Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa
File:                     da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa (raw, json)
Hash identifier:          Du6wPzVelRsP16fLTJOlzJKuMpPxQ0mgNV01DAdsFj4=
Subject key identifier:   EB:A3:F8:FF:75:C7:11:E0:D0:18:47:8A:27:0C:9D:CB:DC:65:84:0F
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584F7782DFB55A638CC321C71980
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     394469
IP address blocks:        66.110.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:df:b5:5a:63:8c:c3:21:c7:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=3f6a91e7-8d0b-44af-931c-fa14af4b3dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:63:97:28:48:27:8d:5b:9c:e6:71:67:1b:ab:
                    58:ae:64:2a:df:55:e7:00:14:ae:9b:1a:fe:c9:be:
                    af:8e:1f:cc:59:32:65:5a:68:c3:dd:60:25:7e:63:
                    e3:8e:4f:e4:1c:50:9a:4d:d2:e6:7d:20:17:6a:a4:
                    d2:07:02:10:85:56:75:f8:c0:9d:8d:99:21:1e:7f:
                    57:ef:63:4a:25:d3:de:8f:5f:00:1a:73:f4:2f:cc:
                    63:1d:b1:f2:16:5b:32:44:6f:b9:25:3a:11:b5:c2:
                    5a:11:d9:4d:ff:96:c8:a9:6e:c7:ac:a0:f7:fa:3e:
                    17:de:0e:3d:53:7c:68:55:ad:15:5d:43:03:37:7f:
                    53:d1:f3:db:47:5b:8e:1a:72:1f:6b:9e:98:a1:bb:
                    03:7b:56:50:dd:68:b2:55:dd:69:0e:4a:d4:0b:27:
                    6e:22:e7:4e:d9:f1:20:55:a2:09:5b:ea:a9:9a:e9:
                    20:e5:cc:b9:28:ce:9a:be:89:82:51:f5:b6:e0:6c:
                    67:7b:1e:de:28:7b:87:46:7d:aa:cc:22:eb:7c:1d:
                    c5:56:bb:76:a9:49:18:f4:aa:b4:15:4a:f9:a0:54:
                    92:f6:f8:36:34:68:e6:b6:27:08:ef:1e:c1:44:c5:
                    ab:6a:d8:58:f6:88:81:bd:9a:c6:13:3c:00:11:c3:
                    0c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A3:F8:FF:75:C7:11:E0:D0:18:47:8A:27:0C:9D:CB:DC:65:84:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:57:36:fc:6f:32:10:1f:9b:d1:c2:e3:01:ac:39:0f:c3:7b:
         e7:9e:ec:84:2a:28:91:39:89:92:b1:80:69:f6:70:f1:74:16:
         d1:e0:b6:ad:fc:d5:38:3b:59:e0:bd:57:73:be:83:87:26:40:
         f5:c4:e9:18:ed:b1:3e:98:8c:fa:48:9f:49:7d:ae:7d:b9:56:
         03:d4:45:11:4e:46:dd:45:f8:cf:38:82:a2:bc:a6:fc:4f:fc:
         66:61:eb:ab:b0:dd:a2:36:6e:5a:ff:b3:47:05:a9:20:d5:63:
         83:ae:fd:c5:67:c6:03:bb:10:24:3a:97:84:0f:0e:87:3d:d8:
         32:9d:df:32:33:83:af:79:e6:cf:b2:bb:bc:21:96:a0:be:fe:
         31:74:8f:1f:6f:ed:32:60:f2:7e:83:ab:01:4d:ce:74:bd:3d:
         27:08:3c:b8:03:d5:a2:37:25:e7:7e:63:4a:03:c1:4a:65:3d:
         e3:75:ae:fc:62:2e:53:00:b1:24:29:2c:d6:87:33:ea:e6:e9:
         c6:75:05:db:4f:fc:9e:1c:3e:2a:59:64:4d:f6:4a:d8:f2:52:
         dc:3f:e3:f8:60:29:80:8a:b5:22:02:9b:35:a7:8c:7a:33:c9:
         5e:8c:c3:7f:32:e3:a3:23:81:c5:f5:55:77:11:0c:0a:af:e7:
         4a:84:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:23:28 2026 by rpki-client