Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/0eb5d7f4-1712-3ce2-a9a8-8a631f1a4c9e.roa
File:                     0eb5d7f4-1712-3ce2-a9a8-8a631f1a4c9e.roa (raw, json)
Hash identifier:          EEE2u0yY3ZmtrxfR2bgh/jlwigkOkWid/js4Z7Yx0ds=
Subject key identifier:   B9:58:BA:3F:C6:67:C3:8E:89:22:7C:E7:F3:39:3E:3D:17:09:F9:0E
Certificate issuer:       /CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
Certificate serial:       010D0C9F4328584F5678A91D0059662C0F7ECB80
Authority key identifier: 4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/0eb5d7f4-1712-3ce2-a9a8-8a631f1a4c9e.roa
Signing time:             Tue 29 Sep 2026 16:58:05 +0000
ROA not before:           Tue 29 Sep 2026 16:58:05 +0000
ROA not after:            Mon 28 Dec 2026 17:58:05 +0000
asID:                     6079
IP address blocks:        66.117.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:56:78:a9:1d:00:59:66:2c:0f:7e:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
        Validity
            Not Before: Sep 29 16:58:05 2026 GMT
            Not After : Dec 28 17:58:05 2026 GMT
        Subject: CN=1911029d-ae38-40e7-a32c-ec76182a282e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:92:6e:53:df:77:93:e0:d2:4c:d7:08:c5:
                    53:74:9c:70:10:30:7c:d5:6c:11:45:06:3c:68:93:
                    1c:fb:9b:3a:5a:a1:89:6b:3a:3a:89:78:b8:0b:a1:
                    7c:18:24:d7:7a:6b:1c:20:54:ea:4d:14:c5:18:c1:
                    47:fa:60:e6:7d:04:3d:48:a4:af:55:77:c8:6b:8e:
                    2b:7b:b6:6b:7d:69:67:4a:8e:1c:dc:9e:b6:2d:c0:
                    5a:45:f8:c3:98:cf:c9:10:75:73:30:e4:29:29:74:
                    f7:b8:98:d0:36:ab:c5:3a:06:95:bc:84:cb:16:28:
                    0a:b4:93:6b:b1:e7:62:7b:a8:d0:0a:09:eb:03:d2:
                    eb:3f:42:7f:b1:54:8c:b0:9a:ce:4b:a8:9c:05:f2:
                    e6:22:9b:50:c2:03:26:fe:38:fa:0a:9f:9c:d8:10:
                    31:d6:05:32:c7:8a:87:87:f1:a3:70:e3:0b:7f:60:
                    97:cc:d5:d1:b1:d5:de:ef:42:3c:16:7a:73:a9:77:
                    fd:9b:3c:64:b3:42:c6:2a:69:90:c8:35:8f:d4:c5:
                    c0:5e:d1:35:c2:6a:44:64:1b:6d:ca:82:a9:54:d5:
                    ba:a7:bb:ad:e8:7b:70:ab:45:75:59:3b:d3:f8:f1:
                    1f:04:81:9e:6f:18:92:4a:7d:2a:06:f0:33:9a:1d:
                    fd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:58:BA:3F:C6:67:C3:8E:89:22:7C:E7:F3:39:3E:3D:17:09:F9:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/0eb5d7f4-1712-3ce2-a9a8-8a631f1a4c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl

            X509v3 Authority Key Identifier:
                keyid:4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ac:ee:9f:9a:40:42:b8:1e:3b:61:64:af:5b:bb:52:12:63:
         38:de:fd:ec:60:5b:54:50:88:87:7e:00:68:ca:90:e8:28:69:
         54:7a:45:d6:c9:e8:d2:02:ff:98:98:2b:f6:10:84:37:ba:f2:
         bd:a4:61:fb:4f:3a:f6:8a:0e:48:dc:79:15:46:88:0a:b0:72:
         9c:91:05:d2:cb:a0:37:16:a1:68:25:da:00:48:88:6d:c5:d5:
         44:68:f3:0d:55:e1:53:08:e5:91:d1:98:7c:2c:98:38:13:00:
         ad:68:a3:65:6d:64:94:e3:d1:aa:15:90:b0:f9:15:7d:04:7b:
         cd:d0:29:84:cb:76:59:92:3c:fb:03:81:d3:52:e1:45:65:51:
         dc:60:c1:4e:9f:6c:ed:f7:ef:a8:7a:c4:af:59:50:93:5f:03:
         f6:ee:6f:5b:f5:7a:d8:3b:04:44:e3:37:f9:dc:d3:19:f0:e5:
         68:6d:bf:b9:50:c1:ff:88:1d:77:ef:fe:6b:8a:f6:f1:04:67:
         d2:91:12:71:90:96:39:3e:bf:bf:01:ff:d6:c5:bb:28:e7:22:
         18:b2:05:67:17:a5:ff:62:9f:5b:57:8e:b5:33:79:1f:fb:4b:
         46:ed:ae:4f:9f:4f:ab:cb:72:54:db:29:42:17:13:10:09:a0:
         96:f1:47:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:53 2026 by rpki-client