Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/45bee689-c419-3860-a918-eab0d191cc58.roa
File:                     45bee689-c419-3860-a918-eab0d191cc58.roa (raw, json)
Hash identifier:          bxTN3KD5j579cjj/pRO4FUTYxUk/rV6eA6j4orZnimM=
Subject key identifier:   F1:25:32:28:8F:A1:1D:2F:BD:3F:33:9C:9E:94:F8:D0:99:E6:2A:0A
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F4328584EA799EDB9FF42897E36F4BA40
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/45bee689-c419-3860-a918-eab0d191cc58.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29789
IP address blocks:        66.254.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:ed:b9:ff:42:89:7e:36:f4:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fb505709-a52a-4673-ad5a-1d08db457212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:8a:d1:70:ed:cc:2d:44:df:43:31:00:65:
                    ec:0c:67:a9:00:40:a9:da:4a:16:ae:cf:e6:e6:1c:
                    05:cd:33:6d:7b:54:a9:28:dd:98:42:0f:d1:f6:83:
                    a3:db:66:94:e7:8a:a7:00:da:b2:95:eb:0e:60:66:
                    c5:bc:32:48:0d:db:54:ff:4a:53:a0:ad:b1:c8:c7:
                    e5:96:44:e3:9f:e7:11:69:27:c7:c3:ad:29:bf:0b:
                    8a:ee:75:29:a5:5e:de:9e:d9:37:c4:c4:f9:d0:50:
                    4c:e2:89:99:5a:b0:8f:7d:ea:6b:a8:93:a7:32:b7:
                    d5:e3:99:df:54:b7:5a:eb:60:e8:b3:cc:b4:f7:6b:
                    89:37:f8:43:00:ee:2d:64:03:d9:d3:b0:19:9d:bf:
                    72:64:51:16:09:9d:14:8d:09:51:26:9e:40:c1:37:
                    32:f4:b5:19:4c:e1:1d:bd:86:f1:ac:2e:2f:c6:10:
                    1a:a0:93:b6:8e:24:0f:29:24:f9:46:10:fa:47:d0:
                    2a:45:c3:2c:aa:f7:66:df:35:b1:25:d4:04:1e:a5:
                    fb:82:0f:dc:25:1a:96:ff:ea:db:29:c5:63:41:66:
                    54:c5:c7:a4:af:4d:54:45:2a:50:5c:16:a5:25:73:
                    84:d2:1a:86:dc:66:f3:bb:21:85:5f:5c:dc:f4:83:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:25:32:28:8F:A1:1D:2F:BD:3F:33:9C:9E:94:F8:D0:99:E6:2A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/45bee689-c419-3860-a918-eab0d191cc58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:97:56:0b:cb:fc:53:52:2b:69:46:40:60:46:a1:d7:47:12:
         54:40:31:d8:de:82:a4:d4:e3:2a:da:52:fb:06:a9:84:b9:3e:
         40:9e:bf:4d:29:a7:b1:ed:55:93:e0:d7:ef:3f:fb:0d:ed:97:
         42:9c:14:eb:a4:a9:3f:7a:7f:e3:03:51:79:63:46:38:9e:7a:
         f1:0c:f7:31:b6:19:ff:b2:1a:d1:8a:f1:3e:27:9f:97:ba:3b:
         a7:0c:3d:f9:f5:ae:a8:f7:51:5e:ac:79:9a:6e:97:9d:ae:96:
         8d:2c:d7:cf:40:07:0d:4f:14:c5:18:7e:62:03:d4:46:d3:ab:
         0b:f9:42:81:60:1d:e0:fa:60:c8:a0:9d:e4:ee:fa:d1:93:8c:
         84:58:7d:40:82:55:87:fd:dc:e6:6e:fc:fb:47:5f:f4:33:29:
         32:b0:9a:55:12:bc:2e:39:36:12:91:0a:e2:93:a3:83:31:8d:
         4e:27:1e:06:1d:1c:c1:61:97:c0:ae:e8:ff:2b:86:42:7e:8a:
         a9:47:c4:c6:e3:2a:75:39:df:16:f7:ab:e2:b1:b1:71:ea:c0:
         98:31:17:86:a8:85:5c:64:6f:77:ec:02:f5:b5:ea:d3:56:e8:
         1c:f0:0d:c5:84:0e:b2:ff:6f:6b:4b:0f:81:48:05:8e:7b:1f:
         1c:8d:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:37:44 2026 by rpki-client