Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c6434370-18b9-4588-aa13-0adc5e7715b6/bfdf5ac1-9723-3940-a8f9-4966223d4ab7.roa
File:                     bfdf5ac1-9723-3940-a8f9-4966223d4ab7.roa (raw, json)
Hash identifier:          ieLN/SugkeW283s9oIjzUJfkivdQ0Ilt7JiYK6QQ54w=
Subject key identifier:   62:CB:AB:19:51:6B:53:3F:A8:C4:B2:32:63:5C:8B:F7:93:2E:F6:EC
Certificate issuer:       /CN=c6434370-18b9-4588-aa13-0adc5e7715b6
Certificate serial:       010D0C9F4328584EF7618CDF638143FB62CF6940
Authority key identifier: 98:6B:E6:C9:82:20:1D:92:B8:BE:D7:90:FB:A7:A9:8F:B8:26:81:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c6434370-18b9-4588-aa13-0adc5e7715b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c6434370-18b9-4588-aa13-0adc5e7715b6/bfdf5ac1-9723-3940-a8f9-4966223d4ab7.roa
Signing time:             Wed 26 Aug 2026 15:29:44 +0000
ROA not before:           Wed 26 Aug 2026 15:29:44 +0000
ROA not after:            Tue 24 Nov 2026 16:29:44 +0000
asID:                     16276
IP address blocks:        66.187.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c6434370-18b9-4588-aa13-0adc5e7715b6/c6434370-18b9-4588-aa13-0adc5e7715b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c6434370-18b9-4588-aa13-0adc5e7715b6/c6434370-18b9-4588-aa13-0adc5e7715b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c6434370-18b9-4588-aa13-0adc5e7715b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:61:8c:df:63:81:43:fb:62:cf:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6434370-18b9-4588-aa13-0adc5e7715b6
        Validity
            Not Before: Aug 26 15:29:44 2026 GMT
            Not After : Nov 24 16:29:44 2026 GMT
        Subject: CN=4ec08fcc-e4e0-4d11-8082-8e20db2705a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:b5:e4:55:7a:52:10:c2:5e:53:b0:bb:00:
                    9b:56:85:2a:db:b6:79:46:29:f7:2f:cc:a5:1f:e8:
                    b7:16:d9:30:9f:da:ed:15:25:cb:ec:7c:1c:5f:c1:
                    26:01:bb:02:19:83:99:b1:b1:00:0c:70:dd:85:71:
                    b5:a6:16:ea:34:7c:e9:38:b2:58:48:b0:1d:51:f4:
                    be:91:47:87:cc:46:5e:2b:50:6e:7e:4a:09:93:0e:
                    02:db:aa:24:24:89:11:7e:f1:4d:d2:33:67:9c:d3:
                    7a:eb:64:6d:a0:cd:81:50:2c:9c:b5:3c:fb:d7:57:
                    dc:78:70:d1:22:e2:7b:cc:35:fd:31:49:dd:f6:29:
                    5b:d1:4d:5f:33:39:c1:f2:bf:0a:14:34:f6:07:66:
                    99:19:dd:2e:4e:d6:bb:07:ae:a4:ee:ad:d2:d1:2f:
                    c7:93:b2:b8:38:a7:4e:2d:71:b2:bc:dc:d3:17:77:
                    2c:54:bf:7a:6b:ae:b0:5f:5b:f7:1d:77:f1:ed:03:
                    d6:a2:8f:ee:5e:45:8b:fd:38:90:1d:3e:17:26:cc:
                    7b:ed:31:a5:2a:bc:3c:85:0e:aa:80:e2:b9:3f:2b:
                    a5:a8:8f:ac:97:0d:c3:a1:31:1c:18:d8:05:d0:62:
                    da:e9:98:a9:ce:db:6d:5b:1a:0f:d9:21:70:0a:5d:
                    85:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CB:AB:19:51:6B:53:3F:A8:C4:B2:32:63:5C:8B:F7:93:2E:F6:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c6434370-18b9-4588-aa13-0adc5e7715b6/bfdf5ac1-9723-3940-a8f9-4966223d4ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c6434370-18b9-4588-aa13-0adc5e7715b6/c6434370-18b9-4588-aa13-0adc5e7715b6.crl

            X509v3 Authority Key Identifier:
                keyid:98:6B:E6:C9:82:20:1D:92:B8:BE:D7:90:FB:A7:A9:8F:B8:26:81:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c6434370-18b9-4588-aa13-0adc5e7715b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b1:6d:43:30:8c:d9:6f:8f:3f:1e:2f:88:7a:65:4a:25:5d:
         ca:41:e3:96:57:97:e6:1a:bc:be:6d:e4:fb:ef:15:9b:c8:b7:
         03:08:c7:bc:17:f9:8d:c4:53:4b:45:21:ae:3a:f9:cf:0c:34:
         78:b7:84:88:bf:d7:6b:db:8b:73:40:9f:e1:1f:03:03:b1:d4:
         89:52:5b:2f:50:eb:d2:a0:c9:32:84:ba:f7:dd:cb:86:e9:e6:
         c7:e6:a6:56:2b:9c:38:0d:73:c7:7a:99:ed:f6:76:e9:58:43:
         f6:70:aa:5a:58:21:b1:87:1e:dc:7d:2c:5a:62:cc:6f:3d:5a:
         dc:ad:e0:ce:3b:0b:b2:d3:98:e1:c1:d4:8b:d1:96:c4:8f:21:
         ea:09:2b:96:1a:f3:dc:23:a9:a2:66:f2:22:d0:71:42:d9:76:
         a7:24:0d:c1:26:b0:a8:f0:61:e8:56:20:cf:04:4d:fb:b6:8c:
         ea:42:9f:6e:9b:47:1e:d5:a3:8b:00:f9:97:bf:0a:ad:f1:92:
         70:63:7d:08:96:76:a8:71:ea:cb:27:be:e4:f3:2f:c1:90:e1:
         22:46:21:0e:92:b4:c1:d7:4b:01:18:cc:60:fc:48:06:48:33:
         9f:bd:fd:05:32:0b:3f:af:a9:3b:bb:9d:48:b8:f4:c8:aa:0c:
         e0:87:d2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:15:12 2026 by rpki-client