Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/088b457e-9513-41bd-ae27-adf629ab430c/a0cf30a4-bfb5-37f5-9930-9596eeba23b6.roa
File:                     a0cf30a4-bfb5-37f5-9930-9596eeba23b6.roa (raw, json)
Hash identifier:          ywBWDBHhMSAObDXxyxsQ4uVm0tuFus0FZdWkdegRCvs=
Subject key identifier:   56:A9:F4:FF:40:7E:B7:CA:92:1E:59:FF:DE:C5:87:89:CB:5C:9A:59
Certificate issuer:       /CN=088b457e-9513-41bd-ae27-adf629ab430c
Certificate serial:       010D0C9F4328584F8E244AEE715BD72317E4D264
Authority key identifier: 86:41:33:9A:D6:0A:B3:B0:56:01:74:54:19:EB:3C:E3:99:46:4E:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/088b457e-9513-41bd-ae27-adf629ab430c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/088b457e-9513-41bd-ae27-adf629ab430c/a0cf30a4-bfb5-37f5-9930-9596eeba23b6.roa
Signing time:             Mon 19 Oct 2026 15:33:22 +0000
ROA not before:           Mon 19 Oct 2026 15:33:22 +0000
ROA not after:            Sun 17 Jan 2027 16:33:22 +0000
asID:                     395746
IP address blocks:        66.97.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/088b457e-9513-41bd-ae27-adf629ab430c/088b457e-9513-41bd-ae27-adf629ab430c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/088b457e-9513-41bd-ae27-adf629ab430c/088b457e-9513-41bd-ae27-adf629ab430c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/088b457e-9513-41bd-ae27-adf629ab430c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8e:24:4a:ee:71:5b:d7:23:17:e4:d2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088b457e-9513-41bd-ae27-adf629ab430c
        Validity
            Not Before: Oct 19 15:33:22 2026 GMT
            Not After : Jan 17 16:33:22 2027 GMT
        Subject: CN=a947a4ae-4e62-4d5c-a54d-e71ebede294e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:39:c6:bd:c7:54:b2:51:07:09:0a:e4:d5:
                    c0:b8:d6:a0:f5:a1:c7:ca:c9:82:b4:af:43:8f:2e:
                    89:4e:dc:1d:de:89:05:f6:55:c4:1a:d5:3d:60:6b:
                    bb:1d:4f:31:6e:d6:e4:be:19:87:41:bc:f7:2f:b0:
                    76:37:27:9a:0b:61:d9:96:ae:3e:61:f1:0c:fb:56:
                    47:a4:ad:76:b5:d1:29:0e:64:83:e6:ea:5a:63:21:
                    49:d9:7f:5f:48:c9:23:ac:08:1a:81:59:49:3a:e6:
                    c8:29:cc:ca:5f:b0:a8:cb:4c:bc:a4:7a:5e:65:80:
                    1a:8a:06:66:da:12:a3:97:7c:d2:59:a3:66:4d:5d:
                    aa:03:6e:b9:c8:8f:2b:5f:3b:74:a4:c8:17:f3:a2:
                    6a:19:f8:80:96:60:3b:aa:49:2a:3b:d4:d2:f2:9d:
                    71:a5:02:0e:7f:8a:0a:2a:50:ff:ee:b6:04:50:eb:
                    38:bd:53:5f:28:4e:f1:5e:5d:04:52:3c:76:59:df:
                    9a:64:3d:3d:1f:ed:16:2e:06:9f:08:67:bd:ab:12:
                    fb:11:d5:c9:e2:0d:6f:7b:3b:18:da:2c:f1:25:47:
                    94:f3:6c:24:38:cd:56:9e:8a:36:11:5d:13:62:58:
                    7f:ee:c8:c7:22:87:68:bb:8b:f7:fb:dc:dc:18:d1:
                    9d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A9:F4:FF:40:7E:B7:CA:92:1E:59:FF:DE:C5:87:89:CB:5C:9A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/088b457e-9513-41bd-ae27-adf629ab430c/a0cf30a4-bfb5-37f5-9930-9596eeba23b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/088b457e-9513-41bd-ae27-adf629ab430c/088b457e-9513-41bd-ae27-adf629ab430c.crl

            X509v3 Authority Key Identifier:
                keyid:86:41:33:9A:D6:0A:B3:B0:56:01:74:54:19:EB:3C:E3:99:46:4E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/088b457e-9513-41bd-ae27-adf629ab430c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:7f:ca:e3:47:93:7d:d2:c4:aa:6e:f0:49:62:ac:4f:53:c0:
         a8:1b:b6:ec:38:f5:a3:ed:83:c7:8c:a7:45:d2:9e:46:b9:03:
         7d:58:4b:cc:23:2e:0a:7f:2c:39:cf:43:36:55:a9:3b:80:26:
         45:a9:c7:16:62:74:f2:8a:66:0c:82:2d:c6:d7:69:ff:06:ca:
         92:ff:ea:cc:4e:b1:26:1c:82:69:f5:67:94:1a:17:02:80:52:
         39:81:46:88:d0:e6:5b:5d:a9:c2:a1:63:66:09:a6:5d:d9:b4:
         a5:01:a6:56:c7:d9:c8:89:f1:fb:44:a4:67:56:5a:f9:37:5d:
         c1:c8:6c:5f:6d:61:d0:e6:08:bc:14:a0:b8:60:d6:28:52:c7:
         50:97:f1:d8:c1:bd:9d:28:68:8c:c1:1d:db:6b:41:52:1c:f5:
         eb:90:34:a4:a1:01:b9:99:09:d3:6b:ef:95:08:11:f6:2f:21:
         6f:69:bf:ad:37:7d:73:a1:d2:60:b5:39:09:25:c5:f1:25:a6:
         60:2b:8a:4f:33:d2:85:a1:e9:f6:f9:26:2f:59:52:08:d5:bf:
         3a:29:01:d4:fd:50:40:82:b9:05:51:ba:d4:0d:c9:6a:69:16:
         c7:c7:80:22:00:3a:57:0f:e1:b2:4f:55:bf:56:78:5f:45:b5:
         50:17:39:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:11:08 2026 by rpki-client