Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/63617ee2-53df-32dc-a979-573d75fea872.roa
File:                     63617ee2-53df-32dc-a979-573d75fea872.roa (raw, json)
Hash identifier:          OYihyZghpN5YK9idLd/MZmJtpzrfSwtEMm6QaJLaMjc=
Subject key identifier:   55:0C:77:F2:5A:6F:DA:AB:35:E8:34:E2:1D:DB:86:FC:58:52:23:31
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584F49757EB04C2DE1D7890E5D40
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/63617ee2-53df-32dc-a979-573d75fea872.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     4213
IP address blocks:        66.180.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:7e:b0:4c:2d:e1:d7:89:0e:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bb0733a8-ff4d-4e46-9620-24fb1d456751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:10:8d:35:a3:34:2b:6e:3e:4c:b5:86:ab:
                    75:6e:50:88:56:7a:16:1a:a0:cc:09:ae:b6:32:bb:
                    5e:88:3b:71:ed:28:68:98:79:6d:f6:82:c1:11:4e:
                    6b:17:df:ca:9a:9d:61:11:c8:6d:27:eb:11:ae:f0:
                    41:07:4b:0e:f0:b1:72:a8:9a:03:35:e3:f3:b0:e7:
                    8c:3a:89:c9:5e:a9:1b:db:22:8c:3c:35:63:2e:cb:
                    e9:32:3a:67:29:33:6c:7c:17:7c:b1:f7:9a:dc:4a:
                    3e:0a:5a:50:f3:f2:e0:19:21:0e:fd:c1:64:6f:06:
                    e7:f4:39:6b:52:12:ad:ad:86:47:ae:1c:1c:0c:ca:
                    a9:b3:b7:d8:c0:75:85:49:32:6e:ee:72:a7:34:87:
                    a2:d1:c1:41:a0:82:86:d3:26:fa:4f:4a:10:47:33:
                    bf:61:4f:58:7a:a8:94:8d:f0:84:fb:fc:12:7a:fe:
                    64:74:0e:d3:5d:8a:24:7a:96:0c:b4:61:a9:b8:b1:
                    f9:32:98:56:3c:4d:7a:02:fc:fa:1b:7d:ba:26:6e:
                    cd:ae:81:8f:de:e0:f5:98:e4:36:43:76:e1:c8:a9:
                    d3:38:3f:e0:35:1d:b3:4b:71:aa:4b:b3:55:3f:46:
                    a1:c8:d2:c6:f7:fd:5a:bd:03:be:99:62:f1:ae:74:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0C:77:F2:5A:6F:DA:AB:35:E8:34:E2:1D:DB:86:FC:58:52:23:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/63617ee2-53df-32dc-a979-573d75fea872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:cd:0b:55:13:1f:63:3f:c1:fd:f2:48:56:a1:c7:dd:0a:
         5b:2b:75:fc:3f:5f:68:21:d0:bd:3d:5b:ea:7c:c6:ee:05:7c:
         31:83:3f:50:42:77:00:35:9d:76:bb:54:f4:2d:62:51:41:54:
         4e:f3:a9:61:c3:64:7d:01:e8:70:00:65:cc:fa:f6:99:fb:26:
         6c:ef:53:27:ae:3b:34:7e:82:40:79:21:97:71:fc:6d:ed:17:
         68:ea:4b:67:82:73:bc:b4:bc:f2:e8:0d:70:b0:58:a3:27:f2:
         5c:47:98:15:8b:82:49:ed:e4:ab:e2:a2:54:fb:85:ad:f2:bf:
         56:2b:31:19:5e:ce:c9:c7:c2:71:07:4b:4b:28:20:96:fd:06:
         20:9d:dc:74:65:0d:32:95:de:b1:58:6d:6b:61:4f:9c:77:ac:
         07:dd:0c:ec:61:55:9a:33:cc:9c:73:cf:9f:f3:60:ef:36:00:
         ea:68:74:79:e9:e3:cc:4b:00:1e:73:91:bd:fa:09:5f:1c:e9:
         30:fc:01:e2:07:33:8f:9e:18:c7:32:17:79:34:4f:1c:c0:78:
         82:19:9a:d7:c0:ea:c9:ea:36:79:ee:fb:61:de:bd:38:27:77:
         f2:e7:85:3e:b0:56:66:64:d9:93:db:71:76:40:dd:88:89:78:
         b7:6e:ba:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:53:10 2026 by rpki-client