Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/648bf007-d2cc-3403-ba92-ff206dabfb37.roa
File:                     648bf007-d2cc-3403-ba92-ff206dabfb37.roa (raw, json)
Hash identifier:          Uq9u+NH2vAOARbhix9EU3I8oqECvs4yoFMDjE6/o3fI=
Subject key identifier:   F0:18:10:58:42:BD:CF:69:9C:26:DC:FC:AB:AB:6E:24:0E:75:ED:85
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F00DCC43ABEEE5CA5D0C1B0A0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/648bf007-d2cc-3403-ba92-ff206dabfb37.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        66.146.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:c4:3a:be:ee:5c:a5:d0:c1:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=0e3ae89e-a89b-46dc-a510-0db168eee528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:59:4a:05:53:1c:d6:4a:ab:a3:44:b7:b9:
                    df:ae:d4:e0:7a:29:c5:aa:91:3c:0d:ae:55:74:ec:
                    e3:80:a0:72:16:bd:73:58:ad:26:f3:fc:b6:02:11:
                    42:90:8a:95:64:35:06:0d:80:21:11:e6:37:66:b3:
                    f5:44:56:52:0a:fc:21:f1:55:d8:e3:10:7b:94:29:
                    f8:61:2a:ef:4c:d4:45:13:0a:c9:05:2f:7f:c2:79:
                    8a:34:4d:de:6f:28:2f:01:23:25:93:62:46:60:86:
                    81:43:ab:08:8f:73:8f:3f:0d:bd:d8:98:ce:32:44:
                    87:1a:ca:ea:28:f8:6d:1a:4f:6f:6b:ae:16:db:ca:
                    ba:f3:43:a7:46:39:f0:9b:3e:53:19:51:d8:b6:b2:
                    c6:67:e2:f6:b3:55:44:2f:e3:e3:8c:32:75:aa:c4:
                    90:4b:16:0d:ca:e0:c3:ec:48:c2:8b:dd:ea:4a:47:
                    1c:8b:9a:6b:c6:10:9c:ba:1c:3e:cd:59:f5:ea:00:
                    11:71:06:11:ac:38:84:15:f0:55:8f:d3:86:49:77:
                    7f:30:e2:21:bc:a2:2c:61:dd:b2:fc:c4:e3:54:70:
                    2e:1f:aa:35:df:57:ff:0e:7d:12:eb:b2:f8:a8:06:
                    9d:0f:9d:6b:51:81:ed:18:56:07:34:8d:e8:4a:b9:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:18:10:58:42:BD:CF:69:9C:26:DC:FC:AB:AB:6E:24:0E:75:ED:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/648bf007-d2cc-3403-ba92-ff206dabfb37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:dd:20:98:dc:6b:df:1d:56:aa:19:d9:ee:09:55:7f:15:
         fb:c3:a7:63:2f:1e:5a:c0:be:fc:27:54:67:4b:13:58:06:cf:
         0c:1b:5c:6d:61:c9:65:de:4d:1f:9d:f1:91:a1:7c:6e:02:96:
         91:67:ba:00:a1:bc:d7:ee:a4:bb:0f:d1:56:f1:78:ad:1d:5c:
         06:ce:5a:45:38:bb:eb:ee:ec:f8:2c:2f:ea:41:07:49:40:86:
         ec:9f:9a:32:12:82:47:02:0b:16:67:47:0d:4e:fe:1e:af:50:
         1c:a7:4b:23:c8:4f:fd:99:81:29:78:96:89:d2:70:4f:c4:f2:
         ad:01:8a:52:e1:70:4a:f0:5b:cd:4f:f9:ba:c1:75:61:95:6e:
         8a:6d:d4:5c:f8:0c:2a:2f:2a:af:d2:6f:b1:77:62:d6:1d:b6:
         fc:4d:c7:a5:88:77:f1:55:68:85:be:ce:f3:2b:c0:4f:90:22:
         bb:5c:16:bb:15:b3:e0:dd:97:4b:1a:d3:6b:69:23:ab:42:e5:
         67:c9:34:e7:aa:ae:e2:41:4d:82:f1:e5:c0:e6:23:de:f1:a0:
         18:ba:05:3b:12:b7:97:26:b9:0f:89:a8:89:ca:16:a8:67:93:
         e1:e3:5d:63:2c:de:5a:3a:fb:c3:4a:a4:9a:d0:1c:66:55:61:
         7b:f5:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:43:56 2026 by rpki-client