Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/1e8d73d5-4772-3e5b-bad4-433a3b2ec81b.roa
File:                     1e8d73d5-4772-3e5b-bad4-433a3b2ec81b.roa (raw, json)
Hash identifier:          7zKKxkmFX802uFcbFwvEtF4AzQrqEnLbGQZz8zY8PsU=
Subject key identifier:   B8:79:E6:86:AE:32:73:47:B4:EE:75:DA:65:18:3A:12:7C:39:2B:45
Certificate issuer:       /CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
Certificate serial:       010D0C9F4328584EBA4D7DD63FDE1FE196FF7100
Authority key identifier: 4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/1e8d73d5-4772-3e5b-bad4-433a3b2ec81b.roa
Signing time:             Tue 04 Aug 2026 18:25:00 +0000
ROA not before:           Tue 04 Aug 2026 18:25:00 +0000
ROA not after:            Mon 02 Nov 2026 19:25:00 +0000
asID:                     401322
IP address blocks:        66.117.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:4d:7d:d6:3f:de:1f:e1:96:ff:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
        Validity
            Not Before: Aug  4 18:25:00 2026 GMT
            Not After : Nov  2 19:25:00 2026 GMT
        Subject: CN=526fb834-c77b-4776-ba9f-f50eb7cbd10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:9d:83:11:78:47:e8:a3:fd:01:ef:6a:50:
                    6f:06:95:f2:6b:0e:a9:81:6c:af:f4:34:75:22:a1:
                    91:73:08:81:ce:69:67:68:91:aa:ab:15:b9:d4:07:
                    dd:f2:86:ac:3c:63:09:da:a7:9a:47:09:52:b9:d3:
                    60:35:9f:40:e5:70:85:df:c0:44:0d:3e:6f:8a:ec:
                    b7:7f:c2:71:02:d6:9e:c2:43:ef:14:77:fb:5d:19:
                    5b:71:de:0c:13:57:d9:f5:40:94:45:3a:be:f0:0a:
                    28:2f:2b:73:de:e6:bf:e1:02:6c:1d:6e:df:a9:24:
                    eb:c0:ad:99:df:05:01:cd:69:82:89:20:a4:79:3e:
                    9d:d9:e1:33:51:46:6e:69:e8:6f:ae:a5:7a:e2:93:
                    28:7c:34:8c:d7:22:74:ba:69:79:d4:46:17:bc:ac:
                    17:a1:06:91:d5:94:0b:e2:68:e4:04:79:03:b1:70:
                    4b:fa:2a:c4:7d:dc:64:78:e1:41:dd:da:e5:4b:bf:
                    33:7b:2e:5c:f3:cd:33:dc:44:5b:96:28:ff:b9:7a:
                    76:b9:0c:b3:b2:e0:cf:1c:e1:2e:1c:da:f1:a4:4a:
                    cd:fb:ae:86:5a:f8:ae:7d:57:80:11:c3:11:70:a7:
                    66:4b:c6:b4:bf:33:4d:52:4b:cd:02:2b:18:70:f4:
                    e2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:79:E6:86:AE:32:73:47:B4:EE:75:DA:65:18:3A:12:7C:39:2B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/1e8d73d5-4772-3e5b-bad4-433a3b2ec81b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl

            X509v3 Authority Key Identifier:
                keyid:4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:34:77:c1:45:ed:41:c5:bd:6f:4c:6c:e9:6a:d8:c3:c5:39:
         60:ce:3e:ff:47:13:5a:50:4c:ac:7c:30:15:61:5b:07:47:54:
         7d:28:fe:1a:64:27:f0:22:18:11:3e:3b:64:ef:fd:6b:4d:77:
         33:a8:a3:b7:0a:30:d7:03:e6:fc:38:c2:44:fc:a5:0c:c2:2e:
         5b:15:ee:ec:ac:96:58:4b:b9:4d:10:89:a1:27:0b:b3:72:45:
         e1:75:dd:d2:21:7b:7a:a2:fd:b1:35:b1:e8:9a:ea:b3:17:00:
         97:bf:11:ef:e6:d6:33:fd:55:45:e8:15:54:b4:34:55:11:7a:
         fc:a8:5a:e1:c7:23:6a:0a:2e:78:f1:fc:91:fc:ba:91:92:8b:
         79:39:c0:a5:d2:a8:9c:86:89:24:93:1f:2f:2b:78:56:b4:53:
         59:bc:e9:ad:b1:36:55:b2:74:f8:33:c3:4c:44:6d:8e:39:04:
         fe:f9:48:56:c6:64:e4:4c:ee:50:d6:fe:6d:d7:8e:33:39:65:
         0e:12:dd:90:cc:d4:bc:17:7b:c2:b4:cb:3e:d0:e2:dc:4e:84:
         94:7b:33:f5:de:c1:cf:97:dc:3c:58:a8:4e:c0:99:8f:b1:98:
         5b:24:da:5c:88:f2:88:80:31:90:8d:6d:03:4d:ad:a2:6f:66:
         61:ea:1c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 16:19:53 2026 by rpki-client