Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/1c57e496-f6d3-3267-b2bb-28640c6f56ce.roa
File:                     1c57e496-f6d3-3267-b2bb-28640c6f56ce.roa (raw, json)
Hash identifier:          NaPD58bgu5/40z5tHl2YGn19sV+tl/I5sD0HMFP2lPU=
Subject key identifier:   11:18:4D:61:5F:04:1B:41:3B:6B:FC:05:D1:D5:EC:B4:A3:E2:9F:CF
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584ED861E98E4DBE120683369300
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/1c57e496-f6d3-3267-b2bb-28640c6f56ce.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     8560
IP address blocks:        66.179.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:e9:8e:4d:be:12:06:83:36:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=e19a4794-0981-4c97-ad87-38a4770335a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:88:8d:ff:77:08:7c:20:20:c8:c5:ce:a6:d9:
                    12:1c:5f:6d:19:78:28:0f:5f:80:dd:44:d1:7a:ad:
                    2d:67:cb:7a:83:ca:ee:a1:15:54:6b:6e:09:b3:d3:
                    cb:e5:a4:98:f5:48:27:dc:14:2b:67:f1:fe:f2:bc:
                    be:a7:be:af:65:57:64:80:64:f0:93:01:66:a5:e1:
                    28:ac:72:3b:02:ab:28:58:8b:ea:90:65:e4:f2:3c:
                    2e:2c:c9:79:85:28:ce:00:4b:25:ed:70:a8:35:30:
                    77:df:1a:97:ff:8a:03:01:a6:ec:84:ef:b1:b8:59:
                    b7:63:25:87:72:47:07:5e:26:eb:88:88:42:78:a1:
                    30:5a:fc:eb:4c:86:71:ef:71:57:6b:05:9d:bf:93:
                    73:da:82:99:90:5a:d2:eb:56:59:17:1a:38:f5:11:
                    1d:72:8a:5f:18:be:67:ca:cb:7b:04:ca:aa:d7:36:
                    35:bd:4b:3e:47:8b:c6:22:33:0c:51:2e:57:37:23:
                    2c:04:0f:ce:28:51:3a:1e:fa:ca:1d:31:70:37:47:
                    f6:1b:22:62:ad:fd:fa:a3:e0:d5:c0:38:f3:57:08:
                    bf:2d:b3:10:51:c9:79:02:97:58:65:1f:0e:f2:5a:
                    7d:6e:79:99:dd:e9:73:a8:0a:93:34:6c:1c:25:4a:
                    b0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:18:4D:61:5F:04:1B:41:3B:6B:FC:05:D1:D5:EC:B4:A3:E2:9F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/1c57e496-f6d3-3267-b2bb-28640c6f56ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:29:4b:c9:c9:6a:b4:a8:46:d7:89:90:ab:e1:7d:b9:5e:fa:
         2d:dc:ba:b2:2e:7e:36:5c:07:3f:4d:a4:9a:42:dc:5c:f1:85:
         dd:2b:c7:7a:b8:17:d6:c3:62:81:5d:9f:b1:ab:81:fa:74:b7:
         ce:90:5b:2f:e7:dd:a7:6d:7c:22:b3:bb:29:6e:6f:f9:87:0b:
         b4:5d:8f:65:aa:a0:84:31:aa:ea:35:51:fd:52:40:b8:28:ee:
         1e:3e:1a:4e:2d:8c:b5:4a:59:e3:ab:70:99:38:0d:c1:99:5b:
         26:c7:8e:42:e8:aa:99:11:3f:1f:d9:93:a6:26:b0:44:61:ec:
         1d:8d:7d:e1:77:ca:6f:f8:90:3e:bc:cf:89:42:01:af:8c:2a:
         bf:5c:a5:7d:1a:df:9e:65:32:c7:8e:dd:f2:2b:bc:17:74:8c:
         1b:c6:d0:bc:34:e6:8a:2e:f1:4d:3a:1b:a9:fe:f0:ee:16:e3:
         c2:0e:99:41:7d:d6:37:47:90:84:b8:a9:d0:56:bd:5d:d3:ac:
         e6:b6:e4:30:87:e6:1b:ac:77:b5:4b:c6:ec:8f:b5:95:0c:5e:
         2d:eb:9d:84:0f:8f:21:a1:fa:f9:be:65:ba:67:9b:56:a4:17:
         83:f2:41:1a:8f:3f:49:09:59:fe:1d:45:24:d7:0a:03:83:03:
         3a:f4:dc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:57:28 2026 by rpki-client