Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/a9500d23-eb3c-3422-946d-0243022779a5.roa
File:                     a9500d23-eb3c-3422-946d-0243022779a5.roa (raw, json)
Hash identifier:          kSWoyfe+mmcmx16+mOdNnAwHE/5bLj2wOOr4QB6eog4=
Subject key identifier:   4F:C0:A9:B5:22:8F:A0:A2:70:28:95:DC:0F:EE:FC:85:68:AF:07:35
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584F5CFD593E6B79A8135881AFA0
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/a9500d23-eb3c-3422-946d-0243022779a5.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     40933
IP address blocks:        66.113.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:59:3e:6b:79:a8:13:58:81:af:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=d18d1d3c-431b-43e5-90e7-54ab77b7c264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:cd:f7:18:b9:43:97:02:a6:f2:50:7c:e8:
                    59:7f:c1:70:68:90:75:2e:c1:f4:3a:1e:43:32:cc:
                    56:08:8d:38:e4:95:a2:06:0c:ed:2f:ee:4c:e6:f9:
                    7f:a4:07:47:0f:49:a4:85:61:ac:36:82:73:b3:02:
                    de:b4:42:63:4b:63:c5:d6:10:09:f8:91:35:bb:11:
                    7b:25:d8:35:db:bd:5b:66:ba:6d:9c:a6:75:c7:72:
                    a4:c1:1e:5c:f7:39:23:40:27:62:41:3c:50:4c:8e:
                    80:13:62:bf:94:5b:9d:af:86:c4:01:17:97:27:53:
                    c7:6f:31:70:09:83:44:b7:88:22:09:2f:59:21:a5:
                    6e:3c:93:8d:4c:3f:7b:16:e5:93:bd:53:e8:04:c6:
                    ab:62:ff:b7:17:61:f2:b6:3b:d8:c3:32:98:99:91:
                    41:a6:62:86:00:7e:7d:3d:4d:74:e8:07:59:7b:23:
                    e2:5d:66:31:43:ba:26:e8:06:d1:38:f1:5a:0d:8f:
                    7c:6b:af:64:da:15:53:58:7f:87:03:1e:31:36:e1:
                    01:94:7e:9f:56:9b:63:60:6a:42:b8:da:0f:ed:aa:
                    6f:42:80:da:a6:11:1d:16:10:f2:be:60:ae:7c:05:
                    74:10:f5:bf:3b:ca:47:5f:8f:a9:3c:20:75:ae:ca:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C0:A9:B5:22:8F:A0:A2:70:28:95:DC:0F:EE:FC:85:68:AF:07:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/a9500d23-eb3c-3422-946d-0243022779a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.113.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:08:94:d2:68:4e:83:76:59:99:b3:36:11:c1:79:99:9f:bf:
         dd:5c:26:fe:e3:fc:d4:41:86:bf:ee:4a:aa:a5:1f:ce:c0:19:
         c8:ef:44:86:e6:68:91:3d:5a:46:ae:a8:a2:5c:ba:93:1c:83:
         42:77:6c:b7:7e:be:bb:97:3b:8e:71:5f:1c:0b:6b:94:04:1c:
         7a:0e:ba:41:62:aa:8a:2b:ea:4d:db:de:e2:55:ee:ac:f4:e1:
         8d:a5:7e:b3:c4:87:1b:a6:65:9e:07:d7:37:dc:87:b8:dd:6c:
         a4:7b:90:e5:5c:bd:46:72:f8:b4:e6:a0:74:8b:84:7d:d7:e4:
         1e:69:08:8b:e9:cf:a5:7b:9d:ef:e4:03:d5:45:12:b0:38:57:
         f4:7b:fb:c8:b5:d7:33:3a:c2:3c:d0:ff:e0:19:d5:ab:ac:5b:
         55:0a:f6:f6:0c:89:6e:eb:e8:6d:ce:32:6d:65:d9:c7:12:f2:
         45:fe:88:e6:6d:25:33:67:b8:0c:20:20:d3:66:45:cc:8d:12:
         ad:e8:7e:5e:88:5c:e9:07:17:2c:3f:9e:68:38:ec:cc:7e:82:
         67:cc:83:e0:21:e8:5f:cf:22:f3:fa:e0:88:ae:8b:7c:42:36:
         1e:39:6d:bc:67:df:f0:1a:ff:19:70:a0:05:10:38:5c:7d:5b:
         1f:ff:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:14:47 2026 by rpki-client