Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/66a2d63b-6f26-3fac-810b-30d26cc8fc04.roa
File:                     66a2d63b-6f26-3fac-810b-30d26cc8fc04.roa (raw, json)
Hash identifier:          YUbFtBE6l3oTGqsEyrRjlBMK8aaZS4eMf++kMhTEuJI=
Subject key identifier:   1E:66:1D:43:92:22:4A:28:D0:B5:AD:4D:EC:E4:10:85:E1:60:5D:37
Certificate issuer:       /CN=44f68f8f-fb3d-449e-a030-4b56b7a51400
Certificate serial:       010D0C9F4328584F5EFC6C9EFA3F8392521E4F00
Authority key identifier: B4:14:A9:7D:AC:0F:47:A8:85:80:19:DD:CE:38:85:75:EA:66:65:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/66a2d63b-6f26-3fac-810b-30d26cc8fc04.roa
Signing time:             Fri 02 Oct 2026 18:10:02 +0000
ROA not before:           Fri 02 Oct 2026 18:10:02 +0000
ROA not after:            Thu 31 Dec 2026 19:10:02 +0000
asID:                     402274
IP address blocks:        198.137.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:fc:6c:9e:fa:3f:83:92:52:1e:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f68f8f-fb3d-449e-a030-4b56b7a51400
        Validity
            Not Before: Oct  2 18:10:02 2026 GMT
            Not After : Dec 31 19:10:02 2026 GMT
        Subject: CN=63fda1fd-c78d-4969-a78c-bd200c6c1164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1b:b2:af:cf:35:5f:e3:ae:a2:30:bd:45:01:
                    74:56:33:55:7e:b0:1d:87:f5:f2:e4:da:19:21:84:
                    eb:bb:12:f9:1f:4e:3e:62:33:de:71:e4:6d:48:63:
                    f3:aa:8a:70:94:69:7f:72:c1:da:88:43:2f:de:1b:
                    42:1c:84:f8:6c:f2:15:dc:5b:dd:02:d9:e5:3d:83:
                    f9:31:c2:b3:30:3a:17:01:4a:4e:bc:ff:e6:13:14:
                    60:19:60:3e:08:9a:78:79:ec:02:0f:ec:93:6a:88:
                    81:58:67:0a:00:48:95:75:b0:e1:39:af:d9:1f:e7:
                    fc:7d:a0:40:6b:78:f5:a6:f2:9c:f7:4c:d5:ef:b0:
                    f5:ab:59:e3:9f:42:47:1e:b5:e2:e3:63:36:40:9c:
                    83:86:f7:b0:c1:18:6a:c7:b3:17:1f:bb:30:20:25:
                    9f:76:32:f1:7b:55:a6:6d:39:2d:50:25:dd:c1:e7:
                    d9:a5:b3:b7:75:8e:72:51:cd:68:ff:55:b8:e0:8a:
                    69:e3:f1:61:92:7a:7c:d7:55:3b:96:73:bf:41:7d:
                    7d:93:35:63:36:74:cd:f4:21:ff:94:65:44:99:c9:
                    c4:92:d9:f7:df:48:f8:1d:cc:79:90:8c:63:cb:78:
                    53:20:ac:c8:41:c5:39:b9:6c:d4:2f:b5:5c:57:0e:
                    e3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:66:1D:43:92:22:4A:28:D0:B5:AD:4D:EC:E4:10:85:E1:60:5D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/66a2d63b-6f26-3fac-810b-30d26cc8fc04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.crl

            X509v3 Authority Key Identifier:
                keyid:B4:14:A9:7D:AC:0F:47:A8:85:80:19:DD:CE:38:85:75:EA:66:65:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.137.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:4a:ab:ac:c5:f0:a2:c1:e2:c1:48:d5:36:0e:c7:dc:69:ed:
         0f:d2:18:58:ba:a7:90:af:35:b5:bf:95:6a:f3:26:6f:18:d3:
         e1:8d:31:22:47:77:82:d2:0b:06:1d:79:2d:a7:3b:c0:2d:01:
         96:a4:93:73:14:ec:d9:85:9f:de:85:bd:20:9f:1b:dd:a5:9f:
         d7:cc:bf:48:34:5d:5c:2a:f3:00:d2:55:13:f0:6d:d4:5e:ba:
         23:b1:b5:d3:0e:96:90:85:5c:82:6c:85:ca:7b:8e:85:ba:46:
         41:38:a4:0b:a6:17:03:25:00:29:ab:a3:3c:1e:52:cb:f7:47:
         18:e6:a0:26:42:91:a5:2b:b3:16:f7:27:3f:d0:1c:76:e1:90:
         c3:2a:80:49:bb:0e:10:84:6f:7a:1f:1e:98:60:c4:e5:1a:ba:
         56:68:32:77:9d:30:33:6b:a6:a2:b0:49:d7:b2:28:55:e1:73:
         73:7d:a8:ee:03:7f:53:9a:fa:0b:f1:80:ec:b9:21:9c:64:b2:
         0e:32:ec:da:c8:79:f2:d1:2a:63:f6:76:2d:e5:f8:db:04:f1:
         4e:57:1e:3b:0f:d2:51:57:06:6a:74:b5:76:f3:3c:e0:7a:be:
         86:dc:74:e4:d6:50:f8:f2:9e:02:1d:e7:32:73:b8:3b:33:c5:
         0c:05:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:20:42 2026 by rpki-client