Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/8dbd80b5-5760-364a-9aa7-dad68a442f8d.roa
File:                     8dbd80b5-5760-364a-9aa7-dad68a442f8d.roa (raw, json)
Hash identifier:          HRLkR2STNsy/6gx0Ybsw6Ru/bqSh8vmjuo4Avl/+k0s=
Subject key identifier:   92:35:AA:81:70:13:A5:1C:D1:AD:9B:4A:E1:C9:63:A4:DA:E6:BA:D6
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584EE0C1EBD5C3C5EEF174FC2BC0
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/8dbd80b5-5760-364a-9aa7-dad68a442f8d.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        66.22.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:eb:d5:c3:c5:ee:f1:74:fc:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=f1fc6e77-64de-4abe-b495-06aebfeb0bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:63:0f:ab:c6:55:d6:4d:76:1b:90:e8:21:36:
                    d2:1d:a2:5f:fd:2b:11:68:16:f7:9c:10:6f:33:21:
                    bc:0c:6c:9d:50:70:bb:ac:45:12:77:3c:19:0d:1f:
                    40:21:d1:81:e2:78:2e:4e:fb:84:e0:42:02:e1:02:
                    6e:03:7e:81:9b:15:8c:4e:52:b2:2f:e3:37:d0:fa:
                    c3:a8:d6:f2:5c:00:e7:7b:27:ab:60:bc:a9:16:14:
                    b3:49:33:55:c3:0c:c9:17:f3:cd:ec:41:88:62:a4:
                    8b:19:2f:78:3a:2f:b0:8a:8b:fa:d5:5c:65:99:6a:
                    05:8a:99:08:26:c4:df:e8:4b:84:5a:42:71:8f:c1:
                    af:51:4c:5c:1d:67:a4:af:6b:ad:72:af:88:3c:32:
                    b3:f3:53:68:58:b4:0d:5f:02:b6:b0:f6:14:36:0f:
                    40:5a:0b:e1:57:17:95:0d:24:12:a2:ec:18:2f:b6:
                    35:0b:1e:77:9c:0e:e7:8c:7a:34:0a:b7:c4:1d:23:
                    b8:ee:e6:80:ee:8f:fa:21:dc:e6:64:2f:c6:49:9e:
                    8a:41:8c:1c:f0:33:c6:49:e9:74:3e:ce:bb:35:b1:
                    71:1e:93:26:a7:53:33:ea:df:fc:fc:b2:39:a2:ae:
                    24:60:e8:39:00:b7:47:b6:32:12:1d:60:ce:2a:42:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:35:AA:81:70:13:A5:1C:D1:AD:9B:4A:E1:C9:63:A4:DA:E6:BA:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/8dbd80b5-5760-364a-9aa7-dad68a442f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:14:51:98:cf:6f:91:fd:5d:95:c1:c3:59:83:0d:2a:dd:67:
         77:4d:c8:63:f2:ac:3f:37:a7:a8:79:20:b1:1a:03:ba:51:94:
         2a:77:b5:5d:ef:d2:58:0f:2c:cf:9d:26:8e:35:1b:7f:ab:52:
         f7:f2:e5:e5:8a:24:ee:24:9e:d1:82:0d:ef:46:c5:34:ff:36:
         1f:37:48:04:81:69:78:5d:40:28:84:cd:5f:08:75:26:dc:bf:
         0c:24:e1:69:fe:a4:1b:a7:a5:27:ff:88:2d:78:13:ff:a1:e8:
         00:18:9f:e3:a6:e6:58:66:d9:10:e6:2a:40:09:d6:e8:2b:31:
         df:7d:e0:84:4a:fa:14:10:17:52:87:7d:e4:1b:ed:01:30:36:
         0c:1b:5b:6f:cb:1f:b7:6b:60:91:35:16:17:53:db:cb:48:ea:
         00:da:7d:1f:cc:f3:61:9d:af:3d:b7:de:7c:36:40:e1:00:41:
         27:7f:92:e3:ee:32:8d:ae:82:74:c5:49:ea:90:1a:1b:a9:37:
         6f:e8:5b:af:bf:61:c9:e3:fe:37:34:9d:66:09:41:ed:f5:91:
         d1:f5:1e:7b:b2:97:6e:ee:26:8b:5e:32:76:6f:8b:59:bd:ed:
         ea:09:fc:a3:4b:ae:9f:73:9b:95:1e:7d:bb:33:b5:5e:d9:77:
         62:a5:21:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:47 2026 by rpki-client