Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa
File:                     5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa (raw, json)
Hash identifier:          QKU65O0c2SWAacdIQmFkuXt1gQiFpxoWWFKrsX9yG2A=
Subject key identifier:   E5:25:8E:4F:DC:77:24:B9:FC:79:63:49:CA:B6:E7:7C:60:79:00:B4
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584EED521F473E8BF19DB5A8D940
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     11693
IP address blocks:        66.216.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:1f:47:3e:8b:f1:9d:b5:a8:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=4c3ca52d-7959-40e8-89d1-4d5f02897e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:ed:d4:9c:c2:96:59:89:72:f2:58:ba:62:
                    1c:7e:b2:8a:1e:23:60:4e:3f:64:8b:66:8a:0a:65:
                    70:fb:38:22:2a:60:68:cd:71:7f:5b:83:4e:4a:65:
                    ed:4c:90:dc:57:f4:ce:53:e9:66:cf:56:d2:14:b2:
                    3a:ab:53:68:5e:7c:58:17:38:0d:36:b9:60:81:66:
                    0e:1c:73:0c:52:55:e5:4f:7e:9b:fe:89:c3:51:d7:
                    19:5a:08:fe:90:55:8b:45:08:c5:21:8f:bd:64:50:
                    fe:e1:1c:85:4b:83:d5:4c:c8:99:9d:4f:f8:0a:dc:
                    91:44:f5:00:b9:06:b5:7a:f8:61:17:d0:2e:75:13:
                    a5:50:39:55:97:3e:7f:4c:c3:3c:2a:cd:79:b3:76:
                    32:a0:80:2c:16:70:53:91:0d:58:59:8b:03:b6:19:
                    3b:15:8a:e4:30:c2:89:da:eb:5e:9b:52:b5:33:7f:
                    9c:16:db:4a:50:bc:09:b6:19:38:aa:d4:6e:b9:81:
                    14:f7:d9:e2:f9:ac:a7:18:23:d5:37:f4:ed:56:0e:
                    84:11:7e:27:67:f9:d1:46:f5:20:6e:c1:06:07:02:
                    1a:b2:96:fd:a7:fa:4b:3b:b9:3f:77:b4:9c:64:6d:
                    6b:c6:ec:86:f6:41:76:a6:30:63:b9:f7:99:b3:78:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:25:8E:4F:DC:77:24:B9:FC:79:63:49:CA:B6:E7:7C:60:79:00:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:25:ca:75:1a:59:ad:db:c0:d9:8b:1f:67:be:d5:42:77:4f:
         4a:8d:8c:00:42:ec:cc:16:66:41:b5:f4:b5:80:bf:d0:e9:0e:
         ee:cf:65:7b:8e:18:f3:b4:fd:1f:33:95:71:0e:d2:34:3f:0a:
         9c:4b:ad:0d:e3:c7:1f:d3:7f:93:fa:24:41:d0:ce:3a:e8:40:
         b5:af:b5:89:ce:4d:5c:45:3e:47:be:a4:f9:9a:69:62:1b:16:
         c3:89:a3:1f:b7:19:c0:85:94:78:93:c9:f6:65:75:66:3a:c0:
         bf:6e:b1:bb:4b:c9:c6:4f:57:82:97:57:87:3b:0c:dc:58:d6:
         48:ac:ed:e0:f9:b8:a4:a9:36:09:aa:ad:2a:7c:f1:90:2c:4c:
         d5:aa:64:f0:e5:8d:17:6c:9b:d4:c9:19:45:e1:cd:0a:7f:86:
         97:e2:68:b6:ab:3b:8b:2e:65:a1:47:cb:f7:a1:9e:b6:f4:df:
         bd:bb:94:0c:27:15:8e:3f:02:30:f0:d9:3a:fb:c1:97:df:61:
         da:84:b7:4d:ea:2e:b2:58:3b:ac:75:cf:f4:74:0e:74:22:df:
         d6:e3:cf:a2:69:02:ed:3c:ca:76:b7:7a:06:f5:6c:9f:eb:e9:
         8f:b0:42:43:53:a6:3a:d5:09:e0:cb:d2:52:44:22:c6:fb:fa:
         0e:fd:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:29 2026 by rpki-client