Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/dd7b3ec0-4b6d-34d1-ace4-3129f265c246.roa
File:                     dd7b3ec0-4b6d-34d1-ace4-3129f265c246.roa (raw, json)
Hash identifier:          0cwHX3xqK85qjYvKMmDuJ/8Olc7rxU+MnT4cWY45d+A=
Subject key identifier:   59:54:63:40:98:C6:F2:63:FE:DF:16:E3:4B:1B:CE:E0:8A:AB:A6:0B
Certificate issuer:       /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial:       010D0C9F4328584ECA6C89B5634A78A56B81D500
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/dd7b3ec0-4b6d-34d1-ace4-3129f265c246.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     16992
IP address blocks:        66.37.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:89:b5:63:4a:78:a5:6b:81:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=fd39323c-febe-4e6e-a381-eb22e73668fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:d6:be:74:6a:07:9f:e0:90:4b:d3:fd:dd:
                    53:93:4a:dd:fc:49:3a:3a:ec:e0:32:d6:32:c1:73:
                    32:88:69:8b:fc:dd:e4:ac:6c:12:6a:82:77:18:1b:
                    bc:f6:0f:c8:01:99:70:65:0d:44:89:9d:67:34:d1:
                    e7:bf:42:5d:15:5e:62:21:f4:63:53:c8:49:16:e6:
                    35:49:7e:12:a7:00:2d:17:33:17:00:1e:31:b0:8c:
                    27:66:a3:a2:60:34:6a:55:e9:90:12:d7:4e:ff:fc:
                    3c:80:f4:b2:55:89:2a:7a:87:7c:0c:c4:02:1b:a5:
                    33:10:07:c0:f7:ce:80:65:61:bb:42:bb:e5:95:b7:
                    8e:3b:a5:63:85:c4:18:ac:db:ec:1d:e8:44:60:38:
                    3c:d3:e2:7c:ad:d4:05:1f:72:cf:3d:9b:ac:12:ab:
                    43:77:c6:d3:07:34:bf:b6:2c:b9:92:60:70:07:a1:
                    2b:05:4e:a3:4b:c6:ac:37:26:05:7d:7a:48:f6:9f:
                    69:ed:4f:b9:0e:4a:89:53:00:65:61:45:8d:02:3f:
                    d2:a4:26:09:f6:80:4a:7f:43:dc:25:a0:e9:74:81:
                    2f:56:4d:38:f8:33:1e:18:10:e4:5c:b8:f7:62:02:
                    2e:41:5b:ee:bd:8f:2d:96:a6:64:0c:83:f9:ac:03:
                    61:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:54:63:40:98:C6:F2:63:FE:DF:16:E3:4B:1B:CE:E0:8A:AB:A6:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/dd7b3ec0-4b6d-34d1-ace4-3129f265c246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl

            X509v3 Authority Key Identifier:
                keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:21:1a:7c:17:be:f4:12:d5:e7:bc:b7:13:e6:1b:a3:50:fc:
         3b:cc:f0:18:3d:f2:ad:4c:f9:a0:0e:e1:15:ba:49:f2:1f:d0:
         81:51:40:84:f8:d5:a1:91:6b:85:95:98:11:66:41:a0:4a:dd:
         73:d5:0a:55:c0:c4:21:90:ba:dc:a6:da:b7:bc:5a:93:61:b7:
         a1:7e:70:77:48:c2:ab:6e:d5:e7:a2:43:0d:9d:ca:de:4c:84:
         66:a2:f7:96:ee:7b:86:20:96:de:2c:96:9f:15:67:f3:74:13:
         56:74:96:e7:cb:f7:5e:a0:f2:b3:d3:73:7d:76:ad:1d:06:8f:
         95:72:10:24:75:4d:8b:44:23:b9:44:32:63:9c:44:64:b3:b7:
         dc:60:8c:ee:15:c2:91:39:3f:eb:94:7d:ef:1c:a6:e9:0c:7f:
         44:01:13:f0:fa:c4:ba:ad:ae:eb:83:5d:8d:72:e9:f8:3b:02:
         e3:5a:ad:9d:50:4b:d7:8a:6f:a2:6c:e1:0a:bc:6b:99:f1:74:
         3e:e3:9d:a5:cc:d3:c0:25:03:8b:8e:e6:1e:7a:2b:ad:81:ea:
         52:11:26:24:86:be:c1:d7:4c:44:51:02:77:69:7d:7f:40:be:
         df:05:e0:8a:2d:6a:f2:5d:d0:2e:4d:e0:74:03:cc:91:0e:7f:
         71:e4:75:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:18:09 2026 by rpki-client