Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/7e7ede58-eedf-36b1-b576-04d1f580f265.roa
File:                     7e7ede58-eedf-36b1-b576-04d1f580f265.roa (raw, json)
Hash identifier:          cqsngSkX3o3CNNlnFAH3jicj6YLCLjZVvop28OgeTyE=
Subject key identifier:   79:DF:15:23:F3:F4:24:72:08:20:E5:11:69:2B:F8:4D:C4:4A:00:BA
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584F4C3DE42F01C572A45820AEC0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/7e7ede58-eedf-36b1-b576-04d1f580f265.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     1403
IP address blocks:        66.254.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:e4:2f:01:c5:72:a4:58:20:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=4d5cccd5-dd68-47a0-9a63-b5e404acc5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:76:81:d6:3c:d6:3b:1a:55:65:d0:e5:ce:
                    d8:d1:3b:d3:76:aa:4f:cb:5b:d2:28:39:66:6d:23:
                    32:55:23:70:e8:70:30:65:b2:0d:f0:88:e0:f3:55:
                    be:ce:f6:33:7b:77:98:47:ed:2c:f0:59:be:d7:01:
                    10:5d:14:a7:f7:28:c9:99:6d:ae:ab:5b:6d:df:2d:
                    38:bb:63:86:d1:d6:1f:72:ca:cf:32:05:21:1a:a6:
                    6d:33:77:69:e0:10:fb:be:af:95:78:a1:0b:04:db:
                    17:81:77:f2:3d:99:4d:8a:0a:dd:55:c6:1b:0f:b8:
                    da:c9:0d:cb:b5:33:b4:02:87:80:e3:0e:3d:f0:e8:
                    cd:50:4c:19:fe:58:95:94:cf:1b:39:e2:01:6f:cb:
                    b2:05:d0:f0:9a:64:90:50:85:fc:40:82:12:46:c8:
                    b0:1d:02:05:d7:b0:ab:ce:3c:f4:b6:91:bc:71:02:
                    bf:8b:d1:ba:e4:a2:de:ef:75:88:0c:5c:ee:fd:78:
                    a7:32:ea:99:1d:7c:82:3e:53:1d:48:20:71:7d:89:
                    c4:c6:27:79:67:11:54:be:3c:9b:a5:5a:ec:e6:07:
                    52:c7:4d:de:fd:95:b9:c8:76:3c:56:e6:a2:29:6e:
                    71:3b:3c:ec:67:e3:6e:1a:9c:dd:80:ca:24:10:45:
                    57:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DF:15:23:F3:F4:24:72:08:20:E5:11:69:2B:F8:4D:C4:4A:00:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/7e7ede58-eedf-36b1-b576-04d1f580f265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:77:e9:0a:66:35:3c:10:c7:6b:09:6b:ce:93:71:9e:96:88:
         bf:01:a9:52:11:08:56:d2:e6:79:70:ba:84:fd:44:43:01:12:
         34:7e:58:46:19:98:eb:1a:82:fc:4b:47:57:46:ad:ce:e6:53:
         6a:b5:76:dc:53:0e:0d:5f:ed:bc:cd:25:73:77:5d:28:d1:80:
         f9:65:82:46:83:fe:40:16:84:de:8c:ec:87:04:2d:7b:6e:99:
         b1:a7:22:7b:88:d9:16:43:37:a9:e7:e6:8b:45:e3:fa:30:f2:
         c8:ae:db:2f:7c:64:a2:04:f0:15:ac:3c:ff:a9:66:a7:a3:8a:
         9f:e3:fe:48:11:af:73:cb:d2:6e:a0:a4:c3:9f:38:a9:d9:e9:
         5d:01:16:cb:56:36:e5:f9:37:ac:98:88:2f:02:b2:a7:28:f0:
         a6:51:3d:37:3b:a2:7d:77:1e:38:d5:be:ee:8b:2b:2d:83:ae:
         5c:5f:2f:f8:a9:65:e3:ef:93:86:5e:57:b9:c6:b2:bd:32:a9:
         ba:c3:46:73:66:b9:4d:54:ba:bf:06:bd:4d:83:33:e6:66:a0:
         02:76:64:61:83:5b:8b:ee:b4:31:1e:82:72:2e:56:31:30:3c:
         12:ea:8f:42:c9:61:e4:9a:f3:fb:1e:b6:00:22:b4:31:28:03:
         b5:48:ea:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:10:35 2026 by rpki-client