Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ec4f3baa-dcf2-373d-a842-05a649aa5c25.roa
File:                     ec4f3baa-dcf2-373d-a842-05a649aa5c25.roa (raw, json)
Hash identifier:          BeFdYzwb2vpa7uSzzEGf+Uiu1cSmb0SqU2bfV+ZQRIQ=
Subject key identifier:   9D:8C:B6:A4:D4:0E:0B:39:22:0E:F8:E3:9C:6C:3C:87:B9:98:18:68
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584F119D0DF334480200F0BB4204
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ec4f3baa-dcf2-373d-a842-05a649aa5c25.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     12083
IP address blocks:        66.216.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:0d:f3:34:48:02:00:f0:bb:42:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=571326e5-214b-449c-b30e-6b7bf2df03e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:ec:eb:53:ae:55:85:9a:bf:ed:7b:e8:d9:
                    12:79:9e:79:e0:6b:8d:3f:ef:f9:09:a8:fc:2a:03:
                    e1:f8:87:ab:e9:af:3c:5b:0c:d2:cd:a8:3f:71:0c:
                    1f:8b:1d:a2:ac:8b:95:06:44:d1:03:b8:99:b3:e7:
                    6c:75:fc:4c:35:e7:f4:67:1b:b9:34:f4:a0:14:cf:
                    fd:79:e7:d4:a7:b7:fa:a3:0c:bb:b0:c4:97:36:3e:
                    6e:57:57:12:91:64:7c:8e:1e:26:93:16:be:c3:6e:
                    73:28:bd:1b:67:bf:06:15:a0:54:d5:a2:1c:43:47:
                    ff:4e:a4:52:4c:9f:4d:db:90:69:07:16:a4:6c:c9:
                    9f:fc:9c:21:5f:30:99:e6:af:93:86:e6:53:2b:4f:
                    67:47:4b:e4:ed:10:7f:ba:8b:0a:99:b2:3a:f0:73:
                    1e:9b:72:18:8a:99:9c:90:8c:90:90:8e:55:8b:6a:
                    ab:ca:d7:03:6c:4c:00:1b:52:4a:7b:d3:54:dc:ba:
                    8a:17:88:d5:06:95:1c:c0:ea:35:2b:64:1c:d4:99:
                    4b:89:63:49:73:22:39:d6:89:40:c0:2f:a0:f8:75:
                    b8:62:62:f9:2c:6c:d8:5e:ed:ab:09:e4:05:4e:10:
                    87:01:6a:c1:69:a1:13:42:5a:b5:07:0c:91:0f:28:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8C:B6:A4:D4:0E:0B:39:22:0E:F8:E3:9C:6C:3C:87:B9:98:18:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ec4f3baa-dcf2-373d-a842-05a649aa5c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:2f:83:6f:27:ea:0c:14:b9:33:01:6a:94:6c:6a:79:d2:
         4c:b3:ff:e9:89:23:c5:9f:ba:6f:1d:70:44:cc:db:ba:71:f4:
         db:aa:69:e3:d0:6b:ce:78:06:4e:80:74:e6:87:25:4b:31:63:
         4c:28:f5:44:9c:14:fa:d6:e6:82:7d:5b:d6:f7:67:c0:18:01:
         ce:36:41:ce:df:98:52:7e:48:85:b7:19:c7:f5:5c:ef:e4:79:
         20:6d:7d:df:5e:df:9f:ec:f4:85:0a:ee:c6:a6:95:d2:55:9a:
         1f:c1:52:83:75:6e:1d:8a:3f:cb:53:56:42:fe:3b:0b:94:39:
         83:d6:6c:10:b8:b6:4d:3e:53:d0:5f:af:c4:42:68:79:f6:d4:
         fb:8a:7a:53:b1:b1:68:62:c3:3b:1b:27:c3:95:b4:41:03:af:
         b8:63:11:07:53:97:a5:4b:29:97:2c:81:2a:71:56:59:07:0b:
         8b:d8:c3:ef:85:fe:3d:79:6c:bc:01:ec:27:2e:08:0b:44:36:
         b6:6c:aa:41:90:af:a7:a7:d2:1f:8d:fb:c4:cc:6e:73:aa:75:
         78:e4:4b:43:6c:f9:53:db:0f:2e:f4:1b:82:84:f0:71:23:d9:
         36:eb:72:bf:15:ea:d4:c3:82:9e:43:95:fa:d1:cf:54:0e:83:
         6c:2f:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:19 2026 by rpki-client