Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/dd86006a-5f34-326e-86fa-71208d02c134.roa
File:                     dd86006a-5f34-326e-86fa-71208d02c134.roa (raw, json)
Hash identifier:          ORKYj5UVtY4jshW6Zt3feEZ6DDI2WxDrkpV8l0U3dgE=
Subject key identifier:   72:34:40:9A:96:46:DB:9B:BA:1E:B8:8C:78:E4:4B:35:FB:76:AF:76
Certificate issuer:       /CN=0abdd34a-e7fe-45bf-9172-cf39d7745c17
Certificate serial:       010D0C9F4328584EA79A54CBB36D74A9C1407E80
Authority key identifier: B9:7D:84:C1:09:8C:9E:FA:FB:23:81:CA:79:D4:FF:18:E1:EA:B7:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/dd86006a-5f34-326e-86fa-71208d02c134.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        66.45.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:54:cb:b3:6d:74:a9:c1:40:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abdd34a-e7fe-45bf-9172-cf39d7745c17
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ea381b11-c6e1-4206-a7ef-e6c899d26a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:e3:1e:0b:93:91:33:88:45:44:0a:a6:29:
                    2f:af:18:8e:a4:5c:e8:04:64:1a:b9:2b:a1:7a:58:
                    3e:9f:40:b7:3c:53:e6:5d:14:7a:13:14:6c:65:3d:
                    48:a7:83:8e:d5:01:06:90:8f:33:d0:66:b4:61:ac:
                    9b:d7:b7:3e:64:02:46:4d:f9:72:78:20:bb:81:8c:
                    2b:20:8f:8f:06:04:89:8f:bd:32:92:df:62:ed:bd:
                    f6:92:9d:c4:f6:3e:4d:b5:52:47:30:76:61:33:a5:
                    22:10:11:30:90:fa:e6:8b:ce:cb:df:cd:79:b1:2a:
                    70:05:cd:11:cb:4c:8f:aa:a9:29:c6:be:9b:0f:da:
                    94:fc:5b:22:f6:4f:7a:4f:a6:cd:c5:ea:80:fe:85:
                    19:c4:49:12:17:c6:65:7a:b4:8f:d4:61:42:9f:27:
                    f8:8a:4a:5d:d4:bf:85:00:a1:1c:90:d1:70:77:b8:
                    ae:67:1f:41:84:dd:92:f5:2f:62:1e:8e:6b:cb:c0:
                    f8:aa:8e:0b:73:e5:89:eb:b7:4e:83:db:0d:a8:58:
                    80:88:45:88:af:31:87:7c:ab:e5:1b:d3:e8:a8:f3:
                    58:52:9e:8a:24:23:fc:a4:77:a1:e6:25:40:5e:6a:
                    c4:04:fe:da:30:d8:0f:63:9a:00:aa:e3:9e:40:b0:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:34:40:9A:96:46:DB:9B:BA:1E:B8:8C:78:E4:4B:35:FB:76:AF:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/dd86006a-5f34-326e-86fa-71208d02c134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.crl

            X509v3 Authority Key Identifier:
                keyid:B9:7D:84:C1:09:8C:9E:FA:FB:23:81:CA:79:D4:FF:18:E1:EA:B7:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:63:2d:6a:61:ff:ab:2e:94:86:f0:ab:ad:9e:0f:e7:23:08:
         d7:2b:7f:68:12:65:04:49:f8:7a:e1:c6:e9:d4:32:ae:bc:ce:
         03:4e:cf:47:87:43:99:20:2b:eb:69:23:3e:ce:ce:06:f3:b0:
         e0:32:00:26:57:5d:c3:0d:ca:1d:4f:ab:a9:60:a7:d7:cb:ed:
         3e:c4:36:44:52:be:f7:f5:6d:cf:68:24:bd:65:a2:cf:91:95:
         f8:dc:d3:f0:ee:98:a2:34:56:83:8a:21:0f:35:dd:08:b5:ba:
         37:fe:dd:6f:cb:ef:f5:b1:ce:9b:c3:86:0d:a9:18:f8:a3:cc:
         92:2d:76:bc:2a:0f:36:90:9d:df:da:0d:c0:ae:e5:67:da:84:
         02:51:6b:dd:bb:c9:f1:f9:a8:f9:4b:c0:d2:d9:d0:f3:07:cd:
         1b:73:da:a3:6c:25:dc:15:41:c6:98:2c:a5:9c:40:0c:45:f2:
         26:38:97:1f:1f:0a:91:49:23:ee:41:49:e4:8b:17:ec:fe:c4:
         b6:5d:0c:14:ba:dd:89:09:d2:20:80:8d:77:66:b0:ce:66:e5:
         97:eb:33:50:bc:b3:1c:88:9f:d8:44:49:cb:c5:f7:e7:f9:7b:
         d1:f5:9b:50:68:f8:03:10:0a:0d:24:90:cf:bb:56:ad:a0:3f:
         e1:79:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:11 2026 by rpki-client