Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83bdb1-fdeb-3da3-8810-9ffdcd3989cd.roa
File:                     dd83bdb1-fdeb-3da3-8810-9ffdcd3989cd.roa (raw, json)
Hash identifier:          /chNmFsVvATKMDjBKfb0ykFeALe6YtkjOAOnUmtZKxk=
Subject key identifier:   4E:96:47:CE:C4:2D:25:84:64:44:A2:DE:99:B2:66:1E:B0:E7:62:6A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EE7BC94444AD2E2C9749F3A00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83bdb1-fdeb-3da3-8810-9ffdcd3989cd.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        66.95.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:94:44:4a:d2:e2:c9:74:9f:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=54ba87a6-2262-443a-b35a-8d055da3ffc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:73:de:7d:b4:96:b9:b4:b1:6e:d2:b0:05:66:
                    41:00:03:99:51:f8:50:da:00:1c:e3:38:86:f5:aa:
                    54:70:53:91:63:96:70:1e:f9:2f:9d:ae:88:db:28:
                    48:b6:6c:1e:cb:65:2e:eb:b2:06:b9:54:33:b9:ca:
                    f8:a0:25:9f:6a:2f:13:ee:4c:d3:a4:0c:a2:7b:16:
                    36:8c:64:f2:bc:9d:35:a5:43:a9:c9:b7:a1:32:ba:
                    c8:00:a8:ac:0e:6b:60:fe:15:36:1c:6a:68:31:d9:
                    5f:7e:75:e4:27:c9:5e:96:09:2d:5f:ea:13:14:23:
                    e8:00:fe:f4:ce:b3:ef:55:78:32:6b:0d:2b:9d:90:
                    4c:fa:11:3a:f7:48:c2:48:bc:02:68:81:58:07:e0:
                    31:1a:82:1f:f8:5b:ad:dc:71:1d:c8:bf:0e:10:95:
                    c0:68:ff:7e:ca:68:4d:03:33:2c:f5:5b:0f:2b:11:
                    5c:5e:dd:e1:19:b0:d7:65:45:26:4f:b2:e2:70:b9:
                    99:4a:90:34:e5:9f:08:d6:95:4b:7c:f7:c2:62:41:
                    d0:42:39:b9:a3:25:0a:00:1b:59:a1:d7:70:4d:43:
                    1c:01:1a:fa:d0:7a:32:ff:39:ad:7c:74:55:30:cf:
                    20:68:02:1b:c5:7b:9e:ab:e5:ed:ac:bd:d6:11:37:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:96:47:CE:C4:2D:25:84:64:44:A2:DE:99:B2:66:1E:B0:E7:62:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83bdb1-fdeb-3da3-8810-9ffdcd3989cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.95.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:8e:b2:15:34:f1:b8:98:70:ed:9d:e2:d8:ff:92:4d:f7:d2:
         ba:28:26:ee:0b:08:0e:c4:82:9d:e7:c5:ea:c3:cf:4d:17:77:
         c2:81:a2:c4:b8:7d:19:c7:92:7e:6d:5b:48:d0:f9:c6:b2:bf:
         38:50:f5:d7:a3:f8:33:1c:49:fa:7a:8b:69:90:dc:81:f5:b0:
         af:4f:2d:1d:6b:a9:fb:8a:87:4d:67:fe:da:cb:cc:90:b1:dc:
         0f:db:90:f8:dd:89:a0:c0:78:d0:3c:ae:40:94:13:59:93:c5:
         46:c6:7c:b0:dd:74:26:fd:a2:31:65:4c:45:b2:73:c6:e2:b7:
         3a:bc:6e:bf:97:2c:09:d2:8b:71:df:ed:7f:b2:a6:19:8a:f0:
         5c:ee:3d:ec:03:10:39:a4:64:70:96:5e:4a:65:12:c6:ad:ac:
         cd:b2:44:cb:29:c9:da:16:a8:bd:50:c2:6a:de:30:21:a7:83:
         63:70:4c:63:da:29:4f:cf:d1:5c:37:02:a5:58:df:ed:94:15:
         d9:11:9c:0f:4c:81:26:8a:e3:40:1c:11:87:76:23:11:bc:25:
         79:91:aa:d2:90:18:04:b2:54:4f:71:c3:62:e5:c7:96:b6:75:
         76:41:59:aa:c1:07:82:1e:63:ec:9b:48:f5:c4:c7:17:26:ce:
         aa:dc:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:15:21 2026 by rpki-client