Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/59d5618f-8e20-32b1-ac80-ca4e80fa4d1d.roa
File:                     59d5618f-8e20-32b1-ac80-ca4e80fa4d1d.roa (raw, json)
Hash identifier:          2smP3gTsgKJ3XOlLZKLDY+5ps0dGRuyS3TKx2Q1eOL0=
Subject key identifier:   2D:DB:5E:11:D4:9F:5E:EB:0F:27:7B:CB:D2:1D:26:34:E0:E4:9A:7E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F51D2BB12E129D06C90A4F480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/59d5618f-8e20-32b1-ac80-ca4e80fa4d1d.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        192.177.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:bb:12:e1:29:d0:6c:90:a4:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=4efaf33d-baac-49f8-9e34-08e89448bd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:70:50:89:0d:58:b5:cb:0c:c7:3e:6f:a4:d2:
                    4b:3a:c4:37:6c:e8:00:d4:d7:fe:18:ec:7c:70:5f:
                    3f:8d:f6:4c:0b:b9:b7:72:90:4b:c9:13:6c:5d:95:
                    7b:23:a4:b4:f6:84:74:26:70:0b:6d:6a:56:54:0c:
                    56:7e:8a:f2:a1:33:06:3c:39:b3:4b:ed:2c:83:e5:
                    41:7c:fb:bf:ba:bc:78:cd:e3:4a:66:84:9c:a7:af:
                    6e:9c:37:69:39:bb:ea:81:07:66:ba:fd:9d:95:44:
                    36:4e:d0:0f:f5:3e:e1:cf:cb:13:7c:2d:f2:01:74:
                    c5:3b:61:8b:dc:97:b6:11:f0:e2:60:58:1b:1e:9b:
                    89:c3:6e:a4:44:6e:36:f5:0f:f5:7b:ff:52:70:93:
                    af:2d:45:12:7b:90:c5:35:24:ed:c1:51:ed:a5:8c:
                    cd:ba:12:46:5f:3c:67:ed:5e:3f:db:dd:b0:5d:67:
                    35:4a:68:91:b2:4b:40:60:46:d7:13:88:84:7d:9f:
                    e3:9f:62:e0:5b:ba:bb:53:77:72:14:96:f5:0c:a5:
                    32:6f:99:d0:d6:6b:16:96:af:cc:6c:36:ff:02:28:
                    d6:f6:34:3b:05:2e:64:e1:1a:99:cb:45:3d:93:e6:
                    94:78:08:a5:5e:0f:f9:2d:10:02:0c:d0:30:dd:8a:
                    72:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DB:5E:11:D4:9F:5E:EB:0F:27:7B:CB:D2:1D:26:34:E0:E4:9A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/59d5618f-8e20-32b1-ac80-ca4e80fa4d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:55:78:77:97:83:e0:8f:e6:5a:b1:02:ee:1a:75:54:ea:8a:
         5d:d7:8b:3a:3a:6b:84:70:5f:b8:2d:c0:b1:34:0d:63:03:b6:
         f9:8a:6e:10:c0:e0:f9:5a:7e:aa:33:48:fc:b2:d4:78:40:1b:
         46:c0:ca:7e:42:ca:4c:58:3a:c6:13:39:60:a4:2f:87:b8:e3:
         84:88:5d:79:ab:1d:9e:91:84:19:a7:fe:e1:f1:a7:34:c1:33:
         14:78:2a:8d:37:ab:da:3f:b5:ac:e8:a7:9d:48:51:c3:79:66:
         10:23:58:30:07:0a:d5:48:cb:bc:79:0a:5b:f0:e4:c3:bf:34:
         5c:d7:9d:36:c9:a5:07:d7:f1:ac:dd:18:9d:9a:ec:a9:56:c6:
         49:d0:0c:b6:87:96:05:4c:8b:ca:09:fe:62:43:a0:73:0f:a9:
         26:dd:df:15:45:f5:be:b2:b0:30:8d:26:96:bb:db:fc:a3:48:
         0c:5d:4f:6c:d3:5e:33:c5:de:bd:7d:c9:bc:a6:b8:08:65:1f:
         40:e7:44:d5:8a:1b:c2:18:e3:a5:a7:fb:6c:af:16:b5:ca:08:
         ae:db:34:20:dc:8c:f4:28:6b:17:db:bc:68:35:3a:6e:a2:39:
         b6:4d:fd:cb:42:fb:c7:f9:b3:9c:40:d1:d7:02:73:c9:22:34:
         ed:dc:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:24:23 2026 by rpki-client