Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/18c590d0-a69b-3f87-8350-c660ac5dd065.roa
File:                     18c590d0-a69b-3f87-8350-c660ac5dd065.roa (raw, json)
Hash identifier:          lxQZ7XifbuUrfKJl2MWnditrMClnh6UCBlAJ9Kv9200=
Subject key identifier:   C8:D2:FD:52:0A:28:36:FF:3E:79:9E:63:79:F2:28:74:B3:61:7B:5F
Certificate issuer:       /CN=bf895287-fee6-4682-8ac4-732f64947fe4
Certificate serial:       010D0C9F4328584EF87CB2B916BB2EDA521ED780
Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/18c590d0-a69b-3f87-8350-c660ac5dd065.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     397740
IP address blocks:        66.232.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b2:b9:16:bb:2e:da:52:1e:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=bdba5823-78c7-4909-8f20-d8ea0b7190f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:e5:55:48:02:3e:ea:63:13:42:00:30:1d:
                    9c:d4:3f:13:f2:03:63:ff:4d:56:dd:2e:7d:12:e9:
                    0a:e7:6a:02:e7:c3:0c:c7:96:cc:8a:e0:dd:4a:40:
                    3e:03:40:4f:db:b3:1c:30:6f:41:00:f0:c3:d3:0b:
                    15:1f:e0:8a:39:b5:24:a4:25:e9:a1:0b:95:9e:55:
                    a4:76:d1:d3:fb:95:ba:c1:c9:7b:61:c8:2d:68:e5:
                    a5:e3:2b:f0:d5:7e:f9:18:d1:a5:02:f4:b3:e1:1b:
                    77:64:ad:c5:9b:88:26:64:9e:88:d9:7a:49:dc:ab:
                    51:e3:36:84:15:43:2f:3d:ce:95:67:4d:2b:8c:f4:
                    57:0f:93:2d:75:91:a0:6b:fd:9b:8f:41:b2:54:a4:
                    7e:7e:e0:d0:e1:ef:b2:99:77:a1:be:08:b8:24:d3:
                    13:d9:42:7c:35:58:b2:53:a9:82:02:56:64:4d:81:
                    fa:a1:29:96:63:1d:50:8f:18:82:05:bb:21:c8:56:
                    27:9c:85:3d:4d:2a:39:7e:41:78:f0:a1:56:bb:ef:
                    e8:56:3c:eb:2a:7b:34:0d:7e:cd:18:16:0d:08:a3:
                    b3:70:ba:0b:3d:3f:2a:dc:dc:be:df:75:a9:31:fd:
                    bd:fc:c2:ff:a9:c0:ec:f6:5a:72:0c:f7:fc:bb:e0:
                    fa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D2:FD:52:0A:28:36:FF:3E:79:9E:63:79:F2:28:74:B3:61:7B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/18c590d0-a69b-3f87-8350-c660ac5dd065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:90:c3:07:1d:8b:24:19:e2:74:b2:d4:94:83:49:9a:f0:8d:
         a9:1f:e5:e5:8c:0c:db:66:9b:86:6f:2e:bd:98:28:f2:5e:85:
         d5:d2:92:ea:d7:bd:15:0c:35:8f:d0:82:11:60:20:84:32:0a:
         2c:a0:dc:5d:e3:89:9d:f1:2b:a4:f8:e1:f9:eb:b2:62:55:f4:
         e5:e6:6a:9a:3b:cf:ea:43:89:32:62:79:b6:82:ce:aa:08:ac:
         88:b4:93:40:83:aa:b1:ba:8c:79:07:81:f1:cd:7b:41:bd:b0:
         65:a4:42:6f:dd:d1:97:16:fd:54:7f:ad:98:90:5b:ac:3c:71:
         61:a9:5b:f9:32:4a:0d:22:ef:57:d8:a2:1b:b6:8a:04:1b:91:
         5d:f2:8a:2e:65:21:fb:93:d7:53:77:82:d9:9f:88:bf:76:7a:
         da:5e:68:3c:a1:31:dc:61:26:2b:73:24:28:e5:e3:55:82:0c:
         f0:a0:36:be:d3:aa:0f:32:c5:2a:12:55:9d:c5:6e:09:79:35:
         af:af:04:93:c9:c7:56:1e:e1:33:2c:97:8c:e7:de:3e:f4:2f:
         75:1f:42:1f:b9:5b:94:1a:59:b7:a6:f2:c7:04:35:63:47:a2:
         8b:83:c6:80:b8:54:9b:32:f0:c2:64:3c:8a:bb:72:40:c4:7f:
         b9:c7:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:53:56 2026 by rpki-client