Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/85d294e9-78a5-369d-a3f2-71a1857f2fcb.roa
File:                     85d294e9-78a5-369d-a3f2-71a1857f2fcb.roa (raw, json)
Hash identifier:          Wnv6HSJadpYGs01ysVmntSIAOUwn00ezniY2SWeGuzM=
Subject key identifier:   8B:6B:0C:CA:CE:6E:88:B6:E5:C5:AB:77:BA:96:FB:87:DE:4D:2D:26
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584F8F3DAD9FE292BBBBD1525180
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/85d294e9-78a5-369d-a3f2-71a1857f2fcb.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     13916
IP address blocks:        66.159.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:ad:9f:e2:92:bb:bb:d1:52:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=5bed5f17-e0f5-472b-b7b6-620ab71d87a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:4a:ad:b3:1e:f5:c4:fc:fd:f5:51:e9:85:
                    41:1c:a0:84:38:19:0a:35:6e:8e:cc:85:3b:4b:c9:
                    9b:05:96:5b:44:0d:98:f8:78:7e:c1:9c:2c:b7:26:
                    69:dd:a6:ba:1d:53:8c:bd:bb:92:cb:1b:13:dc:e7:
                    77:75:1f:94:82:f5:3c:46:03:37:2c:6f:99:22:d7:
                    50:69:32:c0:8b:fa:2b:54:3d:6a:5c:d2:38:13:9e:
                    5a:5a:6b:27:f8:34:47:cb:12:82:61:70:5e:3f:65:
                    06:8d:fb:00:91:eb:3d:9f:2d:0e:cb:8c:c9:cc:5d:
                    ae:fd:02:ed:5c:4c:29:1f:a1:0c:2e:c7:8a:33:4b:
                    66:75:8d:13:4c:23:de:49:8c:63:c2:7e:e1:f9:0f:
                    2e:76:9e:c6:47:e0:37:2d:f4:34:29:30:aa:0f:fc:
                    3e:41:b4:65:dd:05:8a:72:9d:60:2d:00:d6:35:1c:
                    f3:e9:b4:ba:a5:01:dc:db:b0:74:3c:bf:da:d6:64:
                    fc:03:0f:ee:cc:29:65:8d:35:76:75:13:d6:23:0f:
                    96:c5:e1:6f:69:32:6f:2f:70:7d:37:31:0f:26:d1:
                    02:bd:c1:2a:82:8e:5c:9d:95:f6:6c:2f:13:6a:2e:
                    c6:af:50:79:4a:b4:4d:d8:47:55:1f:90:d4:e4:06:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6B:0C:CA:CE:6E:88:B6:E5:C5:AB:77:BA:96:FB:87:DE:4D:2D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/85d294e9-78a5-369d-a3f2-71a1857f2fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f1:2a:69:9e:88:09:d8:2f:7b:88:be:3b:71:ec:d4:1b:24:
         ce:d3:3c:70:e0:9b:26:cd:ef:42:f9:1a:5b:1e:c9:5f:ac:9e:
         a3:f0:ba:c8:9b:d5:e8:f8:51:d0:4f:b0:6b:a2:b2:24:a5:ca:
         74:72:c5:20:76:6e:e1:c0:5d:c6:25:e8:eb:94:01:95:fe:ad:
         a2:65:5c:00:63:c7:6c:80:5b:ef:31:0e:39:40:86:60:d2:54:
         95:a8:dc:eb:f7:f2:2a:6a:50:fb:1c:45:2a:69:4d:25:43:0f:
         d7:0b:5a:82:90:18:d3:f4:19:44:5a:f0:ba:d0:dc:c6:3c:f5:
         1c:e1:94:82:17:8d:84:09:45:e8:79:4c:14:3b:eb:81:3f:d8:
         3a:f8:67:12:53:9e:37:bb:01:2d:63:04:f6:51:9d:e8:cc:77:
         b2:32:2c:ae:13:ce:71:64:f5:e9:42:58:de:03:51:94:7f:9b:
         71:a2:ad:a9:de:19:f2:4b:7c:3c:8b:bd:1c:fc:7d:fd:a8:30:
         a1:80:21:87:db:83:58:78:89:8e:5a:70:ed:06:e0:17:55:e0:
         9b:97:9e:82:d0:cf:51:3f:37:e6:cb:a5:01:aa:ab:f7:d8:18:
         44:86:c4:bb:87:d4:8b:a9:7f:f3:17:55:64:24:4f:ff:fc:b6:
         d0:a0:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:25:51 2026 by rpki-client