Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa
File:                     8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa (raw, json)
Hash identifier:          XrqDGKrB9JsXeBEJTx2nNdFPW1QgAsQMfGw0dM9Eslk=
Subject key identifier:   A6:A1:1E:89:D9:6E:72:B3:E1:93:09:C8:C8:6A:F7:3C:1C:61:72:59
Certificate issuer:       /CN=de8b5430-108d-4deb-960f-6c438a23adc4
Certificate serial:       010D0C9F4328584EA7980F71F08A4F7F6D2687D8
Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        66.132.138.0/24 maxlen: 24
                          198.73.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:0f:71:f0:8a:4f:7f:6d:26:87:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=456ad84f-6d0c-402e-900e-9238a6605265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ad:1c:6f:da:b9:05:45:0c:ee:dd:56:89:62:
                    e6:71:64:2a:90:d2:0e:23:2c:61:43:62:03:71:c6:
                    c6:5a:f2:7b:52:ec:88:79:fc:03:ba:4f:ad:3d:9f:
                    c7:18:d3:47:9e:03:d5:0d:e5:7e:d1:70:98:00:5b:
                    7d:59:69:3f:38:62:1f:27:af:5c:79:65:67:19:9c:
                    65:2d:95:4a:61:17:2b:28:53:23:07:8e:cc:bd:7d:
                    b2:e8:93:c8:71:0b:5f:17:70:1e:88:76:bf:eb:a7:
                    81:b8:ce:7e:dc:ff:83:e9:07:d3:cc:77:ad:75:53:
                    d3:f6:9b:c9:ba:e1:67:5e:7d:14:87:6e:91:56:97:
                    35:3b:4b:e1:5e:d7:e9:de:dc:79:88:b4:4b:f2:54:
                    0b:ab:c4:83:21:f1:ad:3d:0b:d3:ca:2d:66:b7:22:
                    9a:24:26:5d:b1:8e:02:64:14:26:1e:b6:8a:d0:61:
                    a6:e8:08:bd:2c:7f:70:89:84:4e:26:5f:a0:6d:96:
                    68:68:ca:b2:29:70:66:5c:48:89:09:7a:c3:97:96:
                    7f:b9:8e:a9:f1:0a:41:3a:ab:34:32:8a:d3:38:7e:
                    72:9c:9d:45:d7:7c:01:52:8b:4f:66:bd:cc:cb:a3:
                    ea:d2:ca:21:68:71:1f:71:91:a0:7d:94:fe:c1:7d:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A1:1E:89:D9:6E:72:B3:E1:93:09:C8:C8:6A:F7:3C:1C:61:72:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl

            X509v3 Authority Key Identifier:
                keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.138.0/24
                  198.73.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:90:68:60:ac:11:93:f2:72:68:02:40:14:05:46:ee:7a:d8:
         cf:c4:67:91:ce:bd:5e:8d:65:df:81:de:10:41:28:23:05:49:
         8b:ca:dc:ae:fc:17:1e:cc:f7:d2:a2:13:26:ff:cf:e1:08:28:
         b9:d6:4e:1a:9a:17:62:f6:b1:47:f2:d9:e0:04:79:76:11:3e:
         12:7b:8c:0b:98:7d:7e:a3:f9:fb:5c:8c:a5:15:75:1b:42:9d:
         b7:2e:90:b0:9d:1c:99:15:43:63:34:70:3f:9d:12:8b:00:1b:
         aa:4d:f3:30:a6:e1:8b:52:e7:06:5f:c9:f7:26:39:e7:13:68:
         3b:38:58:d3:5f:fc:26:df:76:bd:17:0d:0a:90:7b:19:f2:2d:
         26:2f:31:93:d0:6c:01:fb:53:3c:82:66:f8:63:25:1e:f5:fd:
         92:e6:7e:ae:db:eb:60:88:b6:c6:e3:65:05:d7:77:cd:7c:8a:
         8e:da:18:bb:30:7f:a1:89:3d:9a:e5:cb:0b:19:c5:82:d2:42:
         22:49:2d:95:50:c4:85:8c:c5:d6:26:52:09:76:96:47:86:f6:
         12:25:89:0a:35:72:b9:b7:a4:35:b1:e0:63:2b:ea:60:d5:25:
         f5:0a:e1:88:7c:1f:f3:e8:9e:b2:43:49:6c:a4:dc:cc:9b:2e:
         18:12:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:11:36 2026 by rpki-client