Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8a6047ae-cfe1-3f67-857d-1905d6801b3e.roa
File:                     8a6047ae-cfe1-3f67-857d-1905d6801b3e.roa (raw, json)
Hash identifier:          gDmqz3i9fjTL4/jS58wPwpRepaVpV0gJ5zgF3S81nhc=
Subject key identifier:   FA:58:07:F4:1C:8C:B6:F4:8B:E1:B3:48:F1:A0:88:B0:89:FA:75:33
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E8DEF96C9BC5B12C01ED61800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8a6047ae-cfe1-3f67-857d-1905d6801b3e.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     399955
IP address blocks:        216.46.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:96:c9:bc:5b:12:c0:1e:d6:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=704d1b6a-58ea-425c-9206-9a0fd56d79d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:94:ec:aa:8a:68:f7:0a:05:5a:85:a6:d8:
                    72:dd:a9:95:40:cd:0c:c2:10:e9:e2:94:a7:46:1c:
                    96:32:83:2a:4c:1c:8d:79:78:d5:8e:1c:a3:df:18:
                    43:8d:1f:cd:ec:13:74:cd:36:cb:66:42:06:42:92:
                    db:91:69:b6:f9:94:22:26:ad:21:3f:98:a1:10:27:
                    48:9c:c4:90:d2:63:22:a7:80:45:de:f4:2c:d1:26:
                    1a:30:5a:59:c3:8a:e7:8a:b0:7e:1f:18:f4:64:24:
                    25:36:33:a0:ab:b3:9d:a8:bf:db:3b:73:2e:cf:75:
                    71:90:e9:8c:d8:c8:6d:2f:93:ec:25:da:80:52:6d:
                    d2:eb:4d:b3:ac:07:5c:5a:3c:20:90:6c:60:af:e5:
                    06:74:47:6a:b9:03:84:b1:88:62:e8:56:5f:1f:7a:
                    da:e7:84:d4:5d:ee:48:65:e2:c5:a7:d1:e2:43:9d:
                    d3:7e:7d:eb:02:0e:b8:8f:2b:ca:85:aa:cf:0c:87:
                    5e:84:bb:05:ab:85:c1:35:54:1d:93:da:f3:b5:f1:
                    7c:30:ff:e7:f7:6c:65:e9:ef:31:9c:f4:b6:58:09:
                    e7:35:03:b6:96:32:eb:a0:9e:9f:61:e2:df:c6:61:
                    7d:4c:b6:2f:a0:05:73:20:93:d6:ff:c9:95:82:78:
                    3d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:58:07:F4:1C:8C:B6:F4:8B:E1:B3:48:F1:A0:88:B0:89:FA:75:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8a6047ae-cfe1-3f67-857d-1905d6801b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.46.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:5f:42:b7:72:54:ca:de:5c:ff:35:80:87:c3:1d:cb:9e:b9:
         94:17:9d:f7:73:da:59:05:9e:0b:15:cb:5a:80:90:2a:1b:cd:
         9f:23:97:cd:64:91:56:63:76:62:12:58:46:08:cc:14:4b:bd:
         f2:06:67:00:24:fc:17:49:e5:b4:4e:61:13:c4:11:7d:7b:83:
         ee:16:e1:11:09:e8:da:8e:76:98:a2:8a:14:8d:de:48:33:78:
         23:a3:1f:4d:64:d9:4b:0c:0f:56:10:3e:78:c7:99:ea:4c:78:
         e3:ad:b8:77:0f:94:bd:c3:61:a4:b7:30:93:d9:2b:9f:83:ec:
         26:3d:e0:2f:e7:b2:9b:c1:2c:27:0b:e9:77:7f:bb:e8:a2:9e:
         de:0e:0b:fb:79:8d:be:93:ce:5e:3e:fb:0f:93:cd:c8:67:c0:
         69:c9:66:7f:44:7a:f0:83:17:5d:a4:db:7b:7a:5f:37:a9:dc:
         91:1f:f9:62:6d:bc:bf:1b:67:aa:dd:79:15:a6:b7:51:04:80:
         24:d9:d2:bb:45:1b:c9:6f:03:6f:d3:f2:41:c5:86:49:44:24:
         a8:9c:f2:b7:9e:23:d3:54:c5:d0:1f:d0:b1:80:2e:b0:d2:ff:
         2d:04:11:43:e1:2b:a3:41:fe:de:0f:a3:b9:d8:81:1c:52:dd:
         df:bc:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:28 2026 by rpki-client