Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/26d5287a-2b7e-3c7f-a8c2-af23bf318442.roa
File:                     26d5287a-2b7e-3c7f-a8c2-af23bf318442.roa (raw, json)
Hash identifier:          F6EBh83OJFZNoII27NotwGhbrNo3QaKpu+BnfpSY+Po=
Subject key identifier:   BE:57:B6:44:FB:2D:9B:AF:04:7F:9A:F2:0F:0A:D7:13:FB:93:32:2C
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584EA788BA29C3FC8B30456D10C0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/26d5287a-2b7e-3c7f-a8c2-af23bf318442.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63023
IP address blocks:        66.163.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:ba:29:c3:fc:8b:30:45:6d:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5915b917-8f63-4e8c-87d7-6ad055246c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:67:83:f2:e5:1f:4f:75:0c:38:8e:d9:30:42:
                    48:5a:1f:4f:eb:25:2d:22:16:30:ea:bd:f9:c4:d9:
                    36:35:ee:ff:10:1e:7c:8c:c6:74:03:69:fe:40:f9:
                    07:81:df:0f:01:bb:65:de:6d:a4:01:35:dc:57:a5:
                    b2:96:c2:e4:1c:13:79:10:9f:ef:11:66:58:eb:9d:
                    0a:58:1a:97:45:90:bd:7a:a2:2d:c3:33:0b:16:cd:
                    43:e0:ac:a6:7c:e3:ee:44:b1:3d:92:99:c1:9a:33:
                    e8:8a:b8:d8:a7:0a:f9:37:a1:fe:77:d8:6e:d2:e5:
                    42:95:d0:c7:0c:4e:a2:69:08:95:4d:6f:81:21:5a:
                    41:fb:e2:95:18:2c:b2:9e:88:92:7e:c3:96:ec:eb:
                    5d:a7:bf:2f:39:d2:ab:e6:75:91:d9:a1:7a:02:2c:
                    f2:3a:1e:09:48:74:d5:b0:e5:83:a6:fd:0f:f6:d0:
                    be:dc:70:2b:54:8b:eb:94:70:a4:0c:03:bd:6e:8f:
                    13:c9:6b:eb:50:48:73:0e:ed:00:d6:63:4a:d6:60:
                    b5:22:8a:b1:00:2e:87:e4:d1:ec:9c:8b:a8:ab:7f:
                    12:d5:6b:79:3a:87:dc:32:de:04:f9:ec:a5:e6:55:
                    76:94:b4:be:9b:cb:4d:f5:a1:66:91:6f:50:0d:d2:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:57:B6:44:FB:2D:9B:AF:04:7F:9A:F2:0F:0A:D7:13:FB:93:32:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/26d5287a-2b7e-3c7f-a8c2-af23bf318442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d8:ff:4f:ed:c0:35:29:ba:d1:18:15:f9:4d:d0:d3:ea:c9:
         c7:d2:4a:41:cc:54:2d:4b:a7:43:5c:d8:f1:61:25:a0:76:14:
         ba:45:0b:40:46:96:b7:a5:47:b1:a6:1e:b9:93:a1:68:30:4d:
         cb:63:c7:89:dc:e5:88:a6:df:6b:ce:c0:58:bc:e7:29:0d:30:
         04:c0:12:b3:1d:32:59:74:7d:da:97:b7:eb:86:62:db:ab:4b:
         69:56:1d:9c:2c:da:1a:1c:2b:f6:a5:9a:b2:2f:a6:6e:a1:b5:
         82:0e:03:a6:cf:42:b7:08:12:2c:25:26:c2:25:5d:ec:77:ee:
         1c:e9:ef:22:66:17:88:b8:62:cb:fd:a8:5e:bb:82:eb:bd:87:
         4e:71:b8:3d:df:f8:53:d1:82:55:d5:5c:26:0d:f7:bc:d0:05:
         ae:2e:72:c8:0d:c3:07:1e:be:91:e6:be:e1:18:b5:c4:ce:d8:
         6c:40:d3:e8:c6:92:9a:c5:40:dd:bf:f8:34:09:24:49:54:2c:
         44:07:06:99:29:21:d5:59:1f:c9:9d:72:7e:87:35:89:3b:b5:
         7c:07:86:71:7a:bb:54:45:2b:b9:13:c2:ec:d3:56:07:d8:1b:
         45:f8:ec:cd:e7:3b:a0:63:03:15:02:0e:94:53:6f:69:b5:d8:
         65:a8:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:27:26 2026 by rpki-client