Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa
File:                     976bff61-e8bf-3711-88dc-a4ab9c98b531.roa (raw, json)
Hash identifier:          97dhNUtat1Z3ZfomTk1IeQoFHsCayUtzKEXvmF623fw=
Subject key identifier:   62:E9:1E:87:61:11:93:16:B4:80:9F:40:72:9A:C9:5D:E9:3C:8B:81
Certificate issuer:       /CN=957264f8-0474-43d0-9a3b-5f53ce28790d
Certificate serial:       010D0C9F4328584F71ED92B42CDF482291582D00
Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     15344
IP address blocks:        66.212.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:92:b4:2c:df:48:22:91:58:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=4ff44be1-5409-4489-aaf2-2effab59362d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:fa:4f:53:45:65:e7:af:71:aa:da:41:49:
                    6d:0d:04:c8:d2:7c:91:d0:6f:e1:35:71:40:a7:ab:
                    56:6f:0b:85:d4:20:b5:75:72:69:65:92:bb:ce:0f:
                    05:66:35:dc:bd:ca:c1:e2:1e:79:90:79:7c:62:cf:
                    7e:42:6c:77:6a:48:a4:c7:79:61:3f:fe:b1:b0:6d:
                    71:be:f7:96:13:9d:0d:cc:dd:52:8b:d4:e5:45:ba:
                    c1:73:db:fe:c2:2e:a1:b7:dc:aa:60:e4:d9:86:08:
                    00:10:6a:3d:28:dd:1c:97:b9:64:04:7d:80:26:17:
                    ca:7a:de:c8:3e:31:72:1b:13:38:bc:98:72:e5:db:
                    fc:a4:1d:12:fb:ed:ea:be:c2:a5:bb:f8:72:70:b8:
                    58:56:eb:ca:51:e5:e5:51:6c:68:48:fe:ef:1b:95:
                    0c:1a:a3:d3:21:d0:8e:9d:62:63:98:6e:de:cc:e9:
                    ba:7e:7b:7f:a7:cd:64:63:50:59:13:d7:39:30:b3:
                    62:b5:f2:03:4f:1f:3a:ad:a0:0e:07:db:9a:d1:eb:
                    c8:c0:f9:94:3f:cd:5d:27:5c:98:bf:56:0c:27:de:
                    f0:84:ae:aa:7c:b7:cc:85:a5:18:18:c3:22:58:99:
                    cc:16:ec:d8:2e:a0:df:c4:e0:ff:c6:da:5d:43:59:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E9:1E:87:61:11:93:16:B4:80:9F:40:72:9A:C9:5D:E9:3C:8B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.212.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:e0:84:09:0b:71:36:0e:5b:e1:6a:54:f2:cb:b0:3e:d5:8a:
         65:2b:c0:d9:d5:6e:7c:c1:57:76:c2:b3:90:2f:c8:9b:19:de:
         1d:fe:bc:69:1a:b6:7f:20:cd:cb:36:c7:8e:12:db:fd:f5:e6:
         e7:e8:d4:e0:fc:be:83:6f:84:94:ca:c1:4f:37:b7:ac:4a:4c:
         d6:84:01:1b:38:33:0d:2e:06:1b:3b:5d:86:66:67:61:e2:24:
         0c:03:5b:04:1f:32:0b:e4:2e:80:d4:4f:bc:cd:fc:94:f4:8f:
         69:bf:e8:7d:a2:3a:2c:bf:05:c9:2e:94:fe:5a:de:21:fb:a4:
         5d:15:54:11:76:91:a7:0a:6b:3a:ef:42:1f:90:62:52:45:5e:
         e5:b7:3c:81:75:37:29:64:23:2d:9d:b6:ef:52:b3:41:8e:ef:
         ae:1b:82:25:05:09:bb:6f:2c:7c:89:7c:97:18:05:c6:9e:1a:
         73:eb:f6:8c:fa:55:25:30:8f:9d:f9:aa:60:7e:b1:f4:e0:0f:
         45:85:d5:17:b3:ec:41:c6:e9:76:a6:0f:77:a6:ac:2d:02:c3:
         a4:a2:01:28:c3:5e:8d:50:8a:7f:0e:79:32:6e:9f:ff:9a:48:
         96:27:33:79:23:8a:ed:48:a9:ca:b6:5d:07:13:d6:a2:da:04:
         b7:74:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:40:37 2026 by rpki-client