Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa
File:                     0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa (raw, json)
Hash identifier:          iuFfyIlaZslu7LpUjQOVoNWEanztivUtGr1g7/qeiXU=
Subject key identifier:   0E:D6:3E:D0:91:B3:96:AC:25:1F:9A:DE:AD:BF:95:9E:BF:C7:74:D2
Certificate issuer:       /CN=5f0444bf-8f35-4754-9121-fb0e0baca58d
Certificate serial:       010D0C9F4328584EC7A1CB2E19D1B23DA5A4D8A0
Authority key identifier: 46:45:6E:EB:E8:2D:43:55:0B:C2:E8:8E:14:B7:F9:BB:7D:24:FD:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        66.232.20.0/23 maxlen: 23
                          206.166.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/5f0444bf-8f35-4754-9121-fb0e0baca58d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/5f0444bf-8f35-4754-9121-fb0e0baca58d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:cb:2e:19:d1:b2:3d:a5:a4:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0444bf-8f35-4754-9121-fb0e0baca58d
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=c021fc5d-387d-4d66-8e1d-6dd599b36036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:51:e4:f9:77:ca:86:7b:61:33:f1:a1:4c:0f:
                    a4:4f:0f:70:da:7b:99:e3:c5:7f:0f:5a:2e:40:c1:
                    6b:6e:c0:a0:d2:0a:ff:52:fd:a6:92:8d:ac:72:d2:
                    33:ff:50:94:02:58:62:fd:dc:98:d8:f9:cb:32:42:
                    c6:04:79:74:a4:6e:e5:6c:2f:84:a3:07:12:23:fc:
                    2e:9a:fe:97:4b:1f:35:a4:91:df:da:42:0a:b9:c0:
                    a0:f5:cb:0b:3e:17:18:7f:fc:84:02:70:96:31:26:
                    db:98:4d:00:f4:34:f9:eb:b7:69:4c:98:21:b8:20:
                    b1:46:43:00:ea:10:38:46:b7:09:9f:19:b1:6d:d7:
                    3a:50:44:15:a3:87:ad:b0:be:a4:21:51:b6:48:36:
                    dc:33:4a:2d:7f:70:41:55:db:f7:df:b3:5c:57:70:
                    2e:0c:ea:af:5c:84:df:48:fb:37:b1:79:14:99:33:
                    65:bc:2b:51:61:81:23:b2:99:8d:80:ab:ae:ad:16:
                    e3:92:14:41:d2:c8:42:5c:a9:7f:b2:f2:34:82:f5:
                    b7:00:cc:e9:f0:05:3a:75:7e:c3:8f:67:54:1e:5c:
                    2e:0e:9e:f7:82:11:cc:64:97:1a:8f:53:b3:c3:e1:
                    5a:ef:6b:4d:02:8b:f5:0d:6a:5f:9e:fb:58:00:c6:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D6:3E:D0:91:B3:96:AC:25:1F:9A:DE:AD:BF:95:9E:BF:C7:74:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/5f0444bf-8f35-4754-9121-fb0e0baca58d.crl

            X509v3 Authority Key Identifier:
                keyid:46:45:6E:EB:E8:2D:43:55:0B:C2:E8:8E:14:B7:F9:BB:7D:24:FD:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.20.0/23
                  206.166.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d3:7b:be:eb:96:7c:85:ee:92:2f:23:7c:e2:7b:78:ad:61:
         d2:11:85:89:fe:a2:94:3c:fe:6c:59:15:91:a3:87:c8:f9:8a:
         c2:cc:9e:20:1a:84:9a:d5:00:e2:05:fb:97:68:88:67:1c:da:
         db:02:1b:58:bc:91:67:94:6a:1a:b4:64:79:39:1d:35:eb:de:
         44:eb:61:42:85:1f:b3:33:ad:01:8e:f2:9a:ae:a7:40:63:88:
         64:6b:78:e9:f0:88:39:08:ce:d3:26:06:67:b7:93:18:13:b5:
         7c:5f:2c:80:0d:54:4d:ce:09:95:05:92:3a:16:36:a6:de:84:
         ad:45:70:e7:f8:f2:4c:82:1d:88:8c:0f:5e:41:7a:bc:a3:a9:
         80:b1:1b:60:6d:4d:5a:76:45:3b:32:4a:c2:69:fe:1b:f5:18:
         9f:26:22:d1:04:4e:e5:a6:0a:3d:78:24:b7:6c:90:59:5e:63:
         27:4e:6c:11:72:e4:b3:7b:87:bf:97:79:a7:d8:ac:a2:d6:7d:
         37:1d:87:66:79:05:63:d3:d8:60:1c:ac:b7:c2:d6:c2:8a:47:
         61:a8:2b:21:c1:eb:ba:66:76:19:5d:fc:57:a8:7c:f8:16:77:
         64:84:66:81:00:df:7a:92:19:00:78:ec:88:36:b4:ea:16:6c:
         7a:37:e0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:39:21 2026 by rpki-client