Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/66ed49e8-297e-3781-9811-5952a3eb5564.roa
File:                     66ed49e8-297e-3781-9811-5952a3eb5564.roa (raw, json)
Hash identifier:          EwqmWDbct+KzJRF6TtUGSjxuwG1giPxXQbjhzpayWvI=
Subject key identifier:   51:9C:81:50:AA:AD:9B:D7:16:51:CF:C5:E7:8E:EF:E5:AB:E3:0D:B0
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584EA7971ED64586D073D63CA4C0
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/66ed49e8-297e-3781-9811-5952a3eb5564.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63201
IP address blocks:        204.225.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:1e:d6:45:86:d0:73:d6:3c:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ea0236ec-293a-42b8-bb4e-8c22cbf90a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:93:04:4e:4a:22:9a:f4:11:92:f3:a1:71:
                    e6:87:65:16:9e:35:d4:31:7d:7c:a6:bc:06:b2:3b:
                    1b:14:2b:3a:cc:14:50:57:cc:64:46:5c:51:cb:b8:
                    14:ac:bf:7c:24:34:dc:98:65:1a:00:47:2d:50:40:
                    c8:2c:d0:36:05:08:ad:70:26:59:9e:bd:f2:24:c6:
                    7d:7c:6c:3b:b3:f5:88:73:2c:51:ee:d2:64:5c:95:
                    ea:c6:29:fd:28:3d:e9:34:bf:0d:ba:01:3e:8a:9e:
                    44:51:cd:80:7f:78:6c:9a:74:e0:7d:ae:ea:f5:83:
                    de:34:c5:ab:c5:83:2e:5f:c1:59:24:51:02:7b:bd:
                    f4:bf:ff:c5:08:7a:e7:ab:91:6d:57:cb:1e:3c:58:
                    50:4c:80:08:3f:f0:47:bf:5c:86:b0:17:9b:7a:c5:
                    60:05:a4:df:f8:17:73:f3:38:d8:73:6f:8e:d4:26:
                    7e:da:64:10:5d:00:08:e8:17:ca:7e:cf:84:76:ba:
                    7c:2c:22:6b:04:81:36:bd:e4:af:51:84:17:c9:55:
                    18:6c:75:21:1e:37:10:b1:a5:b4:3a:1c:bc:61:8f:
                    be:d2:01:29:e9:da:9f:ef:a0:36:73:69:38:4e:6f:
                    b2:ee:21:c5:ed:ac:ed:5a:46:0a:ad:09:55:ed:8b:
                    1a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9C:81:50:AA:AD:9B:D7:16:51:CF:C5:E7:8E:EF:E5:AB:E3:0D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/66ed49e8-297e-3781-9811-5952a3eb5564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:60:27:32:09:f2:5e:f5:eb:06:07:15:f0:e9:c0:bc:a9:52:
         e8:a8:c7:d2:97:84:10:80:09:64:f8:e6:dc:59:54:db:0e:77:
         f2:1e:ab:e1:dc:93:f8:69:d9:2e:43:b2:eb:22:75:8b:07:52:
         e6:00:9c:0a:3e:20:21:da:08:06:c1:9e:9e:e4:ab:82:6e:15:
         93:14:ee:33:3d:fe:9a:36:04:29:4a:61:9e:13:c2:1c:34:40:
         27:4e:dc:99:7d:d5:44:a7:81:02:97:e1:81:0a:d2:d1:61:1a:
         28:56:39:73:01:b7:01:b4:d5:b2:cb:39:c6:87:8c:5e:ab:53:
         6e:bf:0f:50:7a:b0:56:b0:0b:6b:9d:6c:e1:55:ad:46:28:50:
         96:a9:39:25:54:c3:87:ec:46:4f:57:55:d0:55:ad:21:6c:17:
         72:d1:07:37:8a:e6:68:07:c8:b1:97:d0:72:f8:68:b1:e4:e5:
         1a:67:82:e7:25:ee:86:59:ba:85:81:d6:27:23:da:f9:6a:52:
         fd:5e:1c:d2:46:c8:ec:ab:6f:34:74:c6:51:b3:5b:07:af:72:
         a2:5a:a6:a4:a0:01:20:84:a6:e2:3b:8e:bc:aa:6d:29:ee:f0:
         65:e2:ef:1f:1f:62:d5:8e:4f:99:e3:1d:c3:a5:5d:ca:a9:b3:
         60:e6:c7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:15:08 2026 by rpki-client