Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60618a0d-722d-3e7a-8a62-a2ce3e2d7cb8.roa
File:                     60618a0d-722d-3e7a-8a62-a2ce3e2d7cb8.roa (raw, json)
Hash identifier:          U70jKc2D8i5BfjyxthNPfvPYdTQ61MPz+e4Ca5tzdME=
Subject key identifier:   F6:FE:F7:F2:32:22:9C:2C:EE:07:6C:57:5A:FF:E7:31:7A:63:92:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497764012CC079DC4429F5F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60618a0d-722d-3e7a-8a62-a2ce3e2d7cb8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22909
IP address blocks:        66.208.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:64:01:2c:c0:79:dc:44:29:f5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fba96254-5f4b-4202-8152-42dc527bde49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:99:e0:03:d3:30:a8:8d:ba:b2:c7:08:4c:
                    0b:e9:2e:71:96:6d:33:74:e3:dc:83:32:76:8c:a2:
                    d8:cd:71:98:5c:67:06:de:d1:0b:07:b6:5a:79:8c:
                    fd:18:ba:17:07:32:e5:87:27:2e:e7:68:59:71:1c:
                    c0:75:1f:36:98:45:b6:0f:b8:c9:f7:4e:e9:92:97:
                    34:ef:da:76:a0:24:03:c9:ca:a5:79:13:be:83:55:
                    70:15:0b:a0:e0:8e:4f:28:04:f2:bf:61:cb:8d:f9:
                    d9:9d:d6:4e:9e:ec:a9:4e:a8:6e:d5:6b:a9:99:89:
                    a0:54:4c:95:f3:f0:01:cd:68:85:a2:f7:b3:67:14:
                    83:28:06:18:38:1e:5c:e3:9d:fc:48:81:29:62:91:
                    f5:e7:d5:0c:92:97:f7:96:56:32:a0:f6:d1:34:94:
                    35:43:ed:f4:09:87:85:82:b4:be:54:fc:5e:e0:07:
                    d9:56:47:f3:44:01:42:f4:c2:7f:c8:cf:b9:78:0d:
                    76:8e:b5:94:62:fc:a3:50:1d:64:1f:45:3d:0b:e5:
                    c0:e7:5d:d3:8b:ce:e7:af:3b:a6:1d:f5:b3:74:e3:
                    b9:cc:fa:14:b6:0e:10:e3:9c:8f:9b:6b:72:28:1a:
                    a6:37:fc:74:47:e2:5d:98:90:1c:21:69:21:55:3c:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FE:F7:F2:32:22:9C:2C:EE:07:6C:57:5A:FF:E7:31:7A:63:92:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60618a0d-722d-3e7a-8a62-a2ce3e2d7cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:93:83:09:4c:c9:c7:01:24:fd:9c:9b:88:31:32:6f:35:18:
         73:f4:b1:98:6c:9d:33:59:90:37:eb:75:44:e5:3f:dc:ce:8f:
         9a:2d:0a:a7:ff:9c:71:cd:a0:ed:0d:13:bf:f2:7c:6a:99:1e:
         95:e9:a3:fe:49:d5:6d:bd:df:1c:fb:d3:71:65:8c:d1:52:d3:
         76:8c:41:3c:2d:56:12:de:1d:f3:4d:45:1c:a3:56:e5:8d:f5:
         d5:d2:cb:60:ea:5e:92:2e:d8:0b:7c:98:19:40:25:64:14:06:
         66:bf:c9:92:15:27:7c:ba:62:3d:01:07:66:16:3e:ab:fa:ae:
         2f:51:14:51:4b:37:3b:d5:80:41:a2:5b:76:f0:05:01:dd:01:
         87:50:92:87:d5:bb:73:49:28:a5:10:70:87:e4:69:0d:29:5a:
         69:e2:aa:8c:87:65:c0:de:c5:3b:10:51:26:4f:f4:fb:40:1c:
         7a:b5:4f:0b:ee:87:01:07:c6:be:8a:7f:c0:8b:91:78:09:e6:
         bb:da:aa:fd:b6:0a:a5:31:28:3f:49:b5:06:52:0b:60:a7:a5:
         f0:40:7c:93:2d:92:0e:e4:26:60:8d:36:70:2e:0e:89:4b:c7:
         fe:28:b2:f1:e8:45:c8:32:58:f0:64:3b:34:f5:9e:ef:75:ae:
         18:00:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:28:11 2026 by rpki-client