Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8c427eff-431d-3e57-ad19-8f7765e55cc8.roa
File:                     8c427eff-431d-3e57-ad19-8f7765e55cc8.roa (raw, json)
Hash identifier:          vNt4Z9Emgrw/4ImbcqaSoznLpMupmM+2a7uOvvQHinU=
Subject key identifier:   B5:7C:A9:73:CC:EC:0E:EA:D2:9E:F1:32:FE:E4:95:19:5E:61:87:42
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584EA79C0630473E8822B5C10D00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8c427eff-431d-3e57-ad19-8f7765e55cc8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11055
IP address blocks:        66.45.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:06:30:47:3e:88:22:b5:c1:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=84818c18-61b1-4a12-ad27-869d2ef510c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:7b:dc:4d:27:a4:7a:62:99:3f:34:5c:ff:
                    33:93:3b:09:59:07:08:f3:af:a5:27:6a:2d:ea:28:
                    fd:51:ce:4d:fe:e8:7f:ff:3d:78:9d:77:b6:48:fe:
                    d6:a9:8b:26:b3:ae:45:23:e9:4c:1b:9f:74:dd:53:
                    5f:05:c7:21:ab:aa:8f:d5:7c:6f:a1:2f:67:cb:be:
                    c5:41:ff:0d:e3:3f:af:a0:b2:25:c7:cf:84:2c:fb:
                    c5:e0:e8:8d:08:a3:63:7f:d8:59:97:86:eb:e5:26:
                    3b:4b:31:6c:6e:ee:b0:a8:65:98:49:ab:43:f7:d7:
                    4f:70:16:66:ee:1e:bc:52:25:2f:1b:2e:4e:62:07:
                    22:60:74:57:5a:8e:9a:5e:e0:be:56:ae:a8:f7:21:
                    63:66:fd:b5:3f:8c:86:aa:79:a0:95:49:a1:1d:d0:
                    69:d2:a4:7b:0c:4e:df:45:c0:72:80:5a:63:5e:f1:
                    63:b0:f9:3a:10:6e:b6:39:ef:e5:eb:e5:39:fb:8a:
                    ef:53:f7:ee:82:1d:3e:a1:e6:2f:d0:29:77:47:88:
                    bb:b1:1c:10:81:55:62:7f:7a:fb:d1:c7:bc:4c:d7:
                    dd:f3:ae:fe:9a:6a:91:25:7a:74:cb:92:8a:af:f4:
                    a5:d0:3d:01:53:35:2c:9c:e4:ee:2b:4b:41:7c:a9:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7C:A9:73:CC:EC:0E:EA:D2:9E:F1:32:FE:E4:95:19:5E:61:87:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8c427eff-431d-3e57-ad19-8f7765e55cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:25:c6:8a:58:9a:84:16:24:6e:5f:9a:29:09:a9:c4:c1:
         fb:5f:4c:d5:80:99:ae:b8:d4:43:fd:f4:0d:ff:24:16:95:84:
         80:74:cc:74:d2:9a:0b:96:ff:82:b6:b5:31:15:ab:da:3d:ab:
         68:42:3f:4d:5e:99:c3:b4:aa:07:71:13:c1:37:1f:be:8b:81:
         0e:df:45:09:6c:d5:f5:67:93:6a:1c:30:2b:c9:81:82:a2:e0:
         87:13:b2:a9:2c:be:d0:d6:3f:d5:5e:e7:67:d7:a5:1b:87:fd:
         d1:69:0f:6d:42:aa:c2:f9:e2:a0:5b:13:f0:8c:4a:a3:48:d6:
         a7:ce:90:e8:a2:1c:77:ad:d0:97:25:a0:0d:e4:ae:62:42:20:
         98:de:4b:da:12:a3:30:0c:45:d3:99:52:a6:02:22:3d:d4:6d:
         8f:50:97:2b:da:12:97:1f:cc:4a:90:4d:bb:b5:43:e4:52:51:
         8d:7b:a6:d1:77:2c:75:13:84:d0:61:b7:0d:05:4d:3a:ea:fb:
         e9:c2:49:7c:68:23:a3:82:94:22:92:11:7d:a2:57:2a:57:05:
         b5:b7:63:92:95:af:3d:a0:a8:e8:3d:41:f5:ef:fd:ed:6e:bc:
         79:ab:78:f5:cd:b3:2c:c4:9b:81:da:e3:9a:b4:27:8f:d1:5e:
         70:d7:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:58:08 2026 by rpki-client