Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa
File:                     0752d7a5-5222-310c-85f3-05e84bd2890b.roa (raw, json)
Hash identifier:          JwP3QrogYagsOvjCTz5xCYrS+bGsWXS0h9abfyion58=
Subject key identifier:   39:0A:51:57:6B:68:F4:2D:F8:78:DF:6E:7C:F8:E5:41:AF:73:56:7E
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584EA7965D162FB10FCD24DA37C0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     4213
IP address blocks:        66.172.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:5d:16:2f:b1:0f:cd:24:da:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c7e6a813-61a4-423a-b384-7be57f7ff467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:f3:fb:02:a8:b9:d0:b2:73:7c:6b:f2:e5:
                    be:a8:bd:8a:d6:2f:b1:48:ac:dd:2e:c1:df:8a:05:
                    c9:49:07:43:62:7b:0f:3a:d4:50:3b:b0:4c:14:96:
                    f3:00:d6:96:49:89:fb:f1:c4:ab:80:21:c5:d1:5d:
                    f8:80:ff:54:0b:e5:0e:dc:7f:f3:84:02:9d:3e:6d:
                    d2:23:e3:3d:27:e6:67:2b:fc:47:19:3d:2d:75:08:
                    5e:9f:92:6a:98:38:bb:2b:07:4e:cf:ed:75:46:8f:
                    d0:f2:14:cc:55:1a:6c:d0:c4:a5:0f:76:45:d7:2c:
                    b9:7f:68:3e:23:60:ba:a9:73:fb:d2:a5:d8:c0:57:
                    04:3a:75:43:89:a7:6a:12:64:d2:10:68:c0:0b:ac:
                    d8:9c:59:60:0f:49:b1:c9:8a:27:b6:ba:e6:a2:fa:
                    2d:02:c4:6e:a9:ba:54:72:fc:19:cb:a4:60:72:e5:
                    d6:73:e5:5a:50:35:4b:18:ec:5c:b1:18:86:33:ed:
                    da:10:03:cd:12:20:ed:d1:92:8d:fd:70:27:1b:6f:
                    89:66:0f:5a:5e:89:e6:ca:b0:75:95:d1:46:a2:38:
                    a1:56:fc:71:d2:78:71:2a:70:c0:68:64:bc:84:40:
                    5a:c2:27:01:57:bd:44:6d:d4:2a:ac:a7:b3:43:9a:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0A:51:57:6B:68:F4:2D:F8:78:DF:6E:7C:F8:E5:41:AF:73:56:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.172.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:9e:4c:d7:35:9a:fd:9f:18:a9:2e:19:78:be:50:d4:5a:e9:
         11:17:ab:56:61:df:b2:20:d6:1c:b9:51:cd:5e:a0:92:df:c8:
         36:07:00:2c:34:dc:03:38:17:a1:15:53:0d:11:16:16:15:a8:
         a6:66:be:85:20:26:ad:28:5c:ec:05:b4:a7:aa:0f:72:b6:76:
         69:27:bb:bf:3d:b4:45:4b:11:ad:1a:3e:c8:fe:38:a0:f2:c4:
         23:73:8d:b2:bd:bd:32:9c:3c:bc:c1:31:97:da:25:33:7f:04:
         12:30:96:49:0c:0a:e7:92:ed:72:c5:5b:33:42:cb:0f:e3:2f:
         d6:68:3b:a7:1c:66:cd:db:69:b2:c8:42:ff:6f:5c:15:05:6a:
         7f:b3:9b:fd:02:6d:a0:78:2b:3e:80:3a:67:47:1c:a0:e4:60:
         eb:8e:5b:71:ae:7b:76:f4:ba:3e:63:19:ca:e5:36:88:f2:8a:
         5f:33:cc:44:4f:c2:87:51:06:0e:05:84:f1:69:07:c8:61:ce:
         9a:50:9a:19:f2:87:e8:a1:46:05:3b:5b:94:5d:9b:82:d6:42:
         c8:97:6d:d6:19:70:d8:00:d0:17:04:20:52:1f:93:89:66:72:
         28:9f:a4:1f:b5:a7:7d:a4:dd:d6:a2:f2:5d:53:2d:c6:86:84:
         03:53:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:22:48 2026 by rpki-client