Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/8b53a40f-d65c-3318-b18c-b199fccf9404.roa
File:                     8b53a40f-d65c-3318-b18c-b199fccf9404.roa (raw, json)
Hash identifier:          a5v2XZ91TX++MoS9BLkYAcuytrU0B1Q2ryKGZ989+7Y=
Subject key identifier:   44:B0:C6:5F:F9:88:D4:25:7D:0A:F6:C9:8A:D0:90:1C:D7:AC:FD:11
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F4328584F98F7793CC6657D3EA56E6FAC
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/8b53a40f-d65c-3318-b18c-b199fccf9404.roa
Signing time:             Fri 23 Oct 2026 12:36:57 +0000
ROA not before:           Fri 23 Oct 2026 12:36:57 +0000
ROA not after:            Thu 21 Jan 2027 13:36:57 +0000
asID:                     16509
IP address blocks:        66.245.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:98:f7:79:3c:c6:65:7d:3e:a5:6e:6f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Oct 23 12:36:57 2026 GMT
            Not After : Jan 21 13:36:57 2027 GMT
        Subject: CN=0ff2aefa-648f-407a-ab7e-402ea2386ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:27:0b:49:f1:4e:37:29:51:1b:7a:93:07:5e:
                    fb:5c:9e:06:ae:a0:5c:d7:3d:d0:99:55:d2:62:b1:
                    89:d9:4b:0e:24:56:c5:3c:1f:e0:51:d7:20:d8:b8:
                    e4:f5:a6:19:4d:6f:ca:1f:65:69:78:57:b0:b2:2d:
                    60:1b:ca:ed:91:84:0e:69:39:d9:48:16:60:35:79:
                    79:70:25:bf:fc:97:29:bc:20:1c:50:5a:bf:73:b4:
                    45:81:eb:cd:1f:21:bd:01:70:47:8a:48:81:1f:1b:
                    31:41:f3:7d:3c:f7:69:ca:c6:11:ed:c1:da:90:5d:
                    c0:3f:ab:df:40:a5:96:f4:4d:bd:d9:f5:cd:ab:cd:
                    5e:af:76:cc:f5:59:60:92:3d:92:ab:d3:ec:67:f4:
                    4b:4e:b5:d6:87:e8:93:ff:ce:b8:2d:ff:6f:67:5e:
                    18:5f:e8:b1:cd:39:3b:01:84:4e:da:f5:e6:ce:d5:
                    86:22:74:10:a8:62:37:b8:25:19:70:a3:3e:17:70:
                    ac:cc:28:36:61:0d:9c:92:39:04:2d:5b:63:8f:2f:
                    35:b7:4a:b8:f7:88:ec:81:66:54:25:f2:fc:0b:e7:
                    6b:9f:10:b2:22:b7:e7:b6:28:8a:26:8f:c2:27:68:
                    f9:85:09:25:41:23:8f:6c:39:ec:e3:cc:68:11:80:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B0:C6:5F:F9:88:D4:25:7D:0A:F6:C9:8A:D0:90:1C:D7:AC:FD:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/8b53a40f-d65c-3318-b18c-b199fccf9404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:92:fe:ea:bb:12:8b:5d:1b:72:36:31:4c:8c:df:4e:27:a6:
         5f:36:bf:cc:31:2e:9a:fd:36:d5:d3:a0:e5:4a:a6:fe:f4:38:
         f3:26:43:be:a3:67:c0:b4:0e:dd:25:95:e3:a5:6d:95:cc:b5:
         94:b3:bb:14:0a:ca:23:c9:ac:0d:9c:79:e8:1f:bc:8e:9c:31:
         ba:cd:88:2a:fc:1c:90:33:b3:a4:ee:82:43:a6:20:c2:13:9f:
         a3:76:40:71:55:33:b2:00:4e:2f:2e:46:8c:e4:c3:a2:40:b3:
         bb:f5:9c:18:79:e6:2e:d6:33:10:32:70:2f:b3:e4:a8:4c:0d:
         b7:82:75:42:80:50:d6:c3:5e:7f:05:30:7b:3c:2a:67:73:a8:
         c5:59:95:9a:c6:7e:e1:c3:3c:c0:5d:90:41:cd:07:c4:4c:12:
         fb:83:ab:58:2b:16:77:36:1d:8d:95:e9:f5:d9:6e:be:48:0e:
         a0:4b:ac:98:9f:9a:2f:5d:3f:6d:be:ba:b5:9f:da:44:b6:26:
         d4:fc:20:d7:2d:0a:c9:f9:9f:a5:c5:f9:c1:e1:4d:8a:59:c9:
         53:fa:4d:81:88:d7:ed:cd:b2:7f:44:80:6f:aa:1a:da:38:29:
         4d:65:1b:50:40:ee:d6:3c:23:6e:bc:fb:3f:14:5c:f9:94:f0:
         47:17:1d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:19:58 2026 by rpki-client