Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7be95c80-10eb-45be-b605-107ac7907095/2f5ef1aa-fe42-3d64-8b9c-126498f9e615.roa
File:                     2f5ef1aa-fe42-3d64-8b9c-126498f9e615.roa (raw, json)
Hash identifier:          yyGRqK2TFvv/ag1zpR19clwCzstppYVtOgnJ9sa7thA=
Subject key identifier:   19:7D:D2:D4:45:B8:02:7D:71:A5:3B:E0:7F:56:A1:B8:73:95:D4:5A
Certificate issuer:       /CN=7be95c80-10eb-45be-b605-107ac7907095
Certificate serial:       010D0C9F4328584EBA4E82B06CF45330FF0B9200
Authority key identifier: 65:CA:25:F6:7B:F5:C0:E1:F4:80:B7:60:CE:99:0A:61:06:C7:6E:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7be95c80-10eb-45be-b605-107ac7907095.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7be95c80-10eb-45be-b605-107ac7907095/2f5ef1aa-fe42-3d64-8b9c-126498f9e615.roa
Signing time:             Tue 04 Aug 2026 18:27:03 +0000
ROA not before:           Tue 04 Aug 2026 18:27:03 +0000
ROA not after:            Mon 02 Nov 2026 19:27:03 +0000
asID:                     22247
IP address blocks:        66.185.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7be95c80-10eb-45be-b605-107ac7907095/7be95c80-10eb-45be-b605-107ac7907095.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7be95c80-10eb-45be-b605-107ac7907095/7be95c80-10eb-45be-b605-107ac7907095.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7be95c80-10eb-45be-b605-107ac7907095.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:4e:82:b0:6c:f4:53:30:ff:0b:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be95c80-10eb-45be-b605-107ac7907095
        Validity
            Not Before: Aug  4 18:27:03 2026 GMT
            Not After : Nov  2 19:27:03 2026 GMT
        Subject: CN=9b267a03-43d9-40bc-85ff-baef201e27ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:e7:ef:8e:07:76:8a:c4:92:45:89:3b:e9:
                    f7:2f:7c:78:fd:7c:62:1f:d2:34:61:a8:7a:c7:05:
                    5a:8e:b2:41:85:93:05:be:81:26:0b:12:37:26:b5:
                    c2:5f:8c:77:78:eb:92:b4:e3:5b:43:38:1d:56:fa:
                    d6:09:7c:6a:b5:4e:8b:45:3a:5a:76:dc:e8:5b:bf:
                    9a:20:4c:ef:8d:a7:f3:20:87:00:0a:ee:92:87:af:
                    6a:99:68:72:71:73:16:a3:ad:2d:f3:99:a1:90:80:
                    f7:8e:47:2b:85:e8:8f:07:39:31:21:a7:fa:86:e4:
                    dc:39:c8:08:6a:6b:5f:a8:aa:22:05:a2:d7:da:12:
                    89:54:e6:21:d4:2b:68:1a:24:e1:72:76:20:e2:60:
                    70:f3:dd:5c:06:58:1c:18:4c:90:5e:9e:a5:1e:82:
                    12:3c:15:e8:c8:51:42:14:bc:d0:70:15:b6:78:fb:
                    e2:02:38:62:af:6e:88:87:f8:b1:c4:4e:b1:fa:7d:
                    37:b2:03:30:9c:80:2f:75:ad:c0:ed:09:d6:e6:7a:
                    92:41:f3:34:8a:04:0b:ca:83:b7:4a:c2:63:8a:9f:
                    9a:96:be:b9:6c:fa:00:6e:ed:a9:f8:83:1b:8a:b6:
                    64:46:cb:f3:21:45:be:e2:d5:d0:54:73:b8:42:60:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7D:D2:D4:45:B8:02:7D:71:A5:3B:E0:7F:56:A1:B8:73:95:D4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7be95c80-10eb-45be-b605-107ac7907095/2f5ef1aa-fe42-3d64-8b9c-126498f9e615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7be95c80-10eb-45be-b605-107ac7907095/7be95c80-10eb-45be-b605-107ac7907095.crl

            X509v3 Authority Key Identifier:
                keyid:65:CA:25:F6:7B:F5:C0:E1:F4:80:B7:60:CE:99:0A:61:06:C7:6E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7be95c80-10eb-45be-b605-107ac7907095.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:24:94:f1:c6:3e:7e:4b:84:36:58:f4:02:ed:3b:87:98:13:
         e4:e6:c3:9b:64:14:50:47:7b:6d:53:01:40:f8:2e:c5:87:e6:
         b1:5b:b9:a3:46:d0:e9:6a:45:fb:d4:a0:68:d1:24:dc:37:f1:
         20:48:2c:1f:3b:a4:18:d3:c3:0b:40:9f:f3:dd:84:b7:05:5e:
         46:8c:2b:cb:ba:21:d0:32:c3:1f:c6:4e:a8:dd:58:0d:72:28:
         20:dc:a6:9b:31:d8:a9:f0:05:9c:17:ef:b7:ac:e2:47:06:9e:
         e3:4e:5e:b0:1d:d2:55:29:ce:3d:96:be:42:be:ad:b5:a4:87:
         12:d1:03:ad:61:1d:ee:93:51:bd:cc:39:af:95:18:60:d9:f7:
         bc:ff:bc:b3:f2:e2:de:4c:95:4e:0b:68:71:1a:7c:67:1a:11:
         0f:06:a1:d4:8c:39:f3:8c:4a:3c:f7:81:3b:50:01:b7:83:45:
         f9:d4:a2:3b:1c:69:64:49:e1:8a:5e:22:00:5a:fb:96:ea:b7:
         17:b5:96:fa:b0:79:89:1d:75:b1:61:f7:8f:65:3a:08:40:07:
         9c:39:39:a1:7e:14:d3:94:e2:5e:87:b8:ab:cb:22:e0:41:61:
         bb:69:64:b3:57:4b:f9:f0:90:38:78:4c:2e:90:82:bb:15:a8:
         a7:7e:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:52:46 2026 by rpki-client