Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa
File:                     dc041d99-8872-3e16-ac74-885f3001767d.roa (raw, json)
Hash identifier:          sIh+Y3ib/XlCvX5mVwrGomF6VqGW2e0QsGLE9zqqwEA=
Subject key identifier:   A0:F3:F7:CF:EB:35:78:EC:92:7B:6C:BE:24:76:09:A4:BA:44:3A:60
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584EA7965CFA89E086F54AFD9940
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46378
IP address blocks:        66.172.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:5c:fa:89:e0:86:f5:4a:fd:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=67dcba65-4feb-4169-88f0-e655cc694ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f5:69:12:48:26:fc:b5:e4:12:1f:95:92:76:
                    d4:5a:54:57:24:78:de:20:6b:c2:14:70:82:f2:6b:
                    be:f4:b9:7a:8b:41:27:80:45:d1:02:ce:99:40:e9:
                    a3:45:46:a3:0f:39:22:2b:d2:6f:60:63:98:7e:50:
                    72:c5:07:51:24:2e:cd:99:61:60:8a:4e:73:43:70:
                    61:c7:e7:c1:be:d7:0c:25:a3:4c:ca:20:45:6b:5c:
                    21:db:04:39:b3:86:ce:5c:71:0b:36:ea:55:57:5f:
                    e6:95:69:34:11:09:3a:bc:f4:47:7a:4e:10:33:92:
                    b3:4d:03:75:be:6d:ce:fb:27:07:a2:9d:55:f5:e3:
                    89:72:9e:9e:16:eb:13:dc:cb:18:ba:c3:96:a7:12:
                    44:9a:21:6c:e3:96:48:6c:12:5d:2d:52:54:fb:9d:
                    95:ed:2a:dd:d1:59:18:dc:f3:21:f8:b3:91:81:3c:
                    e1:e8:7a:6f:06:0c:f0:45:37:80:50:e3:cf:a8:bc:
                    ce:10:d3:3f:b0:06:0f:47:2d:b4:1d:6d:27:9a:fa:
                    7a:a7:b3:fe:65:dd:90:90:db:45:6f:93:d2:20:d3:
                    74:77:bb:5f:71:c5:40:4a:3d:45:5f:fe:3f:7f:f2:
                    33:3f:a7:b6:75:01:68:53:3e:61:5c:77:06:a8:a8:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F3:F7:CF:EB:35:78:EC:92:7B:6C:BE:24:76:09:A4:BA:44:3A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.172.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6c:42:2f:9f:93:41:9b:f6:92:73:7f:51:ee:4d:3c:c7:c5:
         26:07:6f:9e:f1:14:12:4c:f4:d3:07:02:17:22:d9:3d:c5:71:
         2d:e4:4a:bf:5e:43:1c:2c:c6:45:65:5e:ad:d2:70:19:15:9f:
         89:7d:89:4e:e8:46:98:d6:cb:ec:c9:cd:a8:7c:a8:37:94:72:
         ec:a4:5f:4b:8a:97:71:5a:b4:42:ea:3a:1a:b8:5e:38:7b:17:
         4f:ca:23:6e:db:55:d7:11:bc:24:e1:2d:ed:c0:16:11:3c:5f:
         7e:e0:c8:87:b4:ef:5b:1c:69:93:48:8a:a6:76:2f:06:cd:27:
         0d:d5:2a:8f:7d:fa:3f:e3:fc:68:61:1c:21:93:0a:69:04:0b:
         2c:d6:2c:cf:8c:8f:c4:fc:83:10:bc:ce:ab:f0:4c:89:82:a8:
         7b:db:c4:05:b7:53:e1:31:8d:b3:f5:da:64:86:fc:02:62:dc:
         73:fb:c7:a7:e6:46:2c:96:cc:76:4f:3a:b7:da:b5:d4:1f:c5:
         ae:d9:ba:33:17:57:06:2f:5a:11:d7:ad:d8:43:c6:2e:50:70:
         52:c5:dc:24:3c:2f:f9:e4:6c:3d:3b:9f:aa:8b:c3:cb:6a:15:
         6a:56:ff:7d:f4:71:50:f9:8f:10:fc:8d:e6:e2:68:1d:64:ae:
         f5:d7:06:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:01:50 2026 by rpki-client