Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/f777737a-17ff-3183-b4a8-05b809327696.roa
File:                     f777737a-17ff-3183-b4a8-05b809327696.roa (raw, json)
Hash identifier:          chUGe8Nwr7MUZgjFW2QKsuAgSt8sIa7xCVWsijPdSIM=
Subject key identifier:   60:B4:74:4D:31:53:88:1B:DB:AA:A5:4B:78:0E:E8:B0:B3:36:76:7F
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F093CEE628955436F96BE5980
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/f777737a-17ff-3183-b4a8-05b809327696.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        66.103.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ee:62:89:55:43:6f:96:be:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=098c6001-6adf-4b05-8670-7251da9a39eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:18:cb:b5:4c:15:32:70:75:84:0b:fb:9e:51:
                    0c:93:50:78:a8:db:0a:23:61:13:e3:56:5d:0c:4c:
                    3f:34:c9:97:99:7d:9f:3d:5d:d5:e8:fc:b2:02:93:
                    c7:5d:e1:7f:ae:d6:81:7c:12:51:df:11:e8:ba:08:
                    6a:bb:18:d9:27:70:37:2f:3f:41:1b:b0:47:aa:6b:
                    20:c5:45:c6:28:a8:a3:3d:c3:8e:b5:5e:b5:fd:e7:
                    bf:31:8c:94:a8:7d:4c:b9:cc:b3:22:d7:41:e6:2f:
                    57:79:99:c1:e0:36:47:01:be:8f:62:6a:d8:85:70:
                    fb:df:c9:79:43:e4:48:ef:3b:c5:6c:46:9f:27:e0:
                    67:80:af:6e:14:25:9c:ae:08:dc:91:52:15:0a:03:
                    5e:66:73:1b:75:cc:a9:ee:54:56:2a:43:7a:2d:89:
                    a3:bd:db:e5:20:6a:2c:5f:c5:71:19:fa:d6:57:65:
                    06:ce:1c:48:58:4f:c7:89:57:89:ba:9e:36:4f:c9:
                    31:77:d9:af:19:ad:04:71:0f:de:27:2c:cd:e9:00:
                    6c:2c:42:c0:2d:a8:75:0f:53:41:f1:ff:73:ae:9f:
                    46:4e:18:46:04:39:38:97:b9:70:38:7a:89:ed:98:
                    47:a8:5d:11:20:e2:18:96:01:96:1a:d7:3d:64:03:
                    e7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B4:74:4D:31:53:88:1B:DB:AA:A5:4B:78:0E:E8:B0:B3:36:76:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/f777737a-17ff-3183-b4a8-05b809327696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:03:33:69:b7:83:69:60:66:01:53:58:1a:89:96:4c:b5:4b:
         75:2b:e4:03:16:28:eb:a3:29:15:42:f1:95:8c:b4:10:8f:32:
         a1:cc:30:3c:d9:f4:a6:dc:9f:ba:2d:2e:7c:c5:41:85:f5:71:
         af:5c:27:8f:5c:8b:76:f9:8e:7e:80:cc:2a:81:e4:34:ae:8f:
         46:0f:e6:c3:ce:0b:12:96:10:48:f6:22:57:ed:b5:f9:dd:19:
         00:b0:dc:d8:31:11:ff:1e:c2:a0:13:1b:4d:a5:67:53:c1:f5:
         16:8d:b2:99:90:5d:26:31:0b:8d:1b:c0:ff:8e:d2:25:ab:4b:
         af:69:06:5d:67:41:bb:d5:23:17:ac:da:09:ac:a6:be:0e:d7:
         ce:d4:e0:d7:b3:70:0e:c5:99:ba:b2:4e:e1:c6:34:cc:f8:e9:
         f1:a0:52:fb:86:40:af:11:dc:04:93:e5:a2:ac:f6:0b:bc:dc:
         5e:e6:bb:b6:77:91:51:82:a0:6c:6d:6d:eb:8c:83:72:fd:39:
         ea:db:13:62:67:7a:45:c7:02:13:db:7b:16:56:13:4d:72:90:
         81:d0:1c:4c:95:fa:b0:a1:39:b0:7d:7c:f8:4e:54:01:f8:39:
         c7:b9:e4:79:86:85:16:79:06:9a:30:94:15:50:44:c8:84:00:
         59:32:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:49:47 2026 by rpki-client