Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/1becb7ae-de8d-3a12-ba08-f457b03b3667.roa
File:                     1becb7ae-de8d-3a12-ba08-f457b03b3667.roa (raw, json)
Hash identifier:          Y4R614EWzOg8ssYd2rPZU3EElajCnpr9ezXur+KgVok=
Subject key identifier:   78:14:89:B3:89:F9:12:87:6B:BE:ED:ED:85:13:55:F0:9C:3D:3F:40
Certificate issuer:       /CN=656bb562-ba73-4cab-b885-ab843b4308c4
Certificate serial:       010D0C9F4328584F4973AC9448C95DD4A339C280
Authority key identifier: 33:80:9E:78:51:88:CD:E8:F5:1C:8F:C4:EB:93:46:C8:68:50:89:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/1becb7ae-de8d-3a12-ba08-f457b03b3667.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        66.51.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ac:94:48:c9:5d:d4:a3:39:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656bb562-ba73-4cab-b885-ab843b4308c4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cb104310-1550-423b-bfea-6835af884368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8c:9e:52:3b:e1:30:b1:07:8b:67:f1:b8:22:
                    c2:77:ed:3d:c1:4f:0f:7f:57:60:a7:45:bf:f6:53:
                    28:c2:71:41:4c:fc:ed:45:01:0d:c2:dd:9a:df:14:
                    7c:87:30:8a:1b:6b:9c:69:ef:ad:8e:3e:d3:3e:44:
                    2a:37:8f:15:6c:d7:ef:23:42:7c:9d:aa:4b:46:e6:
                    5d:41:4f:8c:ae:ce:3e:fb:19:55:7e:33:85:df:e7:
                    2b:b9:7c:c7:58:37:25:95:6e:b2:1a:1e:5e:ec:82:
                    86:07:99:80:cf:9f:8a:8f:22:82:b3:ef:cd:92:50:
                    62:b0:5e:4b:6f:55:02:55:fd:7e:79:fc:9c:41:70:
                    36:fe:5a:68:53:47:bf:7c:83:73:42:41:8c:cb:f3:
                    dd:d6:8f:ad:a4:37:84:73:ad:05:6e:9d:7c:a9:01:
                    ab:ba:01:a3:72:6b:a4:80:fb:4e:9a:e9:60:2f:d9:
                    ef:b6:5a:38:76:f6:62:ba:1e:03:29:04:b0:00:e3:
                    ad:0a:c7:b8:83:72:fb:02:dd:73:ec:ff:bc:09:dd:
                    0c:a0:11:d6:95:a4:5b:3c:70:d3:79:63:f5:e9:03:
                    fe:2e:43:bc:d6:c5:22:a2:46:95:7b:12:3d:76:69:
                    29:d1:18:99:f4:f7:c1:33:54:ab:d4:d1:3a:f9:91:
                    df:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:14:89:B3:89:F9:12:87:6B:BE:ED:ED:85:13:55:F0:9C:3D:3F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/1becb7ae-de8d-3a12-ba08-f457b03b3667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.crl

            X509v3 Authority Key Identifier:
                keyid:33:80:9E:78:51:88:CD:E8:F5:1C:8F:C4:EB:93:46:C8:68:50:89:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:56:6b:89:9a:ec:08:80:95:78:1f:4f:4d:02:ae:46:14:a9:
         bb:01:3a:03:57:bf:f4:2f:15:23:41:68:5b:5b:21:53:79:a8:
         69:63:12:91:12:1e:e8:90:ea:5b:2a:0a:df:67:6b:6b:7f:68:
         c1:4d:47:61:b1:23:61:b8:41:4b:da:4f:c7:91:57:41:be:72:
         ce:28:0c:f8:67:75:49:0e:94:01:97:24:cb:5d:31:1e:af:0c:
         54:36:70:63:1b:0c:35:93:d5:75:50:db:1c:b5:a0:aa:63:1d:
         6c:bb:ee:cf:c6:75:43:91:01:4a:6b:3a:0e:4d:ee:3e:a9:37:
         a6:cf:3f:45:e9:6d:72:16:c1:5f:f6:42:dc:a2:ca:5b:c8:3d:
         14:e4:01:b7:e2:cd:8c:74:b1:7e:e0:23:7c:f7:27:aa:e7:c4:
         94:03:e6:56:d8:35:a5:27:c2:1c:d2:6e:49:c9:e6:3b:a6:93:
         8d:ae:bc:4e:54:d4:3f:4e:94:f9:82:f0:a5:25:6f:fd:23:8d:
         41:b3:4a:75:33:47:a9:19:6d:cb:b4:78:d5:0e:f8:89:c7:6e:
         a7:27:a8:8c:d9:f8:fb:1c:92:dd:3a:3a:1c:a8:a7:08:c4:bb:
         60:44:a1:16:d2:81:53:5d:81:3a:74:16:fc:e5:ce:f8:d2:e5:
         ff:64:55:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:15:14 2026 by rpki-client