Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/e087b381-33b1-3a90-983a-397b8bc2fc0e.roa
File:                     e087b381-33b1-3a90-983a-397b8bc2fc0e.roa (raw, json)
Hash identifier:          +qDgpIkev09+YaH6dsXE/M8jZgos0qIMzqpP1dcW7Bo=
Subject key identifier:   71:03:4E:2D:DC:0F:EB:D9:41:F1:13:E4:54:72:76:55:66:6C:5B:81
Certificate issuer:       /CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
Certificate serial:       010D0C9F4328584F4988DCC4C139DF73AA94DA80
Authority key identifier: DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/e087b381-33b1-3a90-983a-397b8bc2fc0e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        66.45.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:dc:c4:c1:39:df:73:aa:94:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=05aa167d-d901-41f8-8d57-06dda1760c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:70:e0:92:d4:e6:72:0c:89:65:fc:da:f3:
                    26:9c:54:2a:1d:32:67:a2:b9:f6:f6:c4:ab:ad:65:
                    c2:7c:f2:bf:f5:28:15:c5:3c:ab:3f:a0:46:30:ed:
                    c5:ae:12:a4:80:b4:b2:3e:e2:a3:ea:42:e9:2c:dc:
                    1c:08:9b:9f:6f:75:5b:b7:cc:1b:79:79:f9:91:a5:
                    b7:9c:4e:de:72:07:8e:90:d6:a1:f5:3a:34:7f:b2:
                    8b:3f:15:8c:ab:26:0d:f6:6c:dc:92:b1:10:78:88:
                    1e:9f:62:66:95:22:f8:b9:c6:62:70:cc:25:7e:b7:
                    16:6a:9c:eb:4c:b8:f5:60:61:1b:3a:72:ef:68:60:
                    66:60:65:9c:9f:1f:2b:b8:30:0e:b6:07:fb:d6:a3:
                    12:bd:f6:fe:c4:99:99:c9:b2:f7:5f:5a:e8:dd:3f:
                    60:c5:bb:6f:b8:21:d5:90:ce:e0:40:30:48:cb:f9:
                    5f:22:95:d7:97:e7:87:d0:bf:4f:2b:ac:0a:34:63:
                    f1:4a:9b:71:dc:61:c0:ce:93:f6:97:77:56:0e:05:
                    e6:da:de:c2:59:93:d5:60:b2:69:ad:1d:f8:2c:88:
                    44:b7:bd:c3:60:2a:eb:12:17:93:68:24:8f:06:31:
                    f0:f9:16:4e:c1:d7:3f:87:31:0b:37:fb:42:a2:ef:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:03:4E:2D:DC:0F:EB:D9:41:F1:13:E4:54:72:76:55:66:6C:5B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/e087b381-33b1-3a90-983a-397b8bc2fc0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f1:7f:1b:bd:c1:9a:d4:36:f2:0b:ec:ca:f1:08:2a:8d:fa:
         30:a8:89:2d:cc:43:e6:38:ef:58:41:7d:41:22:de:dc:d2:76:
         a7:6e:74:40:c2:74:bf:1c:78:5a:33:72:b1:40:32:42:20:3a:
         17:e3:e0:c4:30:04:6f:6e:86:e1:79:35:17:cc:6f:60:a5:8f:
         a7:be:df:0d:47:bb:1c:4b:53:58:73:16:f2:3e:3f:59:3c:bb:
         63:f7:bb:12:85:e0:4b:04:19:cf:2b:17:a7:83:35:bb:ab:33:
         23:8d:64:2d:a2:ff:9f:d2:a7:5e:17:e9:4a:81:ac:4c:43:7c:
         c1:e2:34:b5:bc:6a:2b:ca:4e:9b:73:81:6d:a3:e6:fa:43:ea:
         3e:1f:98:5e:b6:5e:19:4a:5c:79:f8:72:48:e2:06:24:ce:a0:
         20:b8:ba:61:44:bb:69:db:bf:3a:2b:26:db:4a:a1:b4:0e:6a:
         49:e9:39:2a:7f:7e:63:b6:6b:05:3f:8c:b2:86:f6:93:1d:7d:
         05:5d:07:d1:e1:bd:99:44:0f:c6:9f:11:cb:47:13:fe:80:44:
         7d:4b:bd:b3:b5:49:41:b4:f5:41:99:be:8b:a9:74:99:35:bc:
         61:4a:dc:1c:c7:90:b1:de:32:1d:4b:0b:33:e9:02:dc:5a:1d:
         02:71:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:33:24 2026 by rpki-client