Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/0a35db87-2432-3ac3-b01b-0962829a8bab.roa
File:                     0a35db87-2432-3ac3-b01b-0962829a8bab.roa (raw, json)
Hash identifier:          3oSlUzRz3/yHBvyuXrtWLS9XoOhs69cJtzP2XBX2PLU=
Subject key identifier:   12:7A:AA:20:05:EA:10:90:16:4B:BF:58:85:48:E3:FB:4A:F9:A7:7A
Certificate issuer:       /CN=2752199c-de37-4b0c-89a9-511d26205f69
Certificate serial:       010D0C9F4328584EF71759F0C9E2396458546A20
Authority key identifier: 34:0A:98:3F:5F:59:BF:5B:4F:BC:77:15:33:8D:52:85:43:B7:26:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/0a35db87-2432-3ac3-b01b-0962829a8bab.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     11257
IP address blocks:        142.66.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/2752199c-de37-4b0c-89a9-511d26205f69.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/2752199c-de37-4b0c-89a9-511d26205f69.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:59:f0:c9:e2:39:64:58:54:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2752199c-de37-4b0c-89a9-511d26205f69
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=a3da3bec-66cb-47d6-84c1-c02be2af4d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:70:cc:95:05:04:f4:db:40:6f:02:ac:2f:
                    cc:d8:41:ae:ee:c9:11:c6:d0:5c:81:4f:0d:a6:c1:
                    56:55:94:b6:a0:bd:b7:16:3f:11:0f:b5:1f:4b:d3:
                    cf:b2:65:4f:48:75:ae:b6:5f:21:20:91:ce:9b:fc:
                    7a:f8:97:4f:ee:07:e0:15:8a:52:31:9c:b7:d8:a9:
                    95:e1:dd:75:81:ed:07:b1:d5:41:ef:c7:95:fc:4e:
                    be:c5:fb:46:4e:02:ad:fe:68:aa:b7:a1:a6:d0:af:
                    e8:70:b3:b6:7e:2b:b2:17:4e:5d:90:4f:93:8c:78:
                    57:dc:a7:e0:f9:ed:e0:e5:61:be:1b:85:72:01:d7:
                    81:9c:81:93:eb:40:66:eb:c1:c5:64:3c:0f:0c:ae:
                    59:2c:35:b2:16:85:a8:ab:ed:9e:11:8f:d5:f5:db:
                    32:48:e5:64:66:2c:1f:fc:26:8a:1a:4e:f1:78:17:
                    01:f0:a7:35:70:83:75:0a:17:4e:ab:76:95:f2:21:
                    ec:09:c9:7d:68:2a:7e:5e:d0:9b:fb:22:19:e9:59:
                    a2:70:55:b6:7d:0c:93:44:2b:b1:5d:8a:28:d9:c3:
                    05:15:f4:55:0b:44:50:0b:5a:18:3a:95:64:6b:98:
                    5b:a4:4c:16:24:99:19:98:95:bc:ed:d6:92:86:88:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7A:AA:20:05:EA:10:90:16:4B:BF:58:85:48:E3:FB:4A:F9:A7:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/0a35db87-2432-3ac3-b01b-0962829a8bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/2752199c-de37-4b0c-89a9-511d26205f69.crl

            X509v3 Authority Key Identifier:
                keyid:34:0A:98:3F:5F:59:BF:5B:4F:BC:77:15:33:8D:52:85:43:B7:26:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7d:bb:c9:fd:3e:47:30:95:bc:1b:e2:ed:6e:18:fc:1e:ab:
         0e:71:5e:b0:71:68:42:b2:3b:b4:fe:b7:6d:b6:1f:87:42:f1:
         4b:c5:2b:ae:b0:68:ca:e7:1d:9c:3d:ac:e2:3f:93:31:2e:c9:
         6a:ba:13:5d:6e:ab:12:ac:e0:cd:5c:4c:87:0a:ae:c8:5e:d4:
         70:03:08:18:10:06:1f:47:d8:9b:39:c5:bd:86:8e:cc:ec:b1:
         f3:10:a8:c2:f7:65:bb:79:50:f2:5e:fb:6d:50:d7:18:c6:c5:
         82:3d:cf:58:69:41:44:b8:c6:fe:c6:04:74:9e:75:dc:92:60:
         8e:28:66:4f:1b:f1:9c:c6:34:7f:13:ec:11:0d:1f:f3:33:72:
         38:8b:11:e2:42:5b:d8:f9:49:ae:6b:5f:fc:fc:a5:9f:ba:65:
         4c:b3:f2:95:83:2c:96:73:5b:2a:8d:2b:6d:c8:1b:bc:59:ec:
         e7:01:03:0d:e1:fd:a3:2e:dc:94:bd:16:d3:14:73:c8:a3:08:
         ea:25:0d:43:57:3b:3d:4c:17:cc:c9:4f:17:20:6f:91:ff:59:
         b2:3a:8b:10:50:c5:d7:ff:9c:d6:a5:7f:89:01:22:1b:96:38:
         da:ca:ce:84:53:70:a8:6a:c6:60:3f:a2:fd:d5:c5:29:4a:97:
         1d:8d:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:35:07 2026 by rpki-client