Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747/f1876e8b-756b-35b3-b4c8-5affa1e60a35.roa
File:                     f1876e8b-756b-35b3-b4c8-5affa1e60a35.roa (raw, json)
Hash identifier:          yawT4VPn0PskA/HI9fBTCBzoWmt9bd7d7fXeLDL6IZE=
Subject key identifier:   C1:8A:4E:81:43:5A:EB:55:2D:B4:DB:0D:81:92:A2:DC:56:2F:38:DE
Certificate issuer:       /CN=b1e596d3-0aa1-4d8a-8e71-1f979cfb7747
Certificate serial:       010D0C9F4328584F497742860C37E1ACE2A1C200
Authority key identifier: 3E:EA:41:5C:83:1F:9A:5A:DA:93:6B:DC:8A:8E:CE:FB:9F:76:7B:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747/f1876e8b-756b-35b3-b4c8-5affa1e60a35.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        66.45.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:42:86:0c:37:e1:ac:e2:a1:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e596d3-0aa1-4d8a-8e71-1f979cfb7747
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2fcd2090-cb86-4288-b23b-216923e4a3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8b:59:80:74:5b:aa:f7:1f:ab:9c:ad:34:86:
                    e2:ab:a0:18:f5:99:5f:93:e8:43:e0:b9:f7:b6:04:
                    b6:12:37:a1:ce:7f:26:fb:8c:78:e7:c2:0e:7b:c0:
                    ef:65:dc:67:20:95:bf:a3:70:d4:70:db:c7:16:2a:
                    f5:c9:34:47:5c:72:92:6b:dd:2f:cd:f9:e1:73:3a:
                    54:22:16:2e:fe:6f:b8:8f:cd:1b:b0:64:6e:35:e4:
                    1c:20:28:bb:48:de:18:98:47:fe:bf:4d:c0:16:c4:
                    c7:43:55:5d:6b:3c:cb:41:05:23:cd:fb:04:cb:1c:
                    49:86:d2:36:4f:11:08:5f:48:ef:1e:12:da:9e:d7:
                    23:6f:1b:b0:4a:07:aa:f1:24:58:50:83:1e:1b:c8:
                    61:0d:74:5d:a1:11:82:cc:78:f9:76:5d:27:d2:87:
                    f4:97:50:a0:41:ee:4e:a9:3c:a5:71:0b:fe:25:e0:
                    d7:7c:35:5b:0b:e2:01:8a:ec:75:6d:ef:dc:cb:d1:
                    ca:44:27:f1:ae:e1:98:f1:b5:a8:14:fb:90:40:c6:
                    ee:7a:54:41:e0:db:d4:a0:64:05:7f:60:99:05:85:
                    eb:51:f1:a0:5b:87:9c:cb:7a:08:fc:0c:4b:00:97:
                    31:81:2c:76:0b:94:e2:be:a1:82:42:f0:ee:57:37:
                    49:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8A:4E:81:43:5A:EB:55:2D:B4:DB:0D:81:92:A2:DC:56:2F:38:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747/f1876e8b-756b-35b3-b4c8-5affa1e60a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747.crl

            X509v3 Authority Key Identifier:
                keyid:3E:EA:41:5C:83:1F:9A:5A:DA:93:6B:DC:8A:8E:CE:FB:9F:76:7B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b1e596d3-0aa1-4d8a-8e71-1f979cfb7747.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:da:5f:d1:7a:58:78:a8:91:c6:fc:9e:bb:ec:8f:86:51:e0:
         be:68:ee:45:fc:f6:59:04:1f:dc:f9:7c:d8:e3:b8:ea:7a:2b:
         7c:4c:a3:8b:05:fb:b5:ab:05:9b:99:90:c0:65:3f:6f:ad:46:
         1c:0e:b9:32:01:4c:ea:4e:66:b7:b3:fc:5a:af:6a:32:da:d3:
         ae:01:05:ac:34:cc:d4:de:fa:3b:c9:90:5e:78:1f:f2:5c:ad:
         87:d0:5d:62:bf:a6:89:5d:43:32:36:3a:6e:41:16:2d:eb:d0:
         06:60:6b:98:97:4b:d3:6d:b5:a5:23:72:05:76:b0:13:03:88:
         19:3b:1d:01:8d:fd:cb:b7:50:81:48:a1:8b:ab:53:71:ba:15:
         79:0d:53:96:bb:1e:11:75:7c:91:dd:7f:7e:13:be:ed:f2:5a:
         7c:29:83:0a:12:4a:88:f6:d2:07:e3:9a:2b:2d:4b:b4:f8:42:
         89:08:8e:b6:14:21:c2:c1:1c:f8:d4:0e:ac:12:4a:df:1f:2a:
         b2:83:a9:b7:04:e1:fa:f3:32:51:a3:39:9d:c6:d5:66:71:c1:
         fd:91:4f:09:dd:79:12:e6:d6:f5:22:f8:95:17:bc:32:a0:a0:
         80:25:93:c3:c9:0d:c7:48:34:05:a8:99:ef:5c:60:bd:5f:5d:
         24:29:b8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:34:59 2026 by rpki-client