Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8e79e3ba-90dc-3ae6-bf98-21b1f4ec107b.roa
File:                     8e79e3ba-90dc-3ae6-bf98-21b1f4ec107b.roa (raw, json)
Hash identifier:          7KKd8z/uZNV4zmivvWT59fwt0Hqh/tVxLwIOLKNG0nA=
Subject key identifier:   FB:08:9F:CC:95:0A:BD:CC:14:93:94:E8:A0:F9:BA:1A:A1:62:CA:84
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F4328584EC20C67EC00E1DA0E5EFC1500
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8e79e3ba-90dc-3ae6-bf98-21b1f4ec107b.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     394044
IP address blocks:        66.180.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:67:ec:00:e1:da:0e:5e:fc:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=5a92fba9-787e-48d1-b5a9-b89a5643d80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:88:b7:f1:fd:9b:ab:40:eb:7a:94:4a:8b:
                    19:9e:75:6c:a3:b1:76:af:3d:37:c6:40:f2:d5:5c:
                    cd:78:73:bc:bb:21:a4:3d:5c:e4:07:c5:c8:1c:58:
                    df:97:fa:96:ab:e8:d6:31:17:33:ff:15:d9:a6:f1:
                    b6:31:2c:08:76:ea:97:1c:43:3b:f8:b0:e6:31:17:
                    08:31:c0:d9:8b:92:a5:12:bb:33:a6:66:ac:ab:7d:
                    b1:b3:7e:87:99:a6:d7:57:c0:03:ed:28:95:c1:12:
                    1b:cd:d6:69:57:ff:66:91:76:14:13:a3:d2:38:4a:
                    58:80:7b:aa:24:52:98:a7:d3:83:89:fd:4a:e7:01:
                    e7:86:5a:eb:59:07:a5:a3:c7:44:66:84:eb:33:27:
                    78:6b:c2:6e:f8:b8:4d:20:fb:7b:16:1a:71:9d:e0:
                    04:ef:b9:49:cc:55:79:91:f5:d0:06:d9:d6:12:54:
                    51:77:92:41:52:d7:4f:e2:99:25:ba:44:98:3c:7d:
                    0d:8d:f1:1c:f6:6e:14:6b:ea:ef:b6:0e:ac:9b:08:
                    6d:fa:06:82:66:28:5f:14:01:f4:6d:7f:8b:6e:a7:
                    ef:05:05:d1:68:89:6e:87:43:0c:74:b0:bf:56:c2:
                    f8:39:87:59:36:72:13:82:42:ce:4e:0e:bd:6f:a8:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:08:9F:CC:95:0A:BD:CC:14:93:94:E8:A0:F9:BA:1A:A1:62:CA:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8e79e3ba-90dc-3ae6-bf98-21b1f4ec107b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:56:df:00:50:14:c0:ae:c0:9a:94:24:a1:33:39:e7:04:b1:
         91:d3:eb:11:a6:e3:94:3d:46:06:d0:9a:65:2e:2d:6d:01:1a:
         9e:30:4e:da:a7:49:82:d2:29:57:3b:0d:82:9b:bb:64:f2:4d:
         6f:3c:b6:4b:df:28:6a:b9:22:32:ce:c1:67:f6:46:14:e1:4e:
         2f:eb:35:a6:87:ee:a1:fd:d4:1d:24:1e:1c:d4:38:3e:16:10:
         fd:95:46:42:41:67:ae:5d:ce:cf:7a:25:45:e9:f7:b8:c5:44:
         6e:3e:33:66:44:03:e0:bf:08:2c:15:3f:cf:b5:fc:e7:c6:ab:
         20:8e:7f:02:b1:91:57:46:b3:5b:f2:c8:a3:28:86:a1:00:52:
         e1:02:e5:30:5a:2c:a6:30:f2:ca:73:07:c9:5d:71:90:c1:cb:
         08:5b:60:27:31:8b:9b:8b:11:d2:e4:8b:ea:68:af:dc:81:55:
         ec:55:50:e0:54:77:73:e7:cc:1f:37:84:08:16:f8:2d:b2:a5:
         e8:4c:f9:5e:ab:d3:e4:a5:38:cc:b7:3d:70:da:56:ac:5b:03:
         d6:bd:1f:2e:11:7d:c9:b5:8c:80:6f:66:85:aa:b3:93:75:2a:
         84:45:2c:a3:e1:44:04:4a:52:45:b5:81:67:27:cc:c2:12:05:
         9b:67:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:17:10 2026 by rpki-client