Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/41de00c9-537e-3dad-b5c6-633d840612f6.roa
File:                     41de00c9-537e-3dad-b5c6-633d840612f6.roa (raw, json)
Hash identifier:          VPSbBMvVP3qFj+oYTf8gQNgiZNVcmEmy2OsTnUlaQus=
Subject key identifier:   67:72:F8:41:4F:64:85:97:48:5D:D4:70:C0:89:8F:EF:11:B7:62:49
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F10379BBAB581EB46ABAC92C0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/41de00c9-537e-3dad-b5c6-633d840612f6.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     62563
IP address blocks:        66.163.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9b:ba:b5:81:eb:46:ab:ac:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=1d50a93d-ac6c-4787-97b1-858eafeb57b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:f0:dd:7c:a3:d5:ce:0e:ca:52:8e:56:1d:
                    31:3b:f8:a2:78:e5:6c:2d:38:82:d4:6c:e8:4f:6e:
                    b0:a9:91:74:df:58:50:a2:43:24:2f:94:56:46:54:
                    31:4c:dd:ea:eb:c9:b5:ef:19:89:a1:87:ac:5e:01:
                    db:d7:b6:e1:ff:7d:04:b2:8c:f9:33:1e:1b:9d:0c:
                    8d:53:5b:d3:60:77:20:ac:4e:35:92:2e:c0:93:bc:
                    b7:06:4b:25:dc:27:34:f7:cd:f4:d2:90:c1:9e:89:
                    2b:a2:40:ab:00:e0:9d:36:8d:a9:4d:be:f3:5c:6e:
                    93:7a:c3:5b:10:80:f7:b0:44:bb:d5:4b:06:91:cb:
                    25:81:e8:e6:68:51:f5:d2:e6:44:43:d1:11:4d:a4:
                    ae:62:65:cf:b9:9c:ae:67:f0:b0:89:52:24:c3:06:
                    bb:79:7f:93:34:f4:a0:75:2f:20:bc:07:9d:5b:a6:
                    ce:4d:d0:ff:ef:db:50:36:ff:05:df:fe:c2:1b:cf:
                    d3:ce:03:98:b4:cb:46:71:3f:0c:d5:e0:05:40:90:
                    11:57:af:a0:98:dc:3b:86:ea:2e:92:15:8b:d2:10:
                    65:35:35:7f:79:32:c9:82:91:7d:fc:3c:8f:c5:4f:
                    f0:82:03:ce:15:93:ed:1a:dc:63:70:c3:eb:d1:93:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:72:F8:41:4F:64:85:97:48:5D:D4:70:C0:89:8F:EF:11:B7:62:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/41de00c9-537e-3dad-b5c6-633d840612f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d6:31:a8:3e:d9:4b:3a:3b:fa:f9:2a:df:c3:51:02:49:c6:
         a4:ce:1c:4c:38:97:0e:a3:3a:3f:2c:ba:48:ed:29:88:2b:1c:
         15:cb:91:e4:0b:1f:fc:af:62:a4:e2:25:02:bd:d0:b9:d2:5c:
         2e:3f:68:dd:93:24:c4:9f:d9:10:72:ca:db:3e:86:e2:58:d9:
         98:78:7c:99:b4:4d:6b:ed:39:8a:51:0d:ad:4f:af:0d:9b:85:
         d0:e6:b7:21:d5:6e:fd:d2:ec:cc:00:6c:db:9c:62:d5:d7:6b:
         a6:e1:95:42:a1:53:8f:13:1a:ed:1c:bc:cd:10:f1:81:bb:39:
         dd:b9:39:24:50:b2:27:44:11:5b:e5:93:c2:e7:b7:e2:25:02:
         8f:34:c9:e2:2d:8e:cf:d5:70:4f:00:da:18:21:5b:7f:8d:6e:
         88:ec:46:ac:da:d3:75:90:23:6e:db:1a:95:c0:35:5e:8e:b1:
         8b:b7:e7:ab:15:b7:f8:0d:7b:f7:be:7a:26:84:ee:a1:63:c6:
         54:2d:4b:62:30:89:14:bf:67:81:fd:25:d0:83:73:01:70:f1:
         65:80:c1:df:fe:96:d4:d9:55:be:7c:2e:ed:24:7f:6f:66:41:
         f3:f8:9a:a2:4d:02:fd:29:d9:56:68:da:03:ed:40:c0:22:9b:
         8e:9c:d7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:31:21 2026 by rpki-client