Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa
File:                     f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa (raw, json)
Hash identifier:          Zw34X6mte/2bTjBkCLLXMvRpPiTyLmhdmEZFo3m1Mzs=
Subject key identifier:   6F:9B:74:C3:99:57:EE:45:CF:DE:1C:7C:CD:9D:F8:C7:17:8B:1A:FD
Certificate issuer:       /CN=66049fc9-3d05-426a-98ee-53b139a32165
Certificate serial:       010D0C9F4328584EE0C1EC667BEBC1E423908240
Authority key identifier: CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        207.45.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:ec:66:7b:eb:c1:e4:23:90:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66049fc9-3d05-426a-98ee-53b139a32165
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=b7b9fabe-50b4-44af-b39c-01196c9440ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:a6:80:77:18:ae:a5:57:96:f9:46:fd:1e:
                    55:1e:a2:8c:36:cb:75:ba:98:56:5a:74:8a:9f:b3:
                    69:e5:b4:1f:18:60:07:90:da:49:84:7b:d6:be:3c:
                    9c:c6:66:f1:13:c2:be:39:81:87:9d:f2:56:1f:9f:
                    ea:49:13:98:3f:17:dc:7d:cc:3c:46:ba:f3:00:76:
                    e2:40:c2:da:64:a0:c0:b0:95:d3:27:58:da:83:a1:
                    ab:97:96:79:36:76:1f:7e:97:70:fb:33:87:55:83:
                    c4:84:00:ec:8a:be:48:13:ce:0f:a9:89:bf:42:da:
                    cb:fd:95:39:55:b8:d8:7f:ae:9d:84:09:10:ff:6c:
                    b5:ff:ce:03:41:90:97:b1:83:56:55:2d:25:23:42:
                    2f:48:ec:2e:88:67:c8:24:aa:bb:f7:60:81:c2:b1:
                    f2:22:db:1c:d2:6b:68:49:25:49:ed:3c:04:96:8d:
                    6b:eb:a5:3e:58:46:a2:c0:1b:82:c0:68:28:01:8f:
                    ea:1c:c0:d8:b5:f0:0b:6c:e3:ef:9f:60:f4:53:86:
                    92:72:39:99:7f:6d:0a:42:71:40:28:64:a2:f3:f5:
                    0c:5c:21:0d:0e:58:ee:0b:a6:e5:95:87:38:f5:d1:
                    e0:e3:b7:47:17:75:f4:41:76:68:b7:a7:da:9c:77:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9B:74:C3:99:57:EE:45:CF:DE:1C:7C:CD:9D:F8:C7:17:8B:1A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl

            X509v3 Authority Key Identifier:
                keyid:CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.45.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1f:c6:31:a3:38:9d:ba:6c:d5:25:6d:77:50:3a:36:0e:f9:
         d7:95:65:8e:4c:01:56:4d:28:19:b7:b2:be:d9:49:cb:f9:22:
         41:f3:db:68:1a:ca:16:5e:58:13:93:f7:45:56:6f:15:03:68:
         99:48:97:7b:06:39:f3:ab:b0:ab:4f:ac:d6:61:b6:17:6e:33:
         1e:02:41:0d:50:b4:59:40:19:dd:ac:45:85:4a:2d:53:65:61:
         d4:40:4a:aa:4f:fd:9c:e2:f8:76:2d:79:ca:b7:f7:c5:46:66:
         f1:64:fc:cf:15:63:7e:cd:c2:96:ab:26:8b:8a:29:b6:8f:0f:
         db:b3:35:7a:a5:2d:45:f6:8b:35:6d:4f:04:20:46:92:0d:d0:
         11:7a:cd:68:47:43:51:1a:12:c3:ef:b2:e3:c1:ec:87:dc:a1:
         be:b2:bf:88:c8:40:ad:36:92:b7:20:24:f1:20:a7:64:e5:db:
         21:1d:f5:22:9a:45:dc:31:d6:2d:c3:04:2d:3b:74:94:1f:d6:
         5e:cf:4f:f5:3c:a8:95:2a:bb:eb:7a:a4:4b:2c:d2:e3:5a:a7:
         00:3b:60:f7:a1:1d:7c:b9:fa:74:c3:dc:6b:77:d2:43:8e:e1:
         a1:05:8a:b3:77:dc:17:c8:a3:77:d3:be:90:84:fd:72:aa:f4:
         0c:1b:86:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:02 2026 by rpki-client