Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa
File:                     f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa (raw, json)
Hash identifier:          z2V1uLdcYxZz4oUiplLMtWXsBeGkHag11wfw8cDcSrQ=
Subject key identifier:   44:00:91:87:3A:2F:DF:57:D5:AA:63:56:A6:0A:EC:46:23:07:F8:F3
Certificate issuer:       /CN=66580030-eaac-4617-b624-3b0a2974a04d
Certificate serial:       010D0C9F4328584F35E7C7705A0EEBD140E0C600
Authority key identifier: 7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     26554
IP address blocks:        199.30.218.0/23 maxlen: 23
                          2607:4440:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:c7:70:5a:0e:eb:d1:40:e0:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66580030-eaac-4617-b624-3b0a2974a04d
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=82cc2668-7761-4200-addf-c801c1a2ede9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:b6:7c:ef:0c:77:b6:6d:ca:e2:7f:4c:44:
                    15:3b:5d:d7:11:5f:31:df:e8:89:05:f7:81:67:f2:
                    d5:0c:2c:24:a0:e7:e0:0b:d2:6e:d7:45:f4:4f:cd:
                    8e:aa:e2:09:ff:aa:0d:f0:bc:03:c9:37:00:20:d2:
                    c2:06:d3:de:76:c3:60:65:65:fa:73:74:96:e4:c5:
                    89:4b:70:29:86:dd:53:5a:ef:15:f2:17:b8:78:4d:
                    b3:71:1b:bb:65:3b:33:da:b7:81:87:db:1f:2c:0d:
                    fe:be:c6:c4:11:13:0b:de:d1:73:45:a9:ad:f9:04:
                    ad:6c:be:4a:25:c6:ba:cd:2b:58:32:c6:52:89:c6:
                    1d:01:02:c6:30:be:b4:b1:79:bc:37:36:f3:3d:c1:
                    4f:03:fa:a4:b1:b3:25:cb:58:5c:1e:32:c3:38:c0:
                    d6:46:46:ee:9e:4e:d3:1a:44:2a:7f:7f:60:3e:df:
                    06:bb:69:bc:f4:dd:a5:39:89:66:33:23:07:ad:0f:
                    c3:d6:3b:d2:ac:6f:63:a2:24:d9:5b:00:78:4b:5b:
                    72:af:73:a4:e3:33:30:4e:cc:9a:48:f2:74:c2:78:
                    69:fb:a6:b0:e1:61:47:67:05:9a:ef:c5:aa:0c:34:
                    91:44:1c:be:97:db:84:28:1f:82:95:42:dc:3e:c2:
                    51:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:00:91:87:3A:2F:DF:57:D5:AA:63:56:A6:0A:EC:46:23:07:F8:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl

            X509v3 Authority Key Identifier:
                keyid:7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.218.0/23
                IPv6:
                  2607:4440:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1c:7f:db:3a:04:ee:94:d1:8e:d7:6c:53:52:a7:35:65:df:
         5b:15:c3:19:55:70:63:4b:74:75:de:21:22:9f:0a:08:95:2b:
         ae:55:c7:3c:c1:c4:3c:41:0c:40:f3:4e:69:cc:ba:c0:33:26:
         8b:b3:51:f5:ad:0f:cd:54:a1:c9:62:19:67:98:ee:c3:fc:2a:
         64:6c:91:41:e2:6b:ae:82:6a:31:fa:7a:c2:51:eb:bb:ab:2c:
         4e:a4:74:36:fa:83:13:6b:f7:cb:cb:6f:c2:20:5b:33:1a:0d:
         f3:f3:7c:c1:25:bf:3c:66:b6:08:d7:b9:88:55:97:72:f9:1c:
         5b:74:a9:e6:26:b3:5a:2c:a8:80:b5:06:6f:bc:c6:6f:60:00:
         44:9b:3d:01:08:59:98:ba:92:8f:c5:aa:6f:9e:ac:22:58:c5:
         52:cd:8b:82:6f:2c:5a:67:e8:18:1c:a5:af:a5:d8:36:58:cc:
         4c:ab:54:87:95:df:c2:0e:fa:03:c1:c3:4a:fd:58:68:c6:29:
         92:38:cd:03:e8:48:a0:15:1a:7f:79:5f:13:ba:6a:3a:06:b7:
         cf:f0:b2:3d:6f:f2:7b:1b:3b:5b:ca:5c:c7:2a:a6:5d:3a:0d:
         fa:60:d4:20:48:71:0b:92:32:0f:10:07:15:cf:d5:e4:b8:09:
         71:2f:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:44:32 2026 by rpki-client