Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/c93fb15c-70a2-3a27-9e7a-1286367328ab.roa
File:                     c93fb15c-70a2-3a27-9e7a-1286367328ab.roa (raw, json)
Hash identifier:          pYRI6RRkXEJFOrVERUqghRaogEKyojc/KGRkPCKKWVk=
Subject key identifier:   FF:3F:AF:AB:16:C9:58:5F:EF:99:AF:F4:13:7C:B3:3C:2B:E4:6F:7E
Certificate issuer:       /CN=bf895287-fee6-4682-8ac4-732f64947fe4
Certificate serial:       010D0C9F4328584E6C7FB7759AF6EC96D0A51E00
Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/c93fb15c-70a2-3a27-9e7a-1286367328ab.roa
Signing time:             Tue 07 Jul 2026 21:33:09 +0000
ROA not before:           Tue 07 Jul 2026 21:33:09 +0000
ROA not after:            Mon 05 Oct 2026 21:33:09 +0000
asID:                     19218
IP address blocks:        66.232.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:7f:b7:75:9a:f6:ec:96:d0:a5:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4
        Validity
            Not Before: Jul  7 21:33:09 2026 GMT
            Not After : Oct  5 21:33:09 2026 GMT
        Subject: CN=1d5dde2d-ca36-45ef-9dc7-e12fef390c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:00:e3:fd:aa:f5:51:79:48:e3:b1:56:95:2e:
                    88:d4:e7:35:73:bf:30:92:0c:12:77:2d:77:2e:bf:
                    ac:86:ca:e2:5d:ae:bc:c1:3f:f7:c7:b3:be:96:af:
                    e4:7f:e7:34:0e:4f:85:22:2a:d8:e0:88:1b:82:40:
                    3d:bc:b1:bc:c4:b6:33:eb:72:6f:9b:18:27:12:6c:
                    8a:d4:8a:3c:e7:0c:bd:85:7a:6e:8c:5c:11:84:d0:
                    6e:11:58:f5:f9:e2:1a:bc:d0:1b:c5:96:c0:3d:c0:
                    e4:ec:cd:66:28:d9:83:b5:5e:8c:ee:de:08:12:b9:
                    9e:f1:3f:b2:ed:de:7d:7f:1a:d5:9b:a3:ab:93:11:
                    cc:9a:dd:70:47:c0:69:b2:fb:12:f8:57:ad:78:64:
                    53:c2:28:e5:a6:aa:df:bc:b6:a7:9d:19:b0:79:22:
                    4b:14:2c:a0:9f:a1:f6:51:f1:6e:f2:f8:51:7d:65:
                    72:27:9d:80:8a:88:2e:5f:24:05:ae:ab:a7:47:b4:
                    54:ab:48:b0:29:52:3b:e3:45:40:1b:89:b7:8d:9f:
                    e5:8f:e7:bb:9a:89:e5:dc:c8:73:ca:30:d3:d3:77:
                    bc:84:4b:5c:3b:c6:01:a4:d8:f5:49:83:11:55:c2:
                    9a:a7:9a:31:16:b8:e5:af:cb:03:07:ba:a3:fe:05:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3F:AF:AB:16:C9:58:5F:EF:99:AF:F4:13:7C:B3:3C:2B:E4:6F:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/c93fb15c-70a2-3a27-9e7a-1286367328ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:06:4f:1c:0d:00:1a:a7:09:e9:04:c4:30:1e:1f:dc:50:
         c4:3a:c8:1d:b9:a1:09:47:52:a8:a0:09:9a:c5:d9:d0:36:22:
         68:8d:3e:26:16:c2:93:eb:4a:2f:9a:ca:e6:31:a4:3b:4d:5e:
         e4:b5:bf:d3:17:93:73:0f:16:68:47:82:e4:37:8d:51:d7:9b:
         59:17:6f:d6:13:e6:39:e0:3b:14:e6:23:b5:b4:65:63:ec:2a:
         b0:6c:8d:d4:b3:8e:0a:ea:74:f9:ea:07:00:79:92:4e:ef:ba:
         b0:1d:63:ee:fb:8d:50:8d:1f:b6:04:60:d1:e9:c4:92:4c:8f:
         e4:d2:0d:f5:c8:16:01:cb:18:ed:85:48:80:ad:bb:85:18:32:
         f4:af:9d:4b:4a:bf:87:7a:2c:a4:0b:be:58:0d:45:a1:a9:fb:
         06:9b:64:d3:66:1b:2c:b2:65:42:72:c5:1e:f8:53:fc:45:54:
         00:84:1b:ae:ba:e8:6a:0a:06:4c:1f:cd:46:fb:6a:87:72:76:
         68:3e:4e:4f:d9:07:9d:9d:04:4e:6c:24:69:9a:de:42:1d:c2:
         56:65:fd:5e:04:e6:ff:4d:fe:68:22:ca:e9:b0:cc:ee:02:f0:
         09:c4:db:bf:46:3a:57:5a:16:a0:35:2b:81:7d:bc:74:7b:3d:
         d6:e4:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 01:14:59 2026 by rpki-client