Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e5729aff-9bf8-3d31-b5e1-4ec7e9ca93d4.roa
File:                     e5729aff-9bf8-3d31-b5e1-4ec7e9ca93d4.roa (raw, json)
Hash identifier:          N/+mduh5n11s4wZ/KzLjeqkEa78b2sKlYhmZ3aXj34o=
Subject key identifier:   BA:09:65:10:C2:78:AE:7D:6E:20:B6:0C:B1:29:D6:47:F5:53:63:FC
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584EE38C9A0C25B7837CA82E7A00
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e5729aff-9bf8-3d31-b5e1-4ec7e9ca93d4.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     6453
IP address blocks:        66.110.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9a:0c:25:b7:83:7c:a8:2e:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=d62a20b3-cb3f-4762-880a-68749c2122a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:9c:71:d0:05:c2:ad:ee:70:da:58:ef:db:
                    40:6c:99:3d:09:cd:d6:1e:60:f4:82:26:29:3d:91:
                    9f:d3:94:ea:4c:65:ff:d9:e0:31:c5:d4:42:29:cd:
                    10:fb:83:70:2e:d6:06:22:72:fd:b7:e6:2c:75:b4:
                    21:39:57:51:b8:1a:59:cf:c2:df:12:a1:3e:02:57:
                    b2:67:6d:b0:79:4d:43:1f:2c:d2:ed:67:d8:3b:37:
                    73:80:ab:e2:c8:80:f3:2d:a5:b5:88:42:a8:e1:5e:
                    bb:ff:38:98:d8:04:dc:6b:c9:b5:e3:21:b0:ab:6e:
                    ca:0d:98:0c:78:07:58:ca:b5:96:11:07:b3:27:2c:
                    0c:52:5e:93:e2:77:ea:77:a2:c2:96:8a:3f:56:dc:
                    7d:d4:10:3a:e9:7d:1a:5b:5c:ce:ab:03:37:97:cc:
                    30:ee:d5:da:c6:7f:ec:dd:84:2d:c7:7c:8d:63:88:
                    7a:02:d8:ed:28:cb:1a:9d:6d:7f:17:0e:e9:44:0b:
                    f4:e7:18:38:63:e4:ba:7b:f8:6a:8b:50:b5:ef:59:
                    5f:78:0f:e1:c4:30:4a:c3:14:40:17:90:70:d9:63:
                    f6:52:47:a4:70:d2:e9:74:94:ec:34:65:ea:0d:8c:
                    51:43:21:32:e0:f6:e4:77:d7:b4:43:e0:21:75:63:
                    c9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:09:65:10:C2:78:AE:7D:6E:20:B6:0C:B1:29:D6:47:F5:53:63:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e5729aff-9bf8-3d31-b5e1-4ec7e9ca93d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:62:7e:14:7e:b2:7c:8c:ad:43:0f:25:17:23:8f:70:a7:af:
         8c:fc:3d:8a:60:c6:05:2f:46:9f:d5:53:e8:ee:ea:19:01:e1:
         1f:60:d9:55:3a:3f:bf:04:15:e4:b7:57:1a:43:f5:68:fb:0c:
         5e:28:4a:2e:09:02:64:62:5e:98:71:58:a9:b6:03:10:b2:49:
         bd:dc:f0:85:ed:9d:71:5e:33:e6:5d:3e:2e:1e:bb:3a:34:ce:
         57:05:09:07:92:57:0b:1a:d6:b7:3e:00:e9:e2:42:b0:3f:38:
         da:23:32:77:28:f8:2e:3a:cb:fc:cd:7d:9d:19:09:cc:5b:05:
         43:ef:06:51:9e:4b:38:96:05:f2:cd:41:25:f4:ad:d8:70:b8:
         ef:21:bc:c2:08:b8:e2:bc:78:bf:3d:ce:80:56:bb:5d:7d:eb:
         e3:e8:47:d0:a2:0d:09:44:d6:b7:95:84:ea:cb:6f:78:6d:63:
         ba:4b:a0:80:57:0e:a3:5d:0c:c4:95:05:58:52:61:49:26:c2:
         3c:8e:18:14:91:f7:c3:59:e0:b3:a9:c4:f7:14:ef:ab:af:59:
         38:7c:6b:be:6f:b4:0e:d6:06:43:6d:61:68:83:a0:12:aa:9c:
         5e:28:2b:a1:b8:de:29:6b:a0:12:2d:15:58:bd:7e:1e:bc:89:
         9a:c8:23:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:55:38 2026 by rpki-client