Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/d17e8d00-e83c-3669-9a0d-b1498f560f8f.roa
File:                     d17e8d00-e83c-3669-9a0d-b1498f560f8f.roa (raw, json)
Hash identifier:          brbD6RlfpjSF3MT7PWpqIvNqZhjLE5PSkW6AtSzvFpA=
Subject key identifier:   AE:49:0B:7B:1D:B0:74:BE:B0:D1:1C:60:0C:4F:8D:F5:2A:DD:C8:21
Certificate issuer:       /CN=e8104549-f98b-40af-9dbc-4a8cad0f59fd
Certificate serial:       010D0C9F4328584DE5808D2D79064509A4FEC1C0
Authority key identifier: 62:7A:A3:A6:16:CD:B9:44:48:B2:3E:CB:73:53:FF:61:77:12:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/d17e8d00-e83c-3669-9a0d-b1498f560f8f.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     12212
IP address blocks:        66.179.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:8d:2d:79:06:45:09:a4:fe:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8104549-f98b-40af-9dbc-4a8cad0f59fd
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=a961388c-8ada-487b-b91b-9c8bcfb70d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:a9:5f:29:3b:6e:a0:77:75:80:1a:a1:e8:
                    22:a1:df:87:d3:a5:d6:23:de:42:27:2d:3e:39:f4:
                    0a:9a:fc:ea:34:75:e1:d4:61:f4:39:26:11:fe:f3:
                    af:4f:5a:7e:d5:23:93:c8:be:ff:b5:25:3a:e7:1d:
                    bf:b5:44:12:b5:80:eb:a8:3e:95:66:3f:63:39:04:
                    27:e4:de:51:63:65:61:22:e9:17:ca:8d:d8:00:3e:
                    85:b8:ed:6a:53:1f:5f:59:43:7b:80:e4:43:15:c4:
                    32:15:00:bc:f0:e4:ae:96:53:57:a7:43:e8:df:08:
                    96:05:d9:a7:eb:02:4a:39:b6:0c:dd:96:fa:27:8d:
                    3c:d6:1f:94:20:bb:cb:45:d7:43:b9:54:5e:e6:f7:
                    c1:1a:7e:28:ef:6a:3d:cd:7d:0c:b6:43:04:52:29:
                    f6:0b:2f:c6:b9:ef:dd:93:b4:98:dd:6a:5f:44:0e:
                    cf:53:5b:4a:45:0e:84:b8:22:bf:ef:6a:20:45:c3:
                    c7:a5:b9:c9:e4:99:7b:ce:9b:bb:ef:73:23:c0:6f:
                    92:24:0d:e2:7b:8d:9a:9b:2d:d2:c5:fb:17:0d:83:
                    d8:26:8e:e6:80:f5:23:ae:05:cf:8a:7e:44:a6:fa:
                    c5:ae:b8:17:df:a9:13:4e:79:4c:ec:cb:54:f3:6c:
                    42:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:49:0B:7B:1D:B0:74:BE:B0:D1:1C:60:0C:4F:8D:F5:2A:DD:C8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/d17e8d00-e83c-3669-9a0d-b1498f560f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.crl

            X509v3 Authority Key Identifier:
                keyid:62:7A:A3:A6:16:CD:B9:44:48:B2:3E:CB:73:53:FF:61:77:12:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:61:6e:91:15:98:80:91:bc:15:61:1a:98:c6:65:65:13:b5:
         61:31:5a:00:29:65:b1:ab:0a:d9:a9:42:8f:4a:33:f9:ca:4d:
         8e:28:d1:7d:27:50:bc:75:14:ff:db:bf:b9:c2:b6:d1:19:1c:
         1e:c9:da:12:f4:a9:db:7e:b4:10:f6:a4:bf:55:1b:89:7b:8a:
         17:e3:43:cb:0c:85:11:04:73:ab:68:cb:17:d8:e3:dc:14:b7:
         7a:6b:7c:ce:0e:24:b0:86:08:ba:db:b2:5b:4b:6d:bc:d7:4e:
         12:a9:4d:54:34:bd:d2:d0:a7:6b:7a:ce:2d:fb:28:24:b9:43:
         bc:05:02:8a:0d:16:a6:87:32:01:27:cc:49:ab:c4:ef:9e:84:
         47:c8:66:00:a0:d0:06:e0:23:16:1c:24:6c:41:87:bb:84:a6:
         b7:c2:e1:24:ab:8d:9e:e7:38:89:be:d7:d7:b4:12:b2:a7:92:
         3f:91:8a:c1:11:3d:88:4d:9e:00:73:b2:2a:1a:6c:b0:fa:0e:
         70:eb:bb:4c:04:0a:2c:17:21:36:f6:00:67:55:91:96:66:3d:
         84:2c:26:0f:3a:63:4a:7b:03:80:36:e6:8f:3b:50:a5:f9:eb:
         5a:ab:22:3b:62:10:89:d5:1e:68:95:29:3d:82:1b:42:aa:18:
         a3:d2:07:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 06:45:00 2026 by rpki-client