Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377/4baa7461-5958-35cf-960e-7909e49aab4e.roa
File:                     4baa7461-5958-35cf-960e-7909e49aab4e.roa (raw, json)
Hash identifier:          f/aFUNMulcM73xqqd4ZIpvHNN9g8oN9XamLJ8H0JiPM=
Subject key identifier:   21:D5:B2:52:D2:0C:6F:83:D2:5E:4B:8D:D9:24:B6:50:C1:62:A8:BF
Certificate issuer:       /CN=116ccd7e-150c-4b93-89ac-f4311fabe377
Certificate serial:       010D0C9F4328584F708826230B683D46CB159ED0
Authority key identifier: 00:18:8C:7E:5A:26:2F:26:F1:22:51:D4:3C:E0:E7:19:78:E4:49:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377/4baa7461-5958-35cf-960e-7909e49aab4e.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     19366
IP address blocks:        66.102.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377/116ccd7e-150c-4b93-89ac-f4311fabe377.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377/116ccd7e-150c-4b93-89ac-f4311fabe377.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:26:23:0b:68:3d:46:cb:15:9e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116ccd7e-150c-4b93-89ac-f4311fabe377
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=7de7f4a3-0f80-4728-97b2-9498cd46ae97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:46:70:6c:0e:9b:c9:f6:8e:12:5a:af:e8:
                    86:50:b8:18:e7:b4:c5:ea:1a:00:a5:9d:d1:db:78:
                    08:07:96:6b:6f:63:5c:7a:85:43:5d:68:5c:31:67:
                    00:31:1a:5d:39:1f:48:2d:a4:53:b5:1f:cf:e9:d7:
                    2e:d9:f8:5b:4b:a0:d9:8a:7a:3a:13:90:d0:5b:1b:
                    fe:d6:ce:59:d8:4f:55:3a:e2:60:58:d3:48:81:19:
                    f0:c7:43:40:4b:a3:f6:5e:14:9a:c4:1d:76:74:ad:
                    5b:66:1e:e6:41:6e:35:f1:69:19:71:61:25:bc:d0:
                    c5:9c:fa:70:69:b2:82:79:92:ad:b5:61:22:75:0e:
                    68:a3:78:6c:fb:70:63:66:94:6e:99:be:34:a7:9b:
                    78:6f:11:82:f1:67:5f:b4:97:ee:6f:11:ce:97:aa:
                    c6:88:be:d7:22:20:fb:77:19:19:5f:f4:43:26:67:
                    9b:a7:16:41:6d:20:c0:6c:c9:a1:c1:6d:8a:d4:9a:
                    cc:90:1f:fb:eb:da:52:e5:4a:d1:b3:b0:5c:47:f8:
                    3e:3f:09:4d:6e:9e:89:0f:1a:f0:4e:16:ca:d4:5e:
                    6d:55:81:98:f3:48:45:ef:e6:c1:49:11:a5:79:40:
                    c3:2f:59:92:24:14:db:10:8e:cb:92:66:00:59:13:
                    4c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D5:B2:52:D2:0C:6F:83:D2:5E:4B:8D:D9:24:B6:50:C1:62:A8:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377/4baa7461-5958-35cf-960e-7909e49aab4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377/116ccd7e-150c-4b93-89ac-f4311fabe377.crl

            X509v3 Authority Key Identifier:
                keyid:00:18:8C:7E:5A:26:2F:26:F1:22:51:D4:3C:E0:E7:19:78:E4:49:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c9:19:27:c5:7b:11:5c:70:c2:5e:da:7c:0b:b0:da:6b:0d:
         c7:e0:35:7c:9d:f7:9b:d6:1a:6e:40:bd:df:78:1b:f0:a2:df:
         02:0e:32:a1:61:6d:1b:38:08:53:46:bf:74:46:89:91:ef:39:
         4a:8d:ce:04:6a:56:9b:f8:bc:ca:2b:c5:f6:26:51:97:5e:f6:
         7a:bd:e4:c5:39:cb:b0:9a:64:64:34:b6:35:29:b3:1a:84:f5:
         68:01:c6:d2:61:cb:13:51:08:91:86:1f:f8:6d:92:bd:72:00:
         3e:c4:8b:13:0b:15:da:79:c9:ee:c8:fd:3d:e5:13:b0:73:76:
         fd:76:20:d1:d8:56:13:7f:36:20:10:42:1e:9c:b2:1f:e5:3b:
         80:9a:4a:8d:e1:b7:97:ba:35:7f:cf:37:45:d2:b9:e6:4b:ab:
         97:96:2c:94:9d:ae:f2:b9:57:35:f5:7f:b6:f4:35:eb:e4:70:
         50:ac:fd:59:d3:a2:56:c1:5a:bf:3c:87:fc:5c:99:c5:b0:79:
         26:59:8f:a2:5c:2e:15:e9:3c:04:09:e3:4e:e5:1e:08:6b:64:
         e9:34:f7:37:14:6a:e3:d7:3c:01:8b:92:c9:a3:69:e8:c8:e6:
         73:ee:a8:1b:82:75:ae:ab:36:05:75:56:d2:1a:de:66:72:56:
         c0:fd:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:22:41 2026 by rpki-client