Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0d8cf029-d75c-3bdf-9c7a-23f94bf9c051.roa
File:                     0d8cf029-d75c-3bdf-9c7a-23f94bf9c051.roa (raw, json)
Hash identifier:          2P3jGLXAgO7yXHhi46UJp05/QAps3BXKnNZACiQXg08=
Subject key identifier:   59:7C:0D:B7:D4:2C:D7:95:2C:15:B6:2E:6D:17:D3:1F:12:BC:E4:79
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584F1CC7A9896CCCBA5D9A63AB40
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0d8cf029-d75c-3bdf-9c7a-23f94bf9c051.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     54913
IP address blocks:        66.55.66.0/24 maxlen: 24
                          66.55.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a9:89:6c:cc:ba:5d:9a:63:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=f4e7820f-61cf-430c-8e28-21ed79ef0669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:14:fa:1d:a6:b7:ba:59:e4:c5:81:d1:25:
                    b1:7f:34:b1:5e:a8:71:37:14:e6:2b:f3:cd:f2:10:
                    96:a5:68:e3:39:05:4e:b3:14:23:12:bc:f2:17:fd:
                    64:e9:d0:05:b1:1a:2c:da:6d:52:43:dd:09:3a:3a:
                    cb:af:46:84:5b:e1:c1:50:74:7f:fd:b8:d3:0e:b8:
                    eb:52:bf:65:9e:8a:02:2f:4b:3e:a6:57:03:d7:a8:
                    5c:55:f6:24:38:84:c1:3e:09:4c:18:3b:70:59:58:
                    f7:33:d2:a9:c1:76:bc:68:d7:73:17:80:72:47:e2:
                    fb:e5:4a:a8:66:b6:2e:c9:ae:f0:b2:a4:04:de:7f:
                    af:ba:fc:8c:7d:82:4f:42:7c:17:05:b8:74:9a:7a:
                    5d:52:3a:9b:42:76:a6:de:0f:9a:61:30:19:60:73:
                    41:78:09:57:13:1b:af:39:d9:6b:ff:e9:52:15:2f:
                    c3:71:f5:46:bf:94:76:83:68:83:c5:4f:3d:ad:da:
                    9b:dc:d7:df:6b:b0:ac:4d:05:45:c8:a1:ff:cf:72:
                    ac:b5:8c:17:37:f8:2e:ee:bd:7e:dd:18:4b:d1:0c:
                    76:ca:31:f3:e8:f5:50:ef:26:a9:f3:61:78:de:4f:
                    17:b2:97:ad:bc:c8:62:b4:af:0e:29:5e:47:df:28:
                    5e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7C:0D:B7:D4:2C:D7:95:2C:15:B6:2E:6D:17:D3:1F:12:BC:E4:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0d8cf029-d75c-3bdf-9c7a-23f94bf9c051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.66.0/24
                  66.55.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8a:26:f9:19:4a:a6:51:e8:49:44:bb:dd:fd:fb:09:a2:8a:
         64:b3:55:55:a9:5a:f2:79:4e:84:20:92:45:1b:22:2e:fa:3f:
         c2:3b:b3:b8:0e:92:87:55:b7:91:7b:b0:8b:57:e5:05:16:72:
         e9:2e:88:f2:80:ce:40:e7:f9:20:ec:0a:07:8e:f5:f2:3c:68:
         57:e5:c6:3d:c0:df:05:c7:9a:0d:c3:8e:73:77:24:55:83:ee:
         a4:12:70:72:4e:c2:e7:18:ce:93:e6:c3:4f:29:47:96:5c:97:
         ff:c8:82:b2:a4:0b:66:38:6e:cc:c8:65:eb:59:e0:08:df:96:
         be:0c:de:1a:c3:00:d8:97:bf:94:62:ce:cf:f8:fe:45:19:30:
         26:92:0d:d4:12:ec:ae:77:ab:2f:dd:6c:a5:76:2e:7a:58:62:
         59:68:26:18:d1:8c:86:1b:d8:cf:97:24:cf:e6:fa:cb:c3:a3:
         f7:a3:eb:ef:2d:0f:7c:14:3d:a2:97:fd:37:2d:9b:37:e2:40:
         d9:df:f6:9a:ee:a6:f8:73:7a:df:09:a1:f5:70:45:3f:d6:98:
         5e:a6:4b:c0:02:ad:0d:d4:c4:3c:98:00:cc:d1:f2:6e:fe:1f:
         e3:35:f0:b0:79:33:6d:f4:89:89:88:18:d2:20:a1:72:c4:e8:
         90:a0:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:20:35 2026 by rpki-client