Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/a99763bc-80ad-3ee1-8b27-e9f7b8c2c97f.roa
File:                     a99763bc-80ad-3ee1-8b27-e9f7b8c2c97f.roa (raw, json)
Hash identifier:          icJhwgNTMriIqxWh6HaxQ9Sdneg3udH8Ml/kL27okC4=
Subject key identifier:   B2:77:D5:88:C5:23:09:0E:C0:D6:95:21:BB:1E:1F:55:B7:EA:92:55
Certificate issuer:       /CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a
Certificate serial:       010D0C9F4328584EED51F994C55A3216055E4200
Authority key identifier: 3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/a99763bc-80ad-3ee1-8b27-e9f7b8c2c97f.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     27602
IP address blocks:        66.171.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:f9:94:c5:5a:32:16:05:5e:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=ac504caf-8606-4b59-8703-5860beb9bffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ba:30:f9:2c:9d:17:20:0c:6b:86:ee:f7:a3:
                    29:bd:d9:f2:c7:c0:2a:48:c0:16:fb:f0:82:d9:b1:
                    a3:7d:76:16:cd:1c:4c:d9:0c:95:6b:b7:85:15:21:
                    fe:fc:f8:93:80:6d:6c:88:a6:46:92:87:0c:53:fa:
                    e0:80:33:10:db:10:30:3c:32:43:40:e1:12:2e:fc:
                    c3:1d:ad:b8:6d:53:4a:69:17:17:d7:d8:0a:bf:79:
                    bc:76:5b:02:4e:89:5e:bb:93:e4:8f:53:01:3c:b3:
                    cc:c0:f6:a8:d0:33:1c:66:0f:e3:10:b7:c3:c0:9a:
                    ac:05:78:b9:e9:af:bd:60:6c:61:c5:1e:a3:21:d4:
                    0b:c8:11:8f:16:0f:c9:d4:69:9e:8a:3a:f8:16:9f:
                    b3:bc:b4:ee:a3:66:85:0a:18:63:57:be:ff:24:de:
                    26:33:47:80:5e:bb:b8:1e:bd:b4:2a:f1:ed:d5:a6:
                    d6:9f:54:a8:19:ff:d0:50:da:35:ba:4b:4c:bf:6f:
                    25:6d:02:54:0e:e0:02:68:d1:90:0a:ee:a3:85:c8:
                    63:55:23:c7:9f:68:ea:14:1c:7b:1d:69:3d:cb:cd:
                    27:e2:c0:2c:51:aa:e8:9e:ff:41:3b:f0:ea:84:09:
                    81:01:1d:26:1d:90:b2:38:30:39:aa:cc:c5:a1:54:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:77:D5:88:C5:23:09:0E:C0:D6:95:21:BB:1E:1F:55:B7:EA:92:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/a99763bc-80ad-3ee1-8b27-e9f7b8c2c97f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:11:1f:3b:4c:25:92:aa:43:73:c9:8c:f2:74:fb:6a:de:
         57:80:32:46:7f:13:7c:96:fb:60:e0:df:6b:42:26:60:44:b6:
         a7:3b:41:ae:8b:40:f1:00:d7:0e:0d:96:56:2e:88:32:ad:69:
         0d:91:0e:23:1b:46:05:25:67:78:a8:78:27:13:d5:50:35:d7:
         47:76:b0:51:12:83:f7:c7:7d:db:f8:3c:12:7a:96:89:d9:1d:
         c4:b4:e3:d1:bc:66:d3:6f:f0:4e:dd:0d:06:fb:a4:5b:bf:9f:
         1b:65:89:18:8d:64:4a:ba:92:c8:fa:77:1d:f8:29:2a:cd:60:
         69:37:0e:f9:f5:4c:87:98:35:e2:f3:1b:95:56:5f:ea:5b:e2:
         2a:2b:8d:6e:41:e8:95:cf:27:41:de:99:47:46:3e:7d:97:99:
         3f:b1:67:76:09:c5:6b:a4:21:f0:5d:cd:5b:e7:f4:f8:d8:61:
         37:e0:b8:76:69:fb:dc:24:8e:47:31:3f:02:c1:08:a1:b5:2e:
         0a:b9:7f:67:37:ce:38:b3:c8:91:26:23:13:b6:cf:1a:0e:fa:
         b1:cf:66:e8:03:ac:55:73:d4:1c:49:24:0d:b9:f8:20:bf:33:
         2b:24:66:82:12:ab:1d:59:b2:73:c9:09:d2:ed:1d:ad:14:3a:
         3c:a3:6f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:41:56 2026 by rpki-client