Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/63b85c96-7184-3bf8-8b2c-d264a6c3f5c7.roa
File:                     63b85c96-7184-3bf8-8b2c-d264a6c3f5c7.roa (raw, json)
Hash identifier:          Wrdz1MXjzwVBnIeWyJsdiesslWUmnaHQRp6tWRAvOe4=
Subject key identifier:   85:78:14:B3:99:85:88:D0:27:3D:A5:85:45:87:D9:8A:7D:45:1F:F6
Certificate issuer:       /CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a
Certificate serial:       010D0C9F4328584F056D30F7C9683DA49FBAD0C0
Authority key identifier: F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/63b85c96-7184-3bf8-8b2c-d264a6c3f5c7.roa
Signing time:             Mon 31 Aug 2026 16:14:30 +0000
ROA not before:           Mon 31 Aug 2026 16:14:30 +0000
ROA not after:            Sun 29 Nov 2026 17:14:30 +0000
asID:                     58026
IP address blocks:        104.166.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:6d:30:f7:c9:68:3d:a4:9f:ba:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a
        Validity
            Not Before: Aug 31 16:14:30 2026 GMT
            Not After : Nov 29 17:14:30 2026 GMT
        Subject: CN=315dc3b4-9ea6-40a5-bd7b-faf594143861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:45:d0:c4:0c:d2:3d:64:93:72:31:99:3f:
                    7a:1b:a1:a2:fb:0e:bd:8b:93:e7:9f:5a:c5:1f:7a:
                    b3:e2:03:f2:f0:37:a3:15:a6:a5:4d:c7:b9:5c:fb:
                    45:95:35:21:f7:5e:06:49:35:21:6f:70:da:de:0c:
                    be:ea:ab:44:16:fa:cb:45:e5:80:2d:0b:c5:06:fb:
                    39:eb:a3:d8:a1:41:4e:dc:da:a3:87:4f:cb:4e:cc:
                    57:c1:b6:06:a5:3f:d6:d9:80:1f:78:60:1f:b6:4e:
                    eb:00:cb:41:c1:00:df:fd:d4:3e:39:27:92:06:c9:
                    c7:d6:91:82:9c:69:d6:6f:68:50:6b:ed:dd:7c:07:
                    c8:20:aa:b6:3b:61:59:93:bd:9c:9f:90:f0:45:dd:
                    5a:f6:86:72:68:a3:96:4e:7f:5e:74:3c:cd:7c:25:
                    93:ac:f9:6b:02:e5:03:3a:af:aa:52:a8:ad:e0:28:
                    d6:ee:98:b6:28:9d:8e:26:4c:eb:b3:a9:f9:e7:bb:
                    da:fb:35:63:13:54:2a:6c:3d:3a:f4:cb:16:85:24:
                    d6:4c:61:73:b9:d5:53:50:d2:e2:d6:10:82:d1:52:
                    eb:5e:d4:4d:dd:68:b7:8c:53:dc:31:7a:52:d6:7e:
                    68:b5:d6:92:8d:a6:88:2f:59:dd:42:3f:85:bf:b3:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:78:14:B3:99:85:88:D0:27:3D:A5:85:45:87:D9:8A:7D:45:1F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/63b85c96-7184-3bf8-8b2c-d264a6c3f5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:01:c8:85:e2:1d:5c:44:fc:5b:da:6c:79:b5:2a:a2:b3:87:
         fe:a5:6a:ec:e6:82:fa:ea:f5:2d:b8:fc:a6:be:ff:7f:cc:47:
         6e:9c:db:6a:15:0f:48:dd:43:48:f8:0b:cb:71:ed:5e:fe:e0:
         10:bd:53:9d:03:f1:9d:c0:08:96:8e:13:45:2b:57:b0:72:f4:
         14:aa:e1:9c:10:4d:f6:28:92:b5:ac:77:56:54:7b:48:68:0b:
         c5:ae:9f:25:ba:ad:b4:5e:90:ed:0a:2c:55:34:77:ed:43:58:
         7c:73:59:0f:64:19:62:b8:fd:d6:26:1b:c5:63:b9:82:d6:c6:
         4a:54:4e:ef:71:f1:f7:77:2b:96:a5:b9:69:04:22:ed:42:f3:
         e2:bf:30:cc:e1:a7:b3:b8:52:7e:c5:7c:bf:16:f1:65:0f:ac:
         8e:a1:cc:b8:60:4e:8f:7e:a2:9d:b5:d4:63:f6:18:e0:b6:2c:
         4e:b0:3b:c3:9a:d3:a4:87:4a:93:3b:38:a7:90:95:b1:c7:38:
         c7:22:86:1f:ec:b8:91:ab:b2:95:d8:90:6f:4c:83:fc:c8:f9:
         19:bd:e4:d3:25:3b:26:84:17:aa:12:c8:cb:4f:55:bf:d2:27:
         76:a1:2e:24:4d:4d:53:e9:d7:89:93:06:2f:68:e9:f5:37:e6:
         b2:12:2d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:40:11 2026 by rpki-client