Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa
File:                     c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa (raw, json)
Hash identifier:          W2sUhybUmi9s40UFlss1Z/h7SUgkhhUdeBUErw3b3dE=
Subject key identifier:   77:25:51:F9:15:C9:A9:DD:EF:9F:BE:6D:35:48:22:2F:9C:53:51:D9
Certificate issuer:       /CN=12c922f5-d2fe-44e3-9541-84c46c7d8348
Certificate serial:       010D0C9F4328584EAD1C5800178E0493BC042FD4
Authority key identifier: FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     36221
IP address blocks:        66.241.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:58:00:17:8e:04:93:bc:04:2f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c922f5-d2fe-44e3-9541-84c46c7d8348
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=5aca8538-5e58-4901-a496-1a1320803ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:29:b0:9d:54:39:97:d6:c7:2b:73:2c:9b:
                    96:40:8f:23:4b:73:cb:1c:9c:28:75:2e:2c:29:59:
                    01:5e:80:7d:f3:7d:5d:00:19:c7:b3:32:76:8c:87:
                    c8:5e:a3:0d:f5:a0:96:76:46:d7:bb:37:b4:12:07:
                    11:a9:28:a2:12:c0:50:51:c5:85:d8:7e:17:ce:0a:
                    12:1f:e4:79:a4:b3:81:bc:9d:60:21:02:60:2b:3b:
                    5e:1c:31:3f:56:12:5f:94:fc:4f:54:a2:2b:b6:94:
                    89:cf:ee:42:c8:e8:80:78:2a:e6:e1:8a:24:21:42:
                    35:b7:c7:1d:a1:28:1d:42:a5:2d:eb:82:a7:ee:03:
                    07:34:6b:01:ca:87:36:3e:86:4b:ed:b8:43:46:90:
                    3b:3b:a2:fb:6f:b6:52:9c:8b:da:1c:0c:23:9a:e7:
                    c8:6c:21:f2:f0:9d:6e:5f:01:f4:17:08:a9:00:f6:
                    19:e3:98:33:a7:cb:e4:88:48:80:ad:ea:8e:eb:5f:
                    24:88:91:8e:96:86:8f:76:3e:36:91:1b:ee:e2:ec:
                    67:32:53:2c:a0:01:b9:be:53:52:60:ad:d8:ed:af:
                    77:5c:1b:d0:14:63:6b:fd:88:ad:8a:0f:00:6f:d7:
                    e3:d2:70:78:cf:25:d8:c3:51:5a:7a:27:61:54:dc:
                    7f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:51:F9:15:C9:A9:DD:EF:9F:BE:6D:35:48:22:2F:9C:53:51:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:93:01:0f:22:c7:6f:d2:d1:50:02:d1:91:8e:5a:6d:a4:00:
         4a:81:ed:51:fc:47:f3:c4:d1:94:b2:ff:79:82:cb:4b:41:42:
         27:2c:08:92:01:94:77:27:4a:34:ca:db:fc:17:ea:b1:1f:7f:
         a0:a9:7a:6a:0e:cc:a1:2f:f4:63:8f:92:a7:8e:0f:f1:db:4a:
         14:ef:0a:4b:6c:c8:4d:aa:3b:07:4c:87:1a:22:df:38:35:e5:
         c9:64:0e:46:33:aa:c9:8f:c0:21:52:84:a0:b8:c6:48:e1:2d:
         5b:05:44:f8:1f:5c:03:9a:c2:1f:2c:5b:de:1d:5f:11:f8:9c:
         f1:25:4e:22:9c:2b:6f:01:ed:01:76:77:76:fa:45:36:07:0e:
         bb:4d:98:26:ec:da:f3:0a:4e:c4:27:47:1f:6c:8b:14:e9:ab:
         21:07:a4:f1:8d:f7:df:e2:05:b3:a7:2c:9e:1d:7e:ad:66:6c:
         e3:5c:f4:90:36:a7:34:28:42:6d:3b:2c:e2:f1:1a:59:ba:8a:
         37:a7:ae:97:d2:e9:62:4b:a7:52:41:6f:1f:2c:65:68:77:ee:
         e4:06:00:6a:a8:73:28:f8:7e:ae:cd:0e:99:ad:37:f1:9a:fe:
         12:8f:04:b2:37:0f:01:2c:18:e6:c1:13:75:42:0d:fc:2e:75:
         a9:72:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 10:10:54 2026 by rpki-client