Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1721b3d3-803b-3a06-bc0d-163bdfd0447d.roa
File:                     1721b3d3-803b-3a06-bc0d-163bdfd0447d.roa (raw, json)
Hash identifier:          4n+3PKsWBIYFwQtI3/5ZOo+lxPNfklLoiN2cvZ38c+w=
Subject key identifier:   49:79:E9:FB:90:B4:A3:77:74:D5:01:0C:8C:AB:87:6A:02:E2:18:DB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF7175C6861E4463314837E80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1721b3d3-803b-3a06-bc0d-163bdfd0447d.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     5065
IP address blocks:        66.93.64.0/24 maxlen: 24
                          66.253.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:5c:68:61:e4:46:33:14:83:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=70ee989a-7759-4c06-82b1-6ee7fb9bd071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:70:36:75:69:e7:60:25:cd:c9:7f:89:d7:c8:
                    28:47:3b:2c:e2:50:cd:87:d9:34:7f:b4:47:dc:aa:
                    45:13:a2:1f:66:97:33:a2:7d:31:0f:a2:0f:d4:ae:
                    e3:29:ff:2e:02:f7:89:31:85:3b:8c:cf:2c:c3:31:
                    f0:23:1e:f5:c0:c5:65:d7:be:25:67:fe:fc:a2:3b:
                    fb:47:02:fe:b9:99:b4:bd:07:87:1a:a4:03:7e:3b:
                    de:04:42:f5:01:b4:7a:3a:0a:30:df:15:a8:70:d7:
                    a7:8c:7e:f6:92:58:10:89:a6:dd:e2:0e:03:3a:f2:
                    ce:5d:ac:13:13:6e:5b:98:ac:d7:46:5d:30:ad:86:
                    34:d2:c6:b4:b6:41:1b:38:81:b6:ea:bd:05:37:9b:
                    ea:c3:07:d7:76:9b:fe:08:ee:02:3a:13:8e:51:f3:
                    89:58:fc:0b:52:e8:fd:1e:87:78:75:d4:01:52:c7:
                    1d:fd:93:be:ee:cb:0c:df:cd:2a:ee:f6:ea:3c:d4:
                    28:b0:b5:73:20:2f:9f:cf:9d:b9:53:91:85:46:dd:
                    6b:14:9a:59:f4:05:46:aa:91:a4:cc:79:d4:ac:20:
                    cf:fd:0f:12:1b:d9:1d:97:e9:ec:d5:ce:58:fe:8d:
                    14:cf:51:16:d6:9f:22:c2:af:36:c2:e7:6c:78:d3:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:79:E9:FB:90:B4:A3:77:74:D5:01:0C:8C:AB:87:6A:02:E2:18:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1721b3d3-803b-3a06-bc0d-163bdfd0447d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.64.0/24
                  66.253.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b4:1b:55:90:24:86:2e:10:1d:0d:13:18:f5:23:76:aa:53:
         69:ac:3c:4d:be:77:1e:55:8a:8d:59:17:6f:9c:6e:f5:32:b9:
         13:56:d2:4b:ba:d3:c1:f7:3a:45:04:ca:0d:4e:80:a1:58:06:
         b3:b3:23:25:61:8e:a4:a0:d6:1d:40:d8:09:5b:14:32:ae:03:
         43:cc:87:cc:33:37:8a:53:85:c4:98:8b:ed:8b:10:b3:9c:8b:
         ef:d7:7b:c7:35:1b:b9:98:7e:3f:a8:d9:60:7c:fb:91:e0:c4:
         f4:45:3f:f0:51:c7:81:5c:20:1c:69:86:6a:92:f6:bd:23:31:
         f1:84:71:bf:a8:20:98:2c:ba:f2:28:f8:14:49:db:23:0c:56:
         51:ad:04:da:01:b5:ec:f5:bc:d6:be:3c:15:56:71:9e:18:29:
         29:fa:58:4f:c4:19:12:45:e5:90:12:8e:e7:ba:0a:a3:61:21:
         ab:07:38:c4:ce:15:51:e8:14:68:9d:66:82:95:2a:14:78:d2:
         8a:63:6c:d0:d0:20:ff:90:2b:e3:21:3d:fe:48:b9:98:ed:b7:
         06:89:55:fa:fa:a3:6d:0d:1a:22:d8:d0:98:b3:4e:bd:78:04:
         31:51:fa:33:06:bc:e9:f4:d4:fd:da:fd:74:6a:67:a7:78:05:
         20:8a:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:33:09 2026 by rpki-client