Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/bc21bc81-7be8-31ed-b5f6-3a1df734905f.roa
File:                     bc21bc81-7be8-31ed-b5f6-3a1df734905f.roa (raw, json)
Hash identifier:          NgOssmyTX3dT6TL9hlZebG4BPDqliO3Z9+URV1Ge9dA=
Subject key identifier:   1B:FB:FC:21:3C:66:42:5B:15:0B:77:E0:DE:70:BE:84:15:E8:2F:A7
Certificate issuer:       /CN=4550770a-2981-4fa9-bb7d-de9c7306d120
Certificate serial:       010D0C9F4328584F806B80AE54582A00A744A180
Authority key identifier: 70:EB:7A:F3:32:C8:A8:D7:7D:BA:C5:54:24:81:B9:3C:18:48:A7:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/bc21bc81-7be8-31ed-b5f6-3a1df734905f.roa
Signing time:             Wed 14 Oct 2026 17:35:31 +0000
ROA not before:           Wed 14 Oct 2026 17:35:31 +0000
ROA not after:            Tue 12 Jan 2027 18:35:31 +0000
asID:                     8075
IP address blocks:        66.179.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:80:6b:80:ae:54:58:2a:00:a7:44:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4550770a-2981-4fa9-bb7d-de9c7306d120
        Validity
            Not Before: Oct 14 17:35:31 2026 GMT
            Not After : Jan 12 18:35:31 2027 GMT
        Subject: CN=95898c4a-309f-4a69-aa3e-d8b1f9c32b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:44:bc:86:43:b6:b8:d5:48:59:1d:86:7b:
                    73:9d:bb:39:c9:e7:e9:bc:ed:bc:97:ba:ad:2c:33:
                    85:e5:c6:3a:5c:39:5c:33:90:48:27:ac:d6:46:da:
                    c2:8b:c7:39:4c:60:91:4f:70:13:29:ae:18:e3:7a:
                    e2:8a:92:64:83:f8:33:cf:4e:ba:99:47:24:a2:3e:
                    02:29:4c:86:cc:6b:b5:b9:7a:d5:31:68:59:f3:d9:
                    0a:83:bd:90:80:ae:60:19:e3:92:b7:08:ed:ee:b7:
                    9e:64:bb:1b:ee:5e:bb:ec:2a:a7:90:9b:13:7b:33:
                    7c:29:0b:5d:14:05:b3:56:f0:e5:a6:12:77:f6:b4:
                    77:3c:82:6a:5c:c1:99:2b:d5:3a:a4:f3:43:15:63:
                    23:9c:ea:45:90:c0:f2:b3:8a:c9:cc:97:0a:06:c6:
                    6f:06:d2:38:bf:78:bc:5e:0f:37:fd:1c:4c:39:5a:
                    5e:3c:b6:cc:96:d9:71:3f:c7:c9:50:a1:d5:96:8b:
                    02:d9:af:6c:3f:32:bb:9f:59:a5:a3:17:17:04:bb:
                    77:f2:db:3a:56:8d:af:0c:e1:79:8d:af:9f:ad:c1:
                    be:89:a0:0d:3e:94:b7:f6:c8:6a:c1:a5:49:c7:89:
                    68:df:52:e1:ef:f0:b2:48:f8:82:6b:e8:fe:a6:5e:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FB:FC:21:3C:66:42:5B:15:0B:77:E0:DE:70:BE:84:15:E8:2F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/bc21bc81-7be8-31ed-b5f6-3a1df734905f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.crl

            X509v3 Authority Key Identifier:
                keyid:70:EB:7A:F3:32:C8:A8:D7:7D:BA:C5:54:24:81:B9:3C:18:48:A7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:43:31:ac:1e:c3:c5:a5:54:6d:d7:a8:ed:29:0c:6c:93:b7:
         40:e4:90:07:58:ce:5d:d7:b4:be:a4:3d:52:ba:2d:ff:3d:96:
         fc:ba:e7:3c:d8:be:6e:2a:e1:8b:1c:93:6b:25:71:25:6d:22:
         dd:76:6f:ba:34:89:11:0e:6b:a2:79:81:92:42:10:08:fd:72:
         18:59:da:16:f7:c9:5c:d7:03:28:7c:da:a3:b2:5f:6b:50:c5:
         62:4f:50:4f:7b:0c:28:21:ef:4d:5a:c2:cf:df:19:9e:df:cb:
         44:dd:c6:99:5e:77:27:a7:40:b5:67:17:c0:26:89:30:a7:8d:
         ef:39:f8:b4:62:6b:7c:e1:ad:d7:5c:ac:38:38:be:83:99:d6:
         3a:3f:16:49:ec:5f:fa:c0:75:aa:a7:68:68:ff:fa:a9:66:21:
         5b:bc:fa:7d:fc:0b:c3:e9:5a:18:69:45:b2:a9:60:0b:a7:4e:
         e5:45:d0:74:bb:39:09:4b:87:dc:ac:2e:b6:14:12:63:19:19:
         99:2e:e9:11:23:91:c3:a7:79:ca:1c:42:e7:01:dc:a4:2b:55:
         0f:61:1f:41:1d:89:c0:60:47:6f:85:c6:f4:c4:70:65:e6:76:
         a0:41:11:b8:8c:21:46:34:52:6d:49:aa:96:d3:eb:97:d9:05:
         7c:99:36:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:10:51 2026 by rpki-client