Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/13507b9e-9ad9-331b-b86c-5ca18641ddd0.roa
File:                     13507b9e-9ad9-331b-b86c-5ca18641ddd0.roa (raw, json)
Hash identifier:          GPzrHo/dQz/2BcJoxCu48I0bB6XFKPkVl5Oi+x82xjI=
Subject key identifier:   DE:82:82:3F:48:CC:7C:85:B0:BC:C9:68:12:0B:2B:38:55:66:24:60
Certificate issuer:       /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial:       010D0C9F4328584EF7175BE5AFFEFA0488E5B5E8
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/13507b9e-9ad9-331b-b86c-5ca18641ddd0.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     7859
IP address blocks:        66.39.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:5b:e5:af:fe:fa:04:88:e5:b5:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=bdac4f88-d254-4a3f-b6c3-ce4748a5bd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:eb:35:a3:cc:b8:c5:4b:a1:9a:79:00:b1:
                    1e:82:06:88:34:ec:e9:6d:79:a7:d6:2b:5d:53:37:
                    ff:63:6e:15:97:56:3f:5e:46:fa:ee:08:68:61:06:
                    48:19:9b:6a:a6:47:3d:2c:bb:4c:18:85:e4:5a:90:
                    7b:24:b7:fa:b7:bb:ca:8e:a1:69:d0:14:ff:01:55:
                    c4:1d:45:61:06:2d:f6:eb:58:3a:a0:ce:7c:5b:69:
                    81:a0:c1:b7:64:c6:d5:f3:14:83:11:40:2c:0c:ce:
                    d8:20:43:14:b7:77:bd:2f:c8:d5:4b:6b:5d:29:f6:
                    45:19:a3:ac:f9:ad:05:ce:80:46:4c:bb:a6:ed:4e:
                    1d:e9:db:74:44:0b:b6:a1:a2:22:6b:4b:59:f1:6c:
                    5b:c7:73:16:fc:38:b8:3d:83:74:54:6f:ba:5b:dd:
                    96:2f:28:88:f5:c5:64:0e:f7:6d:9f:8d:e9:4f:3e:
                    3a:e3:9c:91:da:18:d9:52:46:b8:3d:d9:ad:3f:b3:
                    71:29:08:2c:c7:7f:17:a6:d2:b9:2b:a0:bb:c6:af:
                    79:57:0a:4a:e0:f6:a5:ce:d0:4b:a0:f2:a4:4a:dc:
                    b3:4a:66:ee:c5:9d:f4:97:61:13:82:51:36:1e:fc:
                    f0:1b:92:ac:15:f2:88:5e:65:f7:34:8d:43:ed:f0:
                    03:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:82:82:3F:48:CC:7C:85:B0:BC:C9:68:12:0B:2B:38:55:66:24:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/13507b9e-9ad9-331b-b86c-5ca18641ddd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl

            X509v3 Authority Key Identifier:
                keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:e0:c2:e5:9a:29:e5:f8:86:65:e3:39:6e:bc:50:f6:11:
         e6:52:20:93:27:d0:f4:3c:dc:94:95:f6:68:99:d7:a5:77:9f:
         39:38:b7:8d:3c:4c:6b:6f:5c:eb:3e:32:5b:52:b5:57:45:db:
         4e:04:23:8b:23:08:37:4a:98:5c:97:ec:88:f7:8d:fa:60:7c:
         de:57:ce:33:e8:28:1c:e9:9b:48:cb:ec:a6:4d:cd:06:61:12:
         c2:b3:ed:fc:4a:d6:27:40:b1:07:f3:c8:a5:52:37:ef:04:86:
         ab:92:b1:7a:5b:ca:ab:44:3d:9c:f4:fa:95:67:42:10:d2:4d:
         91:d7:fb:5a:90:1e:8b:8a:dc:c5:b8:a9:0d:a5:5f:04:c0:6d:
         57:93:a5:23:cb:78:ee:18:20:56:4d:19:59:d3:55:9b:68:a7:
         40:a4:44:25:ab:11:9d:11:72:94:54:27:44:d6:60:d6:f8:5f:
         13:12:93:17:6f:87:fa:00:a1:e9:4c:92:00:9e:1e:57:b7:f1:
         b5:ec:d0:d1:6d:72:2e:9b:53:96:fb:07:58:79:83:2e:ac:18:
         0e:b3:71:63:64:a4:44:3b:82:3e:26:71:9f:88:2f:c1:ce:6b:
         0f:e8:4f:e6:50:47:4e:a1:b8:88:37:fd:65:a8:33:5c:9b:52:
         f7:7d:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:59:07 2026 by rpki-client