Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/4950d9b3-8566-33f1-8c08-18c21931d55c.roa
File:                     4950d9b3-8566-33f1-8c08-18c21931d55c.roa (raw, json)
Hash identifier:          vci5dRvqAQTWkzNCLPQmO8aADohh2qIHlCDJ2C8+Gpk=
Subject key identifier:   FB:0E:DD:C1:C2:D1:28:3B:06:D9:69:C0:03:19:A6:A8:D3:EC:4E:9B
Certificate issuer:       /CN=37215f57-8a07-4b5a-adb9-c29a44a90e22
Certificate serial:       010D0C9F4328584EE6574078A2E83D3B6C89C200
Authority key identifier: B7:D9:6B:25:FB:4E:C5:40:E6:F9:98:D3:8A:44:69:C4:AE:37:AA:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/4950d9b3-8566-33f1-8c08-18c21931d55c.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        66.242.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:40:78:a2:e8:3d:3b:6c:89:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37215f57-8a07-4b5a-adb9-c29a44a90e22
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=7459c761-327b-4b34-8f2d-29b17969ed39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c4:bb:58:1c:8f:e5:79:9e:8c:3b:9c:25:28:
                    c4:d7:10:fa:b6:f2:0c:c0:2e:ec:91:05:0e:2e:4e:
                    e8:d3:b8:02:4a:fa:f7:e0:8d:cf:a0:6e:aa:c3:ed:
                    76:e5:e9:fe:79:3c:d2:09:9f:db:83:fc:8f:0d:bf:
                    c4:77:44:11:dd:b6:ba:85:ba:d5:93:54:50:ce:5a:
                    31:0a:af:0a:01:f2:6e:24:ce:3f:f3:57:3a:9b:3e:
                    a5:22:9c:b5:d1:6f:d0:05:31:98:1b:8d:1b:00:0d:
                    d2:59:a6:f4:f6:20:2c:ee:6f:2c:69:3c:31:a1:b9:
                    57:41:96:58:2a:82:0c:df:fd:5d:9f:9f:17:eb:8e:
                    20:d1:f6:cc:8a:f8:ef:bb:fa:62:f5:73:1b:61:cd:
                    d5:bc:00:ed:00:d2:b8:1f:3d:ca:44:be:eb:06:79:
                    b0:fd:e2:1b:de:72:1b:bc:31:0c:c7:79:01:32:2c:
                    6c:3b:dd:08:1d:b1:e5:ae:dd:25:71:cc:8c:b6:7c:
                    ee:87:9e:dd:aa:11:6e:c2:ca:eb:5e:67:b6:ab:78:
                    8a:45:ae:13:f7:45:37:be:30:36:b8:9d:6f:24:b3:
                    ab:0a:27:9c:ad:7b:d3:07:76:cf:b7:36:77:40:16:
                    ac:0d:20:b8:08:f4:10:25:3b:aa:4e:f9:70:74:b4:
                    51:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0E:DD:C1:C2:D1:28:3B:06:D9:69:C0:03:19:A6:A8:D3:EC:4E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/4950d9b3-8566-33f1-8c08-18c21931d55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D9:6B:25:FB:4E:C5:40:E6:F9:98:D3:8A:44:69:C4:AE:37:AA:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:bc:8e:92:05:eb:d0:13:02:30:af:52:6a:05:03:44:1a:60:
         ee:fd:d8:dd:27:72:69:5f:d1:6b:90:4d:10:61:c4:ba:de:55:
         e6:66:b9:f4:16:ff:98:bb:f1:03:cf:63:d8:56:04:4a:81:64:
         09:ee:b2:66:c9:19:45:56:fb:2f:47:7f:24:32:35:12:a1:c6:
         5e:2f:28:4a:67:21:79:60:56:17:b4:22:49:3f:b9:f1:e8:e8:
         72:d7:e9:4f:a5:da:7f:d0:f6:3c:cc:08:89:00:8c:d8:b8:81:
         70:0a:79:b0:2e:22:12:da:df:1a:67:c1:45:7b:8d:64:1f:fd:
         6b:75:14:26:7c:a8:26:b3:55:96:5f:80:49:54:83:54:b2:47:
         7c:ad:56:7c:0b:e9:15:b8:9e:68:c9:f7:b1:cc:c8:7d:76:c8:
         46:b3:93:20:e7:37:32:40:1a:9b:06:bb:84:57:00:31:eb:ce:
         e7:f3:91:ac:85:bd:6e:6b:b2:e7:ac:22:a4:66:69:d7:d7:12:
         5f:a4:76:c9:1b:7a:a1:5d:c7:f0:96:8e:b4:18:f7:de:34:37:
         11:4d:f5:f9:93:d4:67:4a:94:d8:0b:2e:7b:1c:78:78:7e:8e:
         ee:20:c4:2a:63:90:b9:81:68:46:45:52:c3:38:ad:e0:6a:d6:
         e2:5c:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:51 2026 by rpki-client