Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/8bf441d6-22ed-3313-ba83-d19e61b48deb.roa
File:                     8bf441d6-22ed-3313-ba83-d19e61b48deb.roa (raw, json)
Hash identifier:          4J2UYL2bnGUyj3CXrpT5nT7t+i/NZxoui+28JtoiRNc=
Subject key identifier:   61:61:42:B1:7F:9B:46:FC:71:72:29:00:EF:90:A8:4C:E9:20:44:9D
Certificate issuer:       /CN=607fb4c7-9b54-4d7e-9099-986be3553d20
Certificate serial:       010D0C9F4328584F63F824031BF86A21D2CA74C0
Authority key identifier: 67:05:BE:41:56:11:B2:6C:50:E2:36:B0:F1:A2:97:38:EB:52:E4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/8bf441d6-22ed-3313-ba83-d19e61b48deb.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     54549
IP address blocks:        66.223.104.0/22 maxlen: 24
                          2606:ff40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:24:03:1b:f8:6a:21:d2:ca:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607fb4c7-9b54-4d7e-9099-986be3553d20
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=3f5622dc-a9f1-4efe-9e0b-f6fd10ab4ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:76:d5:43:b6:61:4e:82:e5:63:f2:50:e0:
                    31:d4:e3:9d:4b:df:a8:80:68:2f:05:0b:04:b2:fe:
                    3c:d3:9e:4e:66:35:69:02:86:27:b7:c2:9f:c3:4f:
                    b3:0e:f6:10:a4:fe:0c:d4:90:71:06:00:86:aa:4a:
                    25:ee:10:18:3d:d3:ca:42:0e:5c:88:df:e6:a8:f9:
                    0b:0a:89:a8:95:8c:78:28:22:58:7b:6c:4e:d1:13:
                    a1:94:ec:49:3f:b7:2c:2f:bd:c8:54:d7:6b:21:18:
                    0b:55:cb:ba:1d:57:f2:9e:da:db:94:ef:ea:e7:5d:
                    33:d9:a9:70:5b:37:a8:b4:a1:67:1a:34:0d:6f:e7:
                    4b:25:30:7e:39:23:b5:e0:a8:98:3d:32:2b:a3:91:
                    4c:e8:9e:44:0b:90:37:67:d0:d9:7b:67:cf:15:77:
                    df:e2:2d:86:9b:d5:d4:4b:f2:53:11:09:65:dd:a8:
                    70:cf:8a:8b:d9:99:ba:45:2c:cb:0a:f5:f0:20:ba:
                    5f:5c:ef:f3:3e:24:e6:ae:da:71:ae:e8:59:de:ce:
                    bb:e0:d1:4e:3e:ac:14:19:af:70:24:45:21:67:33:
                    18:73:da:fc:e3:79:ee:8b:ff:00:cd:39:af:f5:27:
                    c8:6f:46:b7:a7:7b:96:96:83:01:52:64:6d:58:3b:
                    46:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:61:42:B1:7F:9B:46:FC:71:72:29:00:EF:90:A8:4C:E9:20:44:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/8bf441d6-22ed-3313-ba83-d19e61b48deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.crl

            X509v3 Authority Key Identifier:
                keyid:67:05:BE:41:56:11:B2:6C:50:E2:36:B0:F1:A2:97:38:EB:52:E4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.104.0/22
                IPv6:
                  2606:ff40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:eb:5a:1c:ba:ab:25:87:c1:ef:86:7e:4d:42:e6:46:32:f3:
         00:8f:dc:62:d9:b5:34:29:00:4d:91:11:71:32:c4:66:7b:02:
         fe:ab:d6:23:bd:65:b0:af:32:04:6a:71:8a:b1:f9:88:b2:0c:
         c6:92:61:18:41:f5:d0:0a:79:ec:56:50:1f:03:9f:cc:ce:f1:
         50:5a:f3:b2:a8:36:f1:4d:44:b8:af:d6:e0:e0:84:56:96:40:
         f4:1f:32:84:b9:b3:47:f2:ac:ad:9e:f7:b3:e9:49:a8:75:02:
         3c:45:e2:08:8c:d5:a6:29:ba:48:7f:aa:ba:77:32:14:50:74:
         15:c4:e5:38:a6:06:b2:13:a5:16:48:65:27:b3:3d:ee:ef:56:
         4a:94:ad:96:a0:14:bb:21:e8:b8:2e:11:36:d0:49:2d:b3:97:
         d0:97:52:9e:f9:5a:92:39:7c:20:b3:dd:57:99:7b:ba:2e:06:
         d3:a7:6d:6e:60:d9:14:42:20:f2:7f:ad:02:e8:15:83:fe:aa:
         cc:6f:43:75:36:f3:d8:95:53:57:49:a6:67:e3:cc:f0:04:93:
         8d:63:25:bb:18:03:f2:f4:b5:a6:f4:71:7f:e9:38:13:39:c5:
         37:6e:be:03:51:00:67:07:03:eb:a1:49:6b:9c:7a:24:ce:51:
         11:76:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 20:16:00 2026 by rpki-client