Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa
File:                     4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa (raw, json)
Hash identifier:          cuSDmCWQes2hUN+yBxtutyiiGiBohjoOC3stqGUCo+8=
Subject key identifier:   D2:AC:A7:A8:43:2A:32:F8:05:B8:35:90:9A:6D:BD:87:A8:CE:4E:A8
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584F698D83967D3105E9C0B70640
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     35847
IP address blocks:        66.33.120.0/21 maxlen: 24
                          66.132.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:83:96:7d:31:05:e9:c0:b7:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=88ab3363-5138-415c-b465-290fbac5dd12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:14:3c:6e:90:25:f4:ea:ae:ee:da:df:03:
                    19:a3:ac:9a:45:56:66:28:cf:38:96:34:63:88:5d:
                    75:fe:3c:9f:97:12:71:9f:0d:c1:1f:e6:05:c4:dd:
                    7a:b1:45:54:28:11:c5:c3:ef:a4:1c:71:0c:30:63:
                    5e:f8:c3:20:28:9e:b3:47:2e:66:9a:af:30:bf:b5:
                    dc:9d:d9:60:d9:98:2c:b7:f9:4d:63:8a:ec:59:0b:
                    1c:d3:f3:da:5c:7d:29:fd:7c:65:f6:7e:a6:d5:79:
                    5c:24:1f:24:86:6b:e3:2c:cc:0c:9f:7e:ae:98:77:
                    79:7a:f1:50:b3:23:22:ac:63:da:ea:3c:38:6a:a4:
                    31:0e:62:2b:56:e7:51:f5:ad:e5:6a:37:f0:f9:23:
                    63:64:68:c0:d5:99:bc:12:69:41:a5:49:60:e9:6b:
                    69:c1:36:2b:1e:9d:bc:90:7f:33:92:35:12:1f:81:
                    85:8d:70:33:24:cd:55:03:c0:35:4a:72:b2:0a:eb:
                    79:c2:bb:d1:c4:23:b5:01:a8:44:e8:15:c4:c2:7c:
                    0d:f9:23:5c:ce:d4:61:0c:46:bd:75:a7:cc:b0:0a:
                    f1:1a:65:8e:96:44:56:58:b7:21:a6:5f:89:7c:97:
                    70:21:73:78:2c:b1:50:b3:fd:92:57:62:40:09:1a:
                    0c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AC:A7:A8:43:2A:32:F8:05:B8:35:90:9A:6D:BD:87:A8:CE:4E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.120.0/21
                  66.132.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1b:de:80:b4:9b:e9:d9:06:90:27:36:70:73:e8:e2:7f:fc:
         f1:74:9e:86:13:95:c2:58:76:fd:92:77:f6:8c:84:71:52:e6:
         4a:55:b1:06:b2:e3:f6:f4:f2:88:63:a2:91:66:24:f0:16:9d:
         4f:cf:67:80:8d:bc:ab:1c:51:62:0f:e8:8a:44:9e:eb:99:64:
         05:0e:81:ad:51:46:f3:0f:22:2b:df:b5:94:00:46:b6:8e:90:
         d8:78:b1:02:9e:b0:bc:95:d2:ea:27:7e:29:6f:88:b0:99:91:
         44:66:d8:72:5d:f6:7f:ab:0d:e8:06:97:58:c3:4b:9b:fd:e1:
         fc:8e:4c:27:2f:b1:4e:fc:d1:76:4b:6f:52:7e:4e:24:a0:8d:
         5a:34:1a:9b:3d:47:84:c2:a7:c5:33:bf:b3:ce:c3:8c:95:83:
         8f:15:4c:de:7b:13:02:5e:0f:62:31:cf:79:1e:6b:33:da:59:
         06:46:a8:40:6c:a2:b5:b8:0e:0a:82:0c:09:c5:df:54:58:27:
         6c:b4:6a:da:45:60:e9:44:c4:9e:2e:e0:f1:15:fe:d0:30:18:
         aa:3f:84:22:85:3e:f4:50:cb:b8:67:84:47:d0:d5:19:fe:5f:
         61:36:b1:6f:35:87:9e:88:8f:32:cc:fb:9c:ea:de:b5:86:d7:
         6c:bd:48:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:31:50 2026 by rpki-client