Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa
File:                     3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa (raw, json)
Hash identifier:          chGAiFIxNqq3GHtNJv69AveaDrsNF51iB2ki1kTWSLY=
Subject key identifier:   2B:A9:93:9F:41:B7:26:91:86:6F:00:FC:95:AE:D1:A1:61:F7:8C:EC
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584E8F54F6E8F7580DCB85031D80
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     2559
IP address blocks:        66.185.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:f6:e8:f7:58:0d:cb:85:03:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=750b2909-b283-43b0-8586-be3e7d560cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:a1:04:89:36:24:f3:4c:57:4d:34:cb:dd:
                    ab:92:b8:46:94:a9:c6:70:09:ed:e4:f8:28:59:2e:
                    75:b9:e7:8f:43:04:cf:d8:d2:2e:db:12:0e:75:df:
                    23:5a:6e:19:5e:21:dd:70:e8:ea:44:6c:63:ea:98:
                    6b:25:e2:f1:0c:80:91:d0:74:bf:2a:43:4f:56:05:
                    2d:30:53:6c:e7:c9:e8:4a:05:38:ba:c4:dc:d1:90:
                    24:30:bc:11:ef:9a:53:39:af:46:77:db:2e:a4:49:
                    fd:cd:b8:11:15:9b:8d:89:75:70:ad:c4:b6:3a:e3:
                    e7:9e:a2:a3:82:a1:97:55:b6:8b:ef:a7:e9:64:b1:
                    8b:aa:33:02:9a:f0:f2:b5:84:6b:7b:c5:9c:ac:60:
                    96:67:84:34:ec:2c:04:51:10:a6:ee:10:04:4f:2b:
                    22:84:a0:79:e7:db:57:d4:1e:6c:b6:62:a2:3b:08:
                    a0:28:55:40:c5:c1:8d:e2:f9:57:31:ee:ae:d4:14:
                    10:83:a5:f5:36:72:c7:94:e1:17:09:67:70:2d:c4:
                    12:a6:29:73:bb:14:4b:38:6f:50:d6:e2:00:3e:9a:
                    bf:58:a7:65:ad:99:f8:2a:e6:3c:b9:3c:f3:9f:fd:
                    e0:0d:da:7e:f2:f6:70:bc:e0:5a:87:fe:02:13:d0:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A9:93:9F:41:B7:26:91:86:6F:00:FC:95:AE:D1:A1:61:F7:8C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:7e:27:8d:56:6c:5a:fd:9f:53:ca:35:1b:82:84:d1:c6:48:
         ba:f6:4b:14:5f:2f:48:31:35:06:16:16:a5:f8:6f:9e:13:60:
         7a:cf:f1:bb:4f:67:c4:71:c3:92:f4:65:f0:38:c8:14:97:ae:
         90:3d:5d:2a:f2:6d:4e:ae:85:03:3a:e4:b9:0e:17:b5:f3:c2:
         e0:2b:d6:d8:70:07:66:1e:d9:af:93:21:13:c7:a3:48:9d:c1:
         28:55:41:38:75:0f:0f:cf:2c:a6:d8:fb:34:5b:ee:b5:ee:44:
         39:a5:ca:9b:9b:af:98:e1:7a:71:ad:7a:f2:cf:74:75:e1:3e:
         75:1a:6d:a0:e0:5c:b1:ff:4c:5f:b5:21:d7:90:64:91:f9:64:
         a7:67:9d:1e:c0:aa:93:5b:37:cf:e1:dd:13:c9:f7:ec:67:2d:
         b9:c8:43:18:da:b9:2c:a1:82:82:9b:85:75:ba:73:1d:48:53:
         98:10:fe:b2:4d:7b:48:5d:00:99:5e:cf:a0:00:a1:92:3a:d0:
         c8:0b:6d:1e:be:3f:82:91:3c:a3:29:af:ca:d7:32:0f:9d:4b:
         4b:6f:f9:db:c2:55:99:65:7d:02:ae:28:31:44:d3:69:81:02:
         ab:06:bb:2a:b0:f3:b8:46:d3:c9:06:82:ca:75:a4:fb:cb:f6:
         c1:a8:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:02 2026 by rpki-client