Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/ce8540ee-b1e0-3cca-855d-9d74e65bc521.roa
File:                     ce8540ee-b1e0-3cca-855d-9d74e65bc521.roa (raw, json)
Hash identifier:          xao6C8qh4O9JKTD3oo4kW9ieuRuBQL13JcM3K1uls+I=
Subject key identifier:   76:5F:6E:3F:23:1B:22:87:2D:0D:14:F3:A1:97:A9:9A:3F:99:F8:3D
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584F8D768BC1698132543A5D4040
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/ce8540ee-b1e0-3cca-855d-9d74e65bc521.roa
Signing time:             Mon 19 Oct 2026 09:43:17 +0000
ROA not before:           Mon 19 Oct 2026 09:43:17 +0000
ROA not after:            Sun 17 Jan 2027 10:43:17 +0000
asID:                     44486
IP address blocks:        66.228.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:76:8b:c1:69:81:32:54:3a:5d:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Oct 19 09:43:17 2026 GMT
            Not After : Jan 17 10:43:17 2027 GMT
        Subject: CN=1f2cbe16-4b54-48fc-b4cd-86783227b521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:95:f1:18:b3:ec:cd:4f:e3:a8:76:eb:38:
                    25:51:80:a8:2a:30:d8:03:b2:32:bb:10:b5:0a:da:
                    42:31:08:d7:e3:c8:48:ab:13:74:41:4e:66:ce:11:
                    d6:32:31:56:fb:f1:90:06:24:0a:0c:12:b6:3c:a6:
                    29:ee:24:88:53:73:80:78:c7:16:9d:b5:04:f8:0f:
                    59:72:cb:c4:18:62:9b:65:9e:61:b6:5c:48:02:2d:
                    19:c3:6f:3c:f2:00:a6:33:be:be:46:38:aa:c0:ac:
                    af:e3:01:65:93:9e:ba:88:f4:fc:8c:08:a5:56:4f:
                    58:43:0a:de:bd:11:db:45:29:2f:24:57:6d:1e:f0:
                    36:4c:bf:1d:c5:69:6c:4f:ca:b3:84:25:99:f6:60:
                    65:26:93:70:0c:a6:21:1a:19:3e:41:d5:8a:0d:d5:
                    cf:b7:2b:15:90:55:c4:2a:5b:a2:30:48:08:07:73:
                    ed:30:c8:18:28:8b:4d:53:83:4e:d3:0c:f9:27:80:
                    57:c0:fb:26:1e:2d:4e:94:6d:01:91:62:fe:8a:1e:
                    9b:27:d9:f3:3c:46:75:77:d8:ec:ce:60:57:45:30:
                    c3:25:a0:f3:26:d7:4a:3c:c5:07:15:3b:61:f6:d3:
                    8e:c9:ef:39:00:df:68:28:ea:48:bf:d0:3e:9b:2b:
                    41:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5F:6E:3F:23:1B:22:87:2D:0D:14:F3:A1:97:A9:9A:3F:99:F8:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/ce8540ee-b1e0-3cca-855d-9d74e65bc521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.228.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:83:9a:d1:13:36:8e:54:f9:e1:4e:c4:b0:26:8c:27:e3:81:
         93:92:86:db:c2:36:ba:4f:b3:12:93:8a:18:e4:ab:ca:2b:7a:
         37:9f:42:b0:7f:d4:13:32:dc:c7:fc:0b:1e:18:d4:dd:5f:4a:
         8f:5f:09:20:3f:5c:ac:d9:b9:3a:ce:84:42:d8:82:e6:5b:6f:
         c9:30:17:9e:33:08:e4:3f:7e:af:a6:69:58:d6:7d:fa:9d:c5:
         f7:a0:64:9d:95:b3:91:f9:1c:58:27:22:6f:12:1b:0a:06:34:
         b9:77:cd:96:60:c5:d0:4a:0c:82:c5:ad:0e:f4:29:ac:34:16:
         06:89:e3:38:4f:86:71:9c:d8:ff:fc:0c:13:f2:6c:99:09:85:
         18:f2:f1:aa:31:97:30:bf:5e:38:97:b6:cf:5e:f1:b4:66:1e:
         23:e1:9d:db:de:f5:a2:18:60:69:a2:54:0a:63:c8:ca:e5:69:
         11:b7:dd:47:9d:05:4a:51:6d:3e:f3:31:38:79:c6:e1:1b:b1:
         18:ac:e3:ca:5c:e3:0b:9a:c0:ee:16:70:4b:06:26:db:8e:eb:
         99:95:d8:1a:44:66:77:14:3d:f8:d7:9c:a7:a9:2b:cf:95:d1:
         e5:43:9e:5e:8c:c3:b6:27:eb:ed:3e:a7:c0:06:18:64:51:c8:
         1b:f3:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:58:59 2026 by rpki-client