02:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3D:0A:D8:D0:7A:75:3D:D3:40:29:41:D5:63:79:B4:0E:02:B1:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94233acd-14ba-38ff-a254-8bd4238f8e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:09:48:f3:3c:9a:ee:1a:fb:ff:23:48:23:eb:d3:40:b8:c5:
         3f:bb:0e:32:1a:83:96:b2:31:18:0c:6b:05:da:4a:be:02:25:
         0b:aa:09:be:e7:09:e2:33:46:f2:19:c7:16:bc:e7:95:9e:1a:
         d2:83:23:92:b7:7a:0d:a7:97:3d:d7:70:80:60:8c:b4:95:0a:
         21:b3:be:21:6e:fa:f9:7c:5c:ae:27:28:91:f2:91:56:31:12:
         1c:24:d4:92:90:5b:ab:4c:63:ef:6f:5f:c8:a3:83:b7:ec:28:
         f6:62:90:70:85:06:f2:d2:a0:e8:f1:33:4d:7e:0e:74:83:85:
         c3:7b:33:8f:24:37:bd:7e:77:6e:b0:16:a1:8f:43:dd:ad:f9:
         63:69:10:12:5f:3e:74:5e:ab:1d:8f:63:3b:31:b8:d0:d6:6d:
         6d:92:9f:e8:d0:85:f0:12:8c:5e:35:d7:7a:48:2b:47:ba:7c:
         43:7e:fe:61:28:0c:03:7e:8a:29:cd:d7:9b:6f:11:72:8f:97:
         cb:bd:7d:ec:d5:ee:0d:94:16:88:c6:1c:88:fe:ed:f1:cb:1a:
         31:cf:5f:e3:31:a0:4a:ee:2a:22:03:84:88:a9:f1:5b:42:11:
         c9:e0:96:3f:ca:1f:c8:bb:ef:53:7e:63:3e:8a:09:e2:b0:bc:
         97:ff:44:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:49:25 2026 by rpki-client