Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0bc7a915-1ac8-37dc-afe1-d8f8e8c70233.roa
File:                     0bc7a915-1ac8-37dc-afe1-d8f8e8c70233.roa (raw, json)
Hash identifier:          quSTv7ckM+PmbSFkAX/Kd4tco2Eaafwtp1CmwtbIFto=
Subject key identifier:   06:05:12:55:34:72:33:84:A5:3C:15:3A:F9:83:F4:35:F7:FC:36:AA
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584EA788B88742BB9BE1C80AA8E0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0bc7a915-1ac8-37dc-afe1-d8f8e8c70233.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63023
IP address blocks:        66.163.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:b8:87:42:bb:9b:e1:c8:0a:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=464b01d3-9b1f-4f1e-8491-9d18dcf9b989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4e:ab:9f:56:26:65:a5:92:d9:f7:49:ea:6b:
                    66:1c:7c:bf:ce:4d:07:cb:e9:24:7a:ae:0e:3a:d8:
                    a0:a6:36:da:9c:a8:f3:c2:43:79:75:59:f1:7c:30:
                    1a:77:2e:29:f2:b0:f8:d1:d2:2f:74:c9:35:ac:51:
                    07:fb:be:f9:65:47:ad:85:69:96:8e:fe:37:2d:63:
                    71:ed:c1:a9:9b:90:5b:bc:9d:8a:b2:a9:e7:eb:dd:
                    5f:8e:7e:ef:93:00:a4:5a:bf:82:a4:5a:78:8c:3a:
                    c7:37:67:87:c2:57:4a:36:14:02:04:15:d3:61:75:
                    52:2b:86:f5:e5:07:84:de:e3:e7:5f:49:12:29:fb:
                    e8:55:25:62:2b:aa:dc:02:17:cc:73:54:4d:74:52:
                    13:c4:c5:2b:8c:d0:2d:4c:b1:db:b3:5e:cb:53:d2:
                    53:dd:d9:2b:38:75:e5:25:71:42:2d:21:3d:cf:01:
                    21:b4:dc:50:c9:5b:c9:50:ac:5c:2e:21:ec:5a:f7:
                    e1:9e:02:a1:41:46:21:1b:71:13:2e:c7:76:80:33:
                    a7:67:1f:8f:96:8a:71:a6:c2:d3:23:19:ca:e0:5e:
                    88:aa:74:77:f0:3a:a0:e4:81:0c:dd:eb:7f:a7:ad:
                    aa:fb:50:e7:db:62:0a:11:b8:6c:26:1c:1e:71:26:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:05:12:55:34:72:33:84:A5:3C:15:3A:F9:83:F4:35:F7:FC:36:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0bc7a915-1ac8-37dc-afe1-d8f8e8c70233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:da:dc:2a:16:b6:09:11:b5:6a:0c:39:ca:a1:48:72:f3:57:
         3e:4c:9c:ce:87:7f:d2:f2:93:67:0e:01:5b:e7:6c:12:2a:6a:
         c9:36:03:40:f8:5c:96:ac:f0:eb:e8:1e:2a:17:59:4d:62:7e:
         e2:97:a0:23:b4:ef:87:e3:ca:36:c2:88:35:8c:4d:6c:79:63:
         2e:85:0b:a0:c4:8d:18:8a:01:1b:93:72:f8:bc:f2:9d:3d:b2:
         e2:24:bd:d3:b3:d6:55:64:46:f4:65:c0:80:ae:1d:b1:ca:1b:
         9f:75:43:dc:e1:df:76:31:37:9b:eb:4e:45:56:79:68:b4:72:
         9d:1c:33:1d:f5:ea:d8:ee:90:99:f8:e1:78:79:b0:73:c5:a5:
         06:ec:e4:5d:ba:3d:68:15:18:81:a8:0a:f2:41:70:10:c1:b6:
         bc:76:6e:f8:9e:47:e8:de:59:b6:4f:fb:43:f5:d2:79:75:e7:
         96:20:ac:55:ac:e8:b3:7c:79:f2:6e:c6:90:67:54:9b:2d:ca:
         97:ff:69:10:e4:1f:c3:9b:da:0e:e6:79:2e:48:b5:00:2d:c9:
         54:43:d4:85:35:f5:20:d3:91:c0:40:ce:68:5c:6f:e0:39:2e:
         02:65:6a:de:43:ba:40:ca:1c:da:e2:e2:d6:f3:32:23:50:54:
         f8:57:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:26:38 2026 by rpki-client