Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/ea7c5aad-bab2-3731-96b2-cdbfc3a129a7.roa
File:                     ea7c5aad-bab2-3731-96b2-cdbfc3a129a7.roa (raw, json)
Hash identifier:          H2xGUHI937Hk6YUtaV1JVZIrPsDrEEytKtiir1aLFBU=
Subject key identifier:   D9:65:A3:E8:B5:16:A2:DE:0B:D3:22:0D:E9:E0:CF:1B:34:C1:B2:33
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F4988A5E5CF0759DE24EE6B40
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/ea7c5aad-bab2-3731-96b2-cdbfc3a129a7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63023
IP address blocks:        66.163.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:a5:e5:cf:07:59:de:24:ee:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=71ae1588-ae54-4a79-a72e-64649bb505cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:89:ba:60:c3:af:4a:f7:2e:9e:ae:e3:32:
                    0e:c8:ff:eb:5f:7b:eb:89:60:2d:e5:c0:66:09:a0:
                    73:e6:df:66:99:5d:2b:da:a6:a2:bc:46:52:5b:eb:
                    73:16:b6:77:d5:14:bc:fc:92:19:9b:ac:ea:d8:a1:
                    ca:67:a5:29:23:b4:9c:51:34:62:8e:9b:8d:9a:f2:
                    0d:13:c2:c0:21:48:41:a3:c3:d9:e3:ad:45:46:2f:
                    b7:86:c5:ae:64:68:1c:64:3c:bf:8e:72:82:50:84:
                    81:b0:90:28:5e:69:d6:b6:e1:ee:28:1a:9c:ea:dd:
                    04:b3:af:26:b8:87:26:90:d2:55:91:02:df:bd:bc:
                    d5:1d:fe:4d:2f:13:86:63:4f:05:f7:23:49:8b:f6:
                    fd:ee:36:9a:7d:d9:4f:53:8f:77:45:a8:4b:f2:ad:
                    a9:d9:8f:14:f8:41:e3:77:e0:8c:b7:f8:c5:b6:c0:
                    79:cd:4e:c1:84:64:8f:93:9a:e8:61:67:f7:de:3d:
                    00:48:33:72:77:16:03:95:96:95:93:7e:c2:a4:cc:
                    5e:8f:99:94:33:68:2e:93:be:35:e2:ba:86:3a:eb:
                    aa:80:c3:7d:57:71:3d:8b:21:3c:99:4b:ac:c7:72:
                    15:1e:42:ee:d8:70:31:eb:55:de:d3:15:06:65:77:
                    7b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:65:A3:E8:B5:16:A2:DE:0B:D3:22:0D:E9:E0:CF:1B:34:C1:B2:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/ea7c5aad-bab2-3731-96b2-cdbfc3a129a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:9b:93:b6:38:14:e7:72:56:cd:62:04:49:bf:55:da:77:
         53:ba:b0:30:c9:61:7f:c9:f7:70:64:c3:55:29:24:51:8c:01:
         57:48:11:60:ae:09:06:85:66:27:66:2f:76:1b:86:29:05:09:
         dc:40:ff:10:ca:28:ed:ab:ec:55:64:0b:29:cf:e6:28:1a:1b:
         1d:95:76:5f:f5:d8:42:06:aa:54:1a:09:43:56:3e:83:89:d1:
         81:e4:89:d5:c0:02:ef:01:43:6f:63:46:d5:fa:89:86:aa:ef:
         b3:98:4d:b9:ce:7b:ba:e1:bf:72:59:53:2a:be:10:3c:47:ca:
         eb:e8:74:e6:b3:9b:3b:9d:d7:71:d1:70:24:ce:99:64:a4:37:
         3e:66:c0:d1:75:a2:de:9a:92:9e:4c:90:05:0d:b4:61:b1:f7:
         f2:79:83:98:0a:d5:e3:2d:b9:e1:d1:a2:9f:cc:04:d4:68:99:
         11:5b:99:9a:00:3d:3b:ef:eb:1e:8a:da:2a:c1:98:43:96:70:
         a9:74:e7:7d:27:a0:eb:59:ce:0e:27:97:8c:6b:ef:81:8d:ce:
         3b:2c:a9:ac:8f:8b:21:e7:bf:49:18:3d:a1:ad:b5:43:73:8b:
         6b:1f:e1:74:27:d9:26:05:64:1a:5b:5e:26:55:9f:2f:17:2d:
         89:c0:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:26:40 2026 by rpki-client