Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c51f89d-004c-33c1-9f52-b0b9c3227393.roa
File:                     0c51f89d-004c-33c1-9f52-b0b9c3227393.roa (raw, json)
Hash identifier:          0hKveFYjWkja3H2+hweVqvShxR+gf4ADG0ih28++zs0=
Subject key identifier:   F0:B0:E9:92:5A:08:01:E4:49:AB:BC:94:F6:ED:C7:10:95:09:45:BE
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F119D1CC4D9B3A6FAEDE89BC0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c51f89d-004c-33c1-9f52-b0b9c3227393.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     30058
IP address blocks:        66.90.76.0/23 maxlen: 23
                          66.90.125.0/24 maxlen: 24
                          2001:49f0:d0fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:1c:c4:d9:b3:a6:fa:ed:e8:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=b78023cf-5183-4a40-8508-22823380504a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:f1:0f:21:95:e6:06:2a:56:05:4d:a3:d8:
                    16:46:32:7f:ef:5c:40:69:cf:c5:19:4d:10:de:f1:
                    60:e2:66:bf:74:ac:99:f1:6b:dc:e2:2b:8b:e5:17:
                    a2:08:01:6b:57:6f:e7:df:f5:2b:0c:30:ca:0b:7e:
                    26:51:ea:72:0a:ce:1a:f7:61:76:92:c6:dc:61:0d:
                    ff:d1:ec:58:10:dc:7d:39:05:66:1f:d5:0a:7c:ce:
                    c1:14:a0:cf:25:4c:ec:d6:26:07:d4:29:28:c9:95:
                    9a:5f:6a:6b:47:fb:fc:41:38:5f:01:ac:f0:02:45:
                    a6:e4:cf:83:00:61:7a:42:1d:9c:c5:6c:f9:f2:57:
                    92:dd:32:85:a4:ff:77:f1:1d:fa:f1:a5:82:a5:af:
                    49:67:b4:67:52:dd:28:36:36:27:16:49:c9:51:40:
                    b1:f4:ca:da:88:14:14:38:db:8d:9d:88:6d:4e:d9:
                    19:e3:39:fd:2f:43:86:7c:35:a1:32:6c:70:f0:23:
                    d3:29:4c:f4:cb:73:80:e8:92:8a:ca:f7:ee:07:4d:
                    6a:f7:0d:ed:e8:8f:d1:db:ce:2b:9d:ef:36:7a:71:
                    bc:d4:9e:c1:d0:8f:cb:14:30:96:bc:9e:80:1a:4e:
                    5e:61:21:8b:21:48:56:7a:0f:0d:36:7a:66:01:77:
                    db:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B0:E9:92:5A:08:01:E4:49:AB:BC:94:F6:ED:C7:10:95:09:45:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c51f89d-004c-33c1-9f52-b0b9c3227393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.76.0/23
                  66.90.125.0/24
                IPv6:
                  2001:49f0:d0fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:28:ad:34:8f:bd:bc:d2:dd:16:62:22:bc:08:3b:61:54:f5:
         9d:ee:22:fb:48:1b:99:02:ea:42:f9:f1:c4:01:9f:ab:0c:39:
         4d:f5:3f:d1:44:41:ac:31:54:df:e7:0a:a4:85:c5:96:ee:c3:
         76:13:b6:d1:b9:db:8a:b1:c2:0e:2a:6d:19:4a:a1:87:67:9a:
         4e:c0:24:56:9d:95:a2:f3:8c:3a:4a:d5:cb:2c:64:40:5c:98:
         1d:16:8a:fa:be:b7:c2:a8:9e:13:ef:c8:88:2f:25:5f:7e:a7:
         0f:80:8a:5c:a7:d3:87:5a:94:85:f1:da:58:ee:45:26:fa:e0:
         77:3d:c3:8d:fb:7a:58:28:c9:c0:ea:3f:ec:0e:79:41:ec:96:
         68:f6:3f:95:67:dc:df:79:59:01:1e:a2:80:57:1b:07:6d:16:
         4b:2e:51:f8:cc:a8:81:6b:ba:2a:14:a4:3c:24:fc:cf:43:38:
         66:68:75:96:f0:66:3d:4d:cc:95:3a:d2:17:cf:fb:3f:97:79:
         a8:5f:fb:9b:a8:3c:05:02:98:91:81:b8:0c:3c:fa:7c:ac:f0:
         62:f4:59:65:75:ca:4f:ea:fe:7a:ac:d8:d0:02:80:cc:ca:65:
         75:f5:c7:3c:cf:66:dc:8d:77:0d:af:5f:92:24:c2:1b:a3:2e:
         71:fc:2b:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:48:36 2026 by rpki-client