Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/c639e8a8-42df-31cd-97a3-cc5458b1a6fe.roa
File:                     c639e8a8-42df-31cd-97a3-cc5458b1a6fe.roa (raw, json)
Hash identifier:          ntvUO3qvJZYScUj3fTBmMvRnIvx4OEuu1KkeWwDexuo=
Subject key identifier:   3F:99:DE:B4:1F:E9:61:22:89:EF:0C:53:7E:69:A7:40:80:65:7C:FC
Certificate issuer:       /CN=66049fc9-3d05-426a-98ee-53b139a32165
Certificate serial:       010D0C9F4328584F6F22C41124BB475205064F40
Authority key identifier: CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/c639e8a8-42df-31cd-97a3-cc5458b1a6fe.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     54845
IP address blocks:        207.45.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:c4:11:24:bb:47:52:05:06:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66049fc9-3d05-426a-98ee-53b139a32165
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=e265b40f-1ac3-4458-b0dd-d46299406c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:32:c7:33:24:18:80:d7:2c:71:5e:c0:22:dd:
                    02:c5:f5:0c:7f:04:90:3b:ec:8e:c0:2c:e1:d1:18:
                    8a:40:55:87:1f:fe:61:c8:ac:c7:10:d9:53:0a:6d:
                    09:5b:55:e1:28:98:cc:ee:2e:ca:23:b7:40:a8:0f:
                    71:c2:3f:2f:0a:36:5c:cd:00:e2:51:fa:3d:64:c7:
                    db:cf:27:71:94:c1:f7:db:61:7a:71:c2:ef:94:d1:
                    c6:86:18:50:83:5c:31:3b:24:4f:a0:ce:e6:b6:8e:
                    06:e8:c3:62:2b:15:30:0c:e6:30:12:e5:db:ea:f0:
                    c0:6f:ac:68:9c:3f:ca:96:d0:25:f9:bf:13:66:b6:
                    9d:bd:cb:97:37:5f:26:bd:a0:5a:39:d3:03:87:a4:
                    0c:31:3e:b4:75:39:d6:3b:c6:c4:06:67:7d:51:0d:
                    23:76:a2:d9:2b:60:b3:db:f3:d6:11:7f:c4:25:2f:
                    22:d7:c3:22:c9:c9:cf:3c:6e:33:ff:25:6e:0b:70:
                    da:1f:3e:52:1d:84:1d:9f:10:0f:6b:e1:3e:59:7b:
                    06:5b:14:3e:d2:7e:8c:ce:d4:39:dc:31:ca:d8:ec:
                    0d:67:53:18:17:0d:08:43:8c:3a:b2:3b:9d:fe:d1:
                    90:95:27:f5:58:e2:26:25:74:3d:7e:74:1e:97:24:
                    48:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:99:DE:B4:1F:E9:61:22:89:EF:0C:53:7E:69:A7:40:80:65:7C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/c639e8a8-42df-31cd-97a3-cc5458b1a6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl

            X509v3 Authority Key Identifier:
                keyid:CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.45.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c7:98:68:0a:9e:1a:cf:ea:1e:b7:89:e1:f8:bb:dc:06:81:
         01:d4:18:64:59:df:13:46:a6:88:88:70:a0:d9:7c:81:29:8c:
         d5:c0:57:fc:73:23:92:21:3a:a1:f4:35:5d:65:c8:cb:74:24:
         41:ed:72:42:07:b8:14:dc:3c:b2:e6:5c:ca:e4:07:08:3b:9a:
         cb:eb:4b:5e:4c:98:2a:8b:55:bc:9e:9d:1a:61:25:20:fe:9e:
         a8:f6:d7:71:70:86:aa:8f:ff:44:22:52:26:52:ee:cc:ee:7c:
         22:68:56:ae:0b:95:74:98:7a:5f:45:45:cb:30:b1:b5:54:ab:
         f2:06:9b:bf:30:bc:5c:f8:b2:de:79:2a:64:3d:d4:de:64:c0:
         09:f8:b6:67:cf:93:f4:6a:4a:2f:75:f5:7d:1f:ac:ac:cd:e5:
         1d:0d:0b:5b:a3:73:8e:c1:54:06:1e:cd:4f:c8:2d:3c:06:80:
         e9:c2:ed:c7:62:c1:4d:73:46:d0:83:b9:d3:48:b6:11:bb:92:
         e4:62:77:90:c3:70:0f:af:50:6a:44:20:2c:ed:cb:e5:e3:06:
         5d:02:b2:86:64:45:63:b2:e1:97:2f:9e:61:42:8a:1d:97:bc:
         2f:e9:fd:51:22:81:6e:d1:10:21:4c:61:18:a3:09:16:8e:bb:
         73:b7:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:00:47 2026 by rpki-client