Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa
File:                     9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa (raw, json)
Hash identifier:          przf0kEumfrEewWLRXRc2XvAiZVWLYXMpWU8z6f7H94=
Subject key identifier:   75:27:C7:17:FF:18:0D:CA:D6:EF:23:A3:6A:EB:2E:2F:98:6C:F9:50
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F4328584EBDDC5E096AAC543BDE5D3880
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     400610
IP address blocks:        66.219.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:5e:09:6a:ac:54:3b:de:5d:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=105cfbdd-ebe5-4aab-b988-813f286e94ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1c:b7:ed:ce:ce:ca:ed:a8:77:f5:8b:bd:3c:
                    dd:41:6c:82:a7:37:6b:14:d0:48:84:c6:a2:c4:3d:
                    45:20:17:de:90:dd:ad:4d:6a:13:7c:71:f3:7a:ea:
                    15:9b:b4:7e:0e:03:2b:54:e2:8b:4f:79:94:a4:2b:
                    42:9a:a4:e9:d0:a6:52:3b:4c:5d:9b:80:56:a3:22:
                    cf:60:b8:09:49:1b:b7:41:62:63:85:43:d4:b1:c0:
                    81:9f:08:f6:fd:a6:03:68:03:6a:31:16:fa:52:f2:
                    27:ca:93:04:42:fd:68:3b:c5:32:2b:fd:da:d6:22:
                    f8:7f:c5:98:ff:63:96:0d:e6:7e:7a:ce:5f:0e:2b:
                    e0:7d:7f:43:4e:19:ff:e1:11:2c:ec:f9:1b:87:99:
                    6a:08:1b:18:fe:6a:29:23:85:02:2e:77:a1:10:9e:
                    87:f8:fe:a4:c6:19:98:3f:62:83:3d:65:e1:0c:93:
                    07:c2:0e:61:bc:35:1d:a3:c9:f4:46:0c:97:3b:b1:
                    a7:90:75:e6:00:f0:e1:ab:59:51:9f:c6:60:b7:1e:
                    55:6e:3f:8d:a1:ae:8a:03:87:31:51:c4:17:ff:ec:
                    f2:52:28:dd:f4:77:aa:45:68:f5:69:5b:95:f6:6b:
                    26:2c:f9:32:ff:35:a6:e3:f9:93:94:df:1e:b7:49:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:C7:17:FF:18:0D:CA:D6:EF:23:A3:6A:EB:2E:2F:98:6C:F9:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:82:1e:c7:4c:32:64:09:f5:58:f5:d9:80:3f:80:66:9a:51:
         69:f9:61:df:11:79:4f:de:43:6d:65:a0:9c:6d:a3:8b:45:3c:
         5a:04:61:d9:5b:67:e5:29:86:a5:78:f5:7f:0f:53:04:61:16:
         c6:57:d0:95:b3:19:5e:af:f2:89:e0:65:ec:d3:5e:5d:31:3c:
         4a:23:ec:ff:51:7f:73:af:52:4b:b8:1a:98:48:09:00:74:33:
         ed:22:b6:e9:20:65:d7:ae:23:01:7d:2e:b5:75:c9:a1:d2:0b:
         bf:61:51:f8:21:5c:00:98:99:cd:0f:77:54:c7:56:b2:bb:6a:
         b6:07:3d:62:41:be:37:9e:70:36:12:0c:67:b9:6c:8a:96:f3:
         08:46:35:b2:85:88:b3:5f:7e:d0:4e:90:df:6d:2a:c7:cb:ea:
         eb:7a:a6:8a:59:fd:b2:a8:c9:36:7d:55:37:cc:24:f7:26:46:
         bd:17:c2:83:bb:67:5d:02:fc:a6:a3:c7:35:5f:ba:90:94:ea:
         04:a1:20:e7:84:54:90:0d:9f:3e:a3:0b:c4:8d:6f:07:c4:a7:
         4b:73:21:8b:23:dd:5c:70:db:8b:0d:63:7e:ce:89:5b:5d:d2:
         97:63:30:ce:d4:03:f1:02:81:6e:f6:59:c2:be:fb:d1:f4:a2:
         85:ca:6a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:58:50 2026 by rpki-client