Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/862abd57-333a-3134-abd7-fcc75bd8aa62.roa
File:                     862abd57-333a-3134-abd7-fcc75bd8aa62.roa (raw, json)
Hash identifier:          7YJV6LIG4qvX40NRgbqVSzOK/Yhfdei3IRMrsQ2IYG0=
Subject key identifier:   54:63:7E:24:8C:15:0D:C6:95:5F:F9:83:CA:50:05:B9:CD:B5:A4:3D
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F1E5A9FEFC719928E85F1FD98
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/862abd57-333a-3134-abd7-fcc75bd8aa62.roa
Signing time:             Wed 09 Sep 2026 14:32:18 +0000
ROA not before:           Wed 09 Sep 2026 14:32:18 +0000
ROA not after:            Tue 08 Dec 2026 15:32:18 +0000
asID:                     22611
IP address blocks:        66.117.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:5a:9f:ef:c7:19:92:8e:85:f1:fd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep  9 14:32:18 2026 GMT
            Not After : Dec  8 15:32:18 2026 GMT
        Subject: CN=8edb7653-47b0-41ae-81e0-56d5874fb1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bb:87:bb:f0:36:ce:67:20:68:17:e9:76:46:
                    40:9b:2b:5b:3c:8a:7b:aa:3d:75:d5:92:3e:f0:24:
                    32:ad:82:ec:2c:37:8d:a3:bf:22:31:63:c8:43:a1:
                    0e:f3:28:fc:c3:82:9c:cd:3f:2a:e5:29:b6:05:6f:
                    ac:94:c7:fd:a0:f3:45:31:49:40:b3:9a:c6:b6:94:
                    53:07:77:06:a7:ce:66:b6:52:b5:38:52:5a:2c:77:
                    7d:dc:83:50:8c:8d:65:6e:37:3b:db:26:b9:09:26:
                    53:70:30:8e:dc:20:7d:7d:72:39:87:93:7e:40:c2:
                    59:04:c0:c3:90:91:d2:72:00:b4:12:9b:5e:8b:b4:
                    29:b8:56:42:ea:c8:fe:5b:8f:09:eb:9e:2d:12:78:
                    b5:a3:10:c1:e2:14:19:66:7d:29:e8:5d:ff:92:59:
                    aa:0b:47:c1:19:4f:92:17:32:56:7e:52:f3:cc:a7:
                    68:fa:8f:83:0e:ad:6b:eb:f4:72:10:5e:9a:2b:77:
                    6e:4d:7a:39:c7:d4:9e:29:0b:0d:e0:3d:cd:79:2f:
                    99:c2:82:7a:d7:91:19:f0:26:da:85:6a:83:ae:f0:
                    d9:d0:f0:43:37:25:1d:f2:7f:5a:cf:52:f5:2c:11:
                    b7:20:02:4f:9d:2c:5f:a1:cc:c9:44:bc:b5:e8:79:
                    02:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:63:7E:24:8C:15:0D:C6:95:5F:F9:83:CA:50:05:B9:CD:B5:A4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/862abd57-333a-3134-abd7-fcc75bd8aa62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:4b:c0:23:ad:e7:5a:61:bd:da:1b:0a:a3:50:0c:be:3d:56:
         16:92:bc:f7:ae:ad:16:47:47:ae:97:a6:d1:c0:59:69:a1:70:
         61:b4:54:34:e6:24:14:72:f2:61:88:74:ae:bc:13:61:4d:cf:
         99:db:de:7a:a8:1f:06:4c:ae:16:dc:ff:6f:3a:05:f4:35:25:
         62:b7:e2:ed:b9:fc:c2:ea:8e:21:49:f2:97:3c:7c:93:50:b0:
         72:d4:9e:b0:65:e5:fb:76:99:1d:e4:a5:13:d7:07:da:38:6a:
         cc:8f:e7:8c:4f:d8:76:0d:ec:ed:f8:d8:f7:eb:e3:76:a0:27:
         9e:03:5c:31:4b:26:23:96:9f:7c:b5:fd:42:bc:ad:f0:3f:0a:
         ab:36:47:5b:bc:8a:c9:2d:85:37:eb:55:62:0e:a7:9d:94:00:
         5f:76:7a:b0:a0:a0:8c:80:9e:4f:9d:2f:6f:d2:a2:fc:f1:cd:
         03:23:b6:33:51:14:13:61:65:a5:0b:77:44:55:17:44:d7:98:
         63:86:36:33:f7:3d:78:57:ab:72:25:b8:3a:c4:9b:d8:b3:cb:
         8c:97:56:fa:db:96:ca:bd:b8:7c:b7:8f:34:a4:a4:aa:42:ec:
         75:5b:3e:6d:cb:d1:42:f9:d9:19:42:49:4b:3e:36:bd:46:7f:
         29:6d:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:16:29 2026 by rpki-client