Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa
File:                     ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa (raw, json)
Hash identifier:          BixLD0NSzM6cT4nNWn0rUTM8nOUtuWm1Tzw1uLmlvWE=
Subject key identifier:   5D:91:B0:DC:76:24:62:36:88:B4:99:69:60:39:9A:A7:1B:CE:52:CC
Certificate issuer:       /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
Certificate serial:       010D0C9F4328584EA78738DDEB7D88BFA179E198
Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399916
IP address blocks:        66.118.0.0/22 maxlen: 22
                          66.118.0.0/24 maxlen: 24
                          66.118.1.0/24 maxlen: 24
                          66.118.2.0/24 maxlen: 24
                          66.118.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:38:dd:eb:7d:88:bf:a1:79:e1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=765abbe5-34d1-450d-8249-9d41896dcff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:4f:a9:31:af:39:e4:98:45:f4:d0:8f:1a:
                    27:95:86:72:f9:59:43:bf:ce:5b:a0:16:0d:a6:cb:
                    49:db:d4:8b:d7:e1:a9:f1:01:f0:63:16:c6:e3:04:
                    e2:da:20:5d:b7:f6:0a:c4:b1:b1:ff:e1:74:fe:fd:
                    31:81:26:a9:cc:25:79:2b:9a:e5:c4:49:c9:f8:37:
                    94:db:72:df:75:43:80:99:30:4e:29:17:9e:68:ff:
                    22:06:05:33:95:e6:3a:f4:96:3d:9c:29:04:f2:b0:
                    23:1f:0b:29:09:bd:5f:0a:86:73:e8:4e:cb:e1:e5:
                    a8:30:d3:39:69:e7:b6:6c:7d:d9:30:45:6e:27:3c:
                    f1:d6:f5:5f:61:fd:4f:97:c7:0b:5b:f0:38:05:0d:
                    32:42:78:15:db:1b:45:fb:38:e5:19:15:af:cd:f0:
                    88:bc:95:c5:38:a2:fb:88:b3:cb:75:e6:12:ee:6c:
                    7f:45:6f:50:38:22:d8:48:0a:28:e5:52:f9:a6:3e:
                    3e:f7:dd:51:31:47:e4:3c:ce:b8:d4:c2:b2:d4:69:
                    91:eb:f3:fc:e1:3f:96:41:47:20:53:5c:0d:78:f6:
                    d1:64:81:61:b6:80:f2:fc:0c:90:05:a2:d2:ad:e4:
                    ca:5b:99:e3:2b:5c:4e:b4:dd:37:25:68:15:c2:38:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:91:B0:DC:76:24:62:36:88:B4:99:69:60:39:9A:A7:1B:CE:52:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:fd:60:cf:be:15:ea:ce:6f:85:62:35:a9:3c:e1:e6:13:39:
         5a:bb:bf:64:0b:91:47:87:80:80:93:21:58:32:99:64:73:76:
         ea:c0:c7:f1:b4:bb:71:5c:51:09:f2:6f:fc:87:a8:e2:64:d2:
         1f:75:b5:d7:c5:16:89:cc:2a:5f:bd:2b:ae:7f:0b:11:30:55:
         fd:70:4e:e7:48:d8:6d:97:46:c6:e4:78:f3:d9:90:65:0e:ee:
         57:08:9b:27:a2:90:df:ca:90:ae:bd:ba:28:04:e8:d0:e2:59:
         73:ab:93:56:0e:3d:d5:f8:a5:90:a9:18:36:3f:1a:2f:ba:4c:
         29:df:4a:3c:03:5a:54:43:97:38:fb:45:af:d1:0d:70:df:1e:
         aa:97:62:13:9f:c9:95:3c:a4:18:12:ac:74:97:f5:65:8a:5b:
         c4:55:9e:99:02:e0:2c:dc:d2:36:08:72:3d:77:c2:2b:93:7b:
         54:57:2e:5e:df:2a:ae:b3:60:87:5f:6f:d0:e7:f1:ce:ec:6b:
         91:a9:b0:ec:5a:22:c9:f1:ce:d4:a7:2d:51:46:f8:1c:16:f8:
         b1:bd:2c:42:a2:fc:d5:36:e7:04:8e:53:77:06:04:de:c5:9f:
         82:d5:bf:ee:f7:2a:22:96:a4:bc:51:9b:dd:76:d7:34:e3:92:
         b4:59:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:57:18 2026 by rpki-client