Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa
File:                     fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa (raw, json)
Hash identifier:          F2Q4giRgznNO1mHIeBG9JS2XMyQsJVw9jerd546Pazc=
Subject key identifier:   1D:D8:BA:20:63:76:62:BF:80:F1:C2:A7:65:68:6E:6D:82:39:41:33
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584EA8EC3AE9358DE0FE4966DB80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     35927
IP address blocks:        64.18.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3a:e9:35:8d:e0:fe:49:66:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=75ee59fc-d1a0-467a-b3ca-87c451b9ae37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:80:b0:a0:e6:a0:f3:c4:12:35:ba:34:e4:
                    e2:5f:dc:6b:f7:3c:8f:95:68:94:92:91:ff:4e:af:
                    9a:15:aa:73:cc:a7:20:3e:6e:39:f8:56:ea:84:7b:
                    10:90:85:db:98:c1:f8:b4:23:2a:fb:a5:cd:aa:96:
                    6f:10:5d:7b:a2:dc:b0:ef:a3:80:99:ff:6e:8d:1b:
                    39:e9:f3:dd:29:50:06:8a:55:80:5d:57:58:f8:ca:
                    dc:fd:08:6a:f1:fb:a5:4b:8c:ab:c9:6b:33:26:b7:
                    e7:f6:87:f1:11:7f:d3:77:d6:5f:f0:11:75:76:e3:
                    67:9f:7a:ee:a1:69:35:84:54:c3:f6:a4:e8:49:58:
                    7b:25:da:dc:f6:5f:c3:97:99:06:77:da:bf:3c:3f:
                    88:a0:ce:6c:c0:8c:cb:a8:63:69:fa:a0:b5:34:75:
                    64:73:39:0e:f3:0a:e7:a8:42:c2:e8:d3:8d:01:01:
                    61:e4:72:f8:af:89:72:ed:60:60:f2:2e:95:c4:62:
                    6b:d5:f8:18:c1:d9:e3:2f:31:be:ef:50:3f:91:73:
                    7b:44:c9:90:c1:05:58:d3:30:db:6b:67:c5:af:9f:
                    b9:d4:9c:79:bf:c2:74:7f:2f:03:8f:4b:2d:7d:d3:
                    55:b6:bc:e7:57:7c:02:0b:28:36:7f:7c:ce:a0:e4:
                    df:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D8:BA:20:63:76:62:BF:80:F1:C2:A7:65:68:6E:6D:82:39:41:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d3:91:ce:59:a3:6c:d2:1c:fe:de:37:f9:13:15:39:c1:8c:
         fe:79:f8:e6:59:8c:a2:3a:fd:70:03:ac:65:80:ec:46:ac:32:
         71:7f:ad:ea:48:5f:d8:a2:7e:66:f0:28:7c:f7:0f:3d:82:8f:
         83:86:94:7b:ab:31:7e:fa:f6:0f:d5:eb:8e:43:c7:1e:80:68:
         b5:48:8c:0f:69:e0:54:6a:54:40:5b:0a:46:7c:1e:a5:34:e1:
         b8:0b:84:d6:9b:68:e4:00:68:90:14:5e:fe:80:99:84:e0:b0:
         07:d5:fb:e0:46:ea:88:45:f9:4f:8a:f9:5a:0c:11:cf:e4:12:
         a1:eb:b7:7a:4a:2a:e6:27:22:29:28:9e:8c:b4:a9:b2:d2:e4:
         85:23:13:f4:9c:72:94:24:a0:7e:09:43:5c:23:cb:bc:dc:f5:
         6c:2a:13:d6:fb:68:45:fd:ca:a1:e7:7e:76:f3:89:02:c3:a3:
         02:5e:83:bd:82:a7:37:07:94:c0:be:57:2a:f5:4f:e4:47:50:
         e7:74:a3:39:45:e3:0e:10:5e:7e:63:4d:fd:cd:1a:9f:83:68:
         3a:02:0e:64:38:14:c2:b8:05:9e:80:7d:a9:10:76:3c:e3:e7:
         e6:bb:7c:a8:d4:b8:ea:d9:91:a0:0b:b6:c9:8a:94:a7:64:05:
         8f:6b:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:23:16 2026 by rpki-client