Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/e2db0f68-a81a-3474-b673-40feb9b736f5.roa
File:                     e2db0f68-a81a-3474-b673-40feb9b736f5.roa (raw, json)
Hash identifier:          gSaDOpMfC+VVJFyYxF1wgav8K4Lsse3z6TK/rktdSvg=
Subject key identifier:   3E:D6:67:E9:DC:F8:F3:B1:FC:48:1E:CF:BC:3E:16:11:96:F2:30:2B
Certificate issuer:       /CN=169d877f-3a03-42b7-8bce-7109eddd1123
Certificate serial:       010D0C9F4328584F86DDA928FB85FDB563D70180
Authority key identifier: 9B:C8:3F:A3:1D:0C:5A:99:2C:B5:04:5C:53:DB:BF:06:D2:99:E5:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/e2db0f68-a81a-3474-b673-40feb9b736f5.roa
Signing time:             Sat 17 Oct 2026 01:00:13 +0000
ROA not before:           Sat 17 Oct 2026 01:00:13 +0000
ROA not after:            Fri 15 Jan 2027 02:00:13 +0000
asID:                     23550
IP address blocks:        66.129.160.0/24 maxlen: 24
                          66.129.161.0/24 maxlen: 24
                          66.129.162.0/24 maxlen: 24
                          66.129.163.0/24 maxlen: 24
                          66.129.164.0/24 maxlen: 24
                          66.129.165.0/24 maxlen: 24
                          66.129.168.0/24 maxlen: 24
                          66.129.169.0/24 maxlen: 24
                          66.129.170.0/24 maxlen: 24
                          66.129.171.0/24 maxlen: 24
                          66.129.172.0/24 maxlen: 24
                          66.129.173.0/24 maxlen: 24
                          66.129.174.0/24 maxlen: 24
                          66.129.175.0/24 maxlen: 24
                          184.95.0.0/24 maxlen: 24
                          184.95.1.0/24 maxlen: 24
                          184.95.2.0/24 maxlen: 24
                          184.95.3.0/24 maxlen: 24
                          184.95.4.0/24 maxlen: 24
                          184.95.5.0/24 maxlen: 24
                          184.95.6.0/24 maxlen: 24
                          184.95.8.0/24 maxlen: 24
                          184.95.9.0/24 maxlen: 24
                          184.95.10.0/24 maxlen: 24
                          184.95.11.0/24 maxlen: 24
                          184.95.12.0/24 maxlen: 24
                          184.95.13.0/24 maxlen: 24
                          184.95.14.0/24 maxlen: 24
                          184.95.15.0/24 maxlen: 24
                          2605:b800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/169d877f-3a03-42b7-8bce-7109eddd1123.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/169d877f-3a03-42b7-8bce-7109eddd1123.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:dd:a9:28:fb:85:fd:b5:63:d7:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169d877f-3a03-42b7-8bce-7109eddd1123
        Validity
            Not Before: Oct 17 01:00:13 2026 GMT
            Not After : Jan 15 02:00:13 2027 GMT
        Subject: CN=a83aec2a-46b2-49aa-936d-5f823fa90373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:05:67:f9:08:5f:15:c1:95:8d:06:3a:12:1c:
                    4b:d1:77:67:c3:ba:0c:1b:fe:48:f4:39:dd:c9:85:
                    7b:97:07:bb:26:5a:84:ad:fb:35:d5:c5:a9:b4:c4:
                    09:4a:d0:0d:ad:2a:14:b0:49:a8:2a:bd:be:7f:0e:
                    36:d5:37:a7:db:e4:a6:ae:0c:34:e9:6b:57:2f:b9:
                    56:8d:1e:5e:f7:ae:fc:f6:fd:d2:7c:13:c1:0e:f7:
                    d4:35:f9:da:ce:6c:2c:9a:f9:af:02:cd:a9:a6:82:
                    55:db:28:a8:66:8e:e2:33:4c:aa:e1:06:49:c2:42:
                    28:fc:63:e3:3f:9f:89:ef:21:08:3a:63:9b:42:66:
                    2d:bf:0a:8f:17:bc:61:57:4c:27:6b:81:77:97:4e:
                    53:9f:21:10:33:26:62:6a:dc:06:c8:af:78:d6:69:
                    5f:e2:3f:d0:30:8d:84:d4:24:e2:7d:9f:31:b9:d6:
                    b8:ed:8d:4a:3c:7c:49:57:52:0b:0c:a7:f2:98:9e:
                    13:6c:fb:c0:3f:ca:a3:cd:fc:f3:3e:6c:5e:2e:61:
                    1c:7c:82:48:10:3b:86:f2:38:d8:9e:04:f2:14:d0:
                    11:38:f2:a9:d6:d6:f7:99:74:78:88:14:2b:68:60:
                    43:a1:27:1e:08:7d:32:d7:32:f2:be:dd:51:8b:7f:
                    cf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D6:67:E9:DC:F8:F3:B1:FC:48:1E:CF:BC:3E:16:11:96:F2:30:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/e2db0f68-a81a-3474-b673-40feb9b736f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/169d877f-3a03-42b7-8bce-7109eddd1123.crl

            X509v3 Authority Key Identifier:
                keyid:9B:C8:3F:A3:1D:0C:5A:99:2C:B5:04:5C:53:DB:BF:06:D2:99:E5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.160.0-66.129.165.255
                  66.129.168.0/21
                  184.95.0.0-184.95.6.255
                  184.95.8.0/21
                IPv6:
                  2605:b800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:51:9c:f6:bb:cf:52:ce:b8:ff:70:12:19:82:5f:d8:e5:c5:
         b3:1e:50:af:56:02:2a:66:56:65:7d:48:5e:59:49:7d:83:bd:
         b5:85:78:18:c0:03:4c:ba:7a:3d:c0:19:ec:33:8e:18:01:0d:
         6b:ea:53:ba:72:d8:2c:ef:12:e2:ca:dd:a1:de:d0:c2:7b:17:
         ad:c5:80:80:cd:e7:8d:af:38:e0:22:27:8d:5a:d3:7b:09:ba:
         4a:c3:7b:a8:ff:07:8d:b8:5b:cf:66:51:ae:2a:a7:07:27:6a:
         3e:fc:c7:1f:24:fe:f3:a3:d8:0f:0d:e3:50:e0:11:78:db:bf:
         a7:23:e7:46:18:45:bd:84:a6:7e:e5:34:4a:8d:99:50:48:ea:
         fa:25:70:7e:58:36:89:97:9c:f4:81:02:c0:ce:c4:f7:f7:1d:
         c9:3f:7a:cc:c1:f3:bd:69:71:42:aa:aa:ac:c3:3a:c0:e3:54:
         5e:7b:d4:8d:92:17:90:44:8b:ed:2d:f7:36:e9:9e:22:d2:1d:
         a5:85:43:68:da:83:19:b7:15:95:f8:f2:67:67:87:f5:24:c4:
         f0:de:a9:b6:84:47:88:b3:8a:1d:f5:57:87:3a:ca:7d:75:6b:
         51:08:97:6e:97:39:3e:93:3a:ac:af:b5:56:f2:78:6d:e4:e0:
         22:54:50:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:09:43 2026 by rpki-client