Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/c7b6e22b-1105-3aa6-8fe3-fdd75b6922d7.roa
File:                     c7b6e22b-1105-3aa6-8fe3-fdd75b6922d7.roa (raw, json)
Hash identifier:          HuJUUpkgIZzAVl+Bt3YjGnfR3QWKnc+k5Xi1V8rFeU4=
Subject key identifier:   42:8D:3A:99:EE:93:5E:C3:FE:10:5D:14:D1:5D:2F:BC:06:C3:36:31
Certificate issuer:       /CN=1851cb45-f2c7-47f9-9317-3b3cb02a6178
Certificate serial:       010D0C9F4328584F655D6591A1ABAB90042F0880
Authority key identifier: 16:96:63:7F:0B:FB:AB:75:3E:40:58:C4:0E:E9:83:4A:FC:B6:26:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/c7b6e22b-1105-3aa6-8fe3-fdd75b6922d7.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     1635
IP address blocks:        66.146.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/1851cb45-f2c7-47f9-9317-3b3cb02a6178.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/1851cb45-f2c7-47f9-9317-3b3cb02a6178.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:65:91:a1:ab:ab:90:04:2f:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1851cb45-f2c7-47f9-9317-3b3cb02a6178
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=4bf230fe-cd80-4407-9d96-ad4ed724c63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:90:9b:e1:3b:6f:e2:91:b0:62:64:8f:67:
                    8a:31:c2:a9:36:cf:42:85:bb:2f:8d:9f:77:bb:cc:
                    5a:ca:1e:b4:fe:9d:e0:aa:16:63:f1:fd:3f:82:8d:
                    7d:4a:b4:7c:f5:50:4a:57:36:5d:21:a5:8c:c7:9a:
                    58:3d:79:88:f5:9f:d4:f1:5a:df:e2:75:88:3d:10:
                    69:98:17:61:c0:4e:29:84:81:98:fa:1c:1d:f9:48:
                    f8:7e:83:3c:fa:8b:1f:49:8c:07:27:7c:63:dc:a3:
                    44:dc:2d:8a:0c:0c:bc:4c:a3:a4:47:e1:79:55:0d:
                    37:53:d7:2f:7b:ed:88:de:fd:fa:b9:06:9b:41:4f:
                    57:8c:72:26:b3:6b:ed:b4:dd:58:3a:ee:5f:86:31:
                    83:5d:93:e1:08:90:2e:ef:93:3e:de:7b:44:25:7a:
                    65:7d:c4:e1:2f:79:1b:2c:90:1b:d9:ee:1d:d0:2e:
                    aa:b6:06:2c:0a:72:0a:7f:c2:b3:45:e1:1f:a7:f3:
                    d9:50:bc:da:b6:4b:c4:a9:44:f8:4d:b8:47:0b:17:
                    40:e5:8f:42:f4:e5:f4:90:ed:67:e5:b8:69:fe:73:
                    09:1b:72:e5:08:13:35:94:19:b1:dc:88:2b:28:ce:
                    bf:23:2b:3d:fb:7c:d7:87:05:44:ee:e3:bc:45:1d:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8D:3A:99:EE:93:5E:C3:FE:10:5D:14:D1:5D:2F:BC:06:C3:36:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/c7b6e22b-1105-3aa6-8fe3-fdd75b6922d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/1851cb45-f2c7-47f9-9317-3b3cb02a6178.crl

            X509v3 Authority Key Identifier:
                keyid:16:96:63:7F:0B:FB:AB:75:3E:40:58:C4:0E:E9:83:4A:FC:B6:26:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1e:05:14:3f:fe:51:51:80:ee:a8:76:9e:ac:5e:90:14:e2:
         ad:b9:35:b8:55:bf:1e:4c:16:a8:a0:ec:5c:ed:77:48:35:b9:
         48:c0:0b:7e:f1:8b:a0:12:8f:23:d8:57:67:6e:e3:00:25:9e:
         66:0b:f9:99:e0:49:70:d3:6d:80:43:40:d7:3d:16:23:21:85:
         7f:e2:1f:02:cb:9d:3e:56:7a:a5:4c:72:d3:5b:3a:18:63:db:
         9e:c6:c0:df:94:79:7f:ad:8e:42:0c:4f:08:58:56:18:83:40:
         a9:91:8d:8e:27:c0:83:db:0c:17:b3:74:3e:31:16:7f:99:7c:
         50:56:23:e6:58:10:b8:b7:77:2a:61:ac:5d:aa:3d:67:ba:18:
         fa:26:86:45:3c:49:4d:25:8f:3d:a4:21:af:40:af:9f:98:88:
         2b:d9:03:aa:09:36:1d:28:c9:24:68:10:d5:44:ac:72:68:ae:
         ca:b5:e2:75:66:3f:a7:dc:36:8e:1e:4c:ff:a6:fa:38:a3:69:
         ef:9e:14:44:65:37:07:ed:24:35:2d:e8:0b:74:81:a5:e0:40:
         10:6f:ff:1b:2b:11:17:4a:34:70:f8:92:8e:6a:15:54:37:39:
         80:62:d5:de:5c:6d:e0:17:28:d7:51:a6:d3:1d:66:46:7c:11:
         90:ca:9b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:52:18 2026 by rpki-client