Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/a7109183-1584-33a4-afd9-201d6e6f0710.roa
File:                     a7109183-1584-33a4-afd9-201d6e6f0710.roa (raw, json)
Hash identifier:          0kq5N12bZlnuSEIzfHUcRJ+VSSTsyn0ip+XlxF+Xejk=
Subject key identifier:   F4:7B:8F:E5:C4:38:9A:3F:89:5B:98:88:C2:CA:11:5F:2A:36:BB:59
Certificate issuer:       /CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Certificate serial:       010D0C9F4328584EA7885115A64923A98935B500
Authority key identifier: 9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/a7109183-1584-33a4-afd9-201d6e6f0710.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23483
IP address blocks:        66.244.0.0/18 maxlen: 19
                          66.244.16.0/24 maxlen: 24
                          66.244.63.0/24 maxlen: 24
                          2602:fd01::/36 maxlen: 37
                          2602:fd01::/48 maxlen: 48
                          2602:fd01:40::/48 maxlen: 48
                          2602:fd01:fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:51:15:a6:49:23:a9:89:35:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=613fb1fb-bebd-47f5-a3f4-8fdc07c5363d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:3a:30:d5:f2:8e:bc:39:44:66:3b:04:80:
                    d5:ed:77:e1:a0:85:45:ef:ac:6e:e0:3f:1e:80:c9:
                    7e:65:05:04:f3:82:d1:02:9b:97:a7:bd:8c:36:8e:
                    65:e9:04:b0:09:73:2a:04:19:00:47:aa:c7:5c:6a:
                    bc:c8:1e:fb:8b:07:09:4b:6d:b6:51:23:4c:c7:d2:
                    2a:02:5a:d1:80:bb:0d:2a:f4:16:d2:ef:91:e1:90:
                    01:29:db:0c:81:c3:54:5a:fd:bb:2d:8b:24:b0:b8:
                    e2:4d:b3:c3:b1:1f:bc:ab:92:21:c5:89:db:6a:96:
                    02:0a:2e:27:ca:6d:55:b7:d8:bd:1c:f8:32:93:e0:
                    f1:20:a0:fd:4a:e2:c3:2c:e4:cd:ad:d7:49:d8:c9:
                    56:ad:94:e4:e6:65:9c:11:e5:1c:ee:88:f0:81:e5:
                    fc:14:a5:6e:c9:07:86:6c:ed:35:1b:b9:08:e1:62:
                    9a:d1:c9:99:c1:02:fc:91:b6:04:22:cd:20:df:97:
                    ce:65:a0:f0:cf:86:54:2a:a9:a4:20:78:aa:f7:68:
                    72:8c:94:95:21:d2:1f:04:16:1d:7e:ac:f9:41:bb:
                    8b:58:8d:c9:98:af:33:08:bf:0f:ae:e5:45:44:f7:
                    4e:c4:4a:b6:4f:7c:3a:c6:be:d9:a1:b5:9a:26:e9:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7B:8F:E5:C4:38:9A:3F:89:5B:98:88:C2:CA:11:5F:2A:36:BB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/a7109183-1584-33a4-afd9-201d6e6f0710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl

            X509v3 Authority Key Identifier:
                keyid:9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.244.0.0/18
                IPv6:
                  2602:fd01::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d1:90:0f:49:1f:da:db:88:5d:37:24:7c:91:f9:2b:42:12:
         f0:2b:47:b4:86:0d:32:0b:0a:92:84:8f:e1:ec:4c:6c:92:6a:
         1e:2e:8b:c2:b2:7b:92:d7:58:61:43:b5:5b:90:07:35:f0:08:
         1c:4e:5c:c4:08:85:bd:94:a2:44:88:c3:41:cd:ac:a6:6c:31:
         18:44:76:18:1f:a6:1f:a0:de:20:46:51:51:2d:82:64:95:3a:
         6b:0b:a1:b8:6f:04:04:aa:63:7e:33:a8:96:1f:69:ea:df:ef:
         be:ea:56:ee:4a:87:ae:8b:3b:2f:0c:24:fc:e9:90:76:5d:10:
         ff:89:79:17:50:f9:85:0e:41:84:c9:4d:d0:c2:35:15:01:e2:
         b3:c5:ae:4e:da:f3:a4:2c:bf:12:b5:fc:6e:19:62:14:0c:c6:
         bd:24:40:b5:e5:d3:ed:c4:ab:51:db:b9:f4:cf:31:e8:57:78:
         3d:e1:b1:1e:ad:56:8c:d4:6d:d5:dd:8b:a1:cf:e3:c6:b3:0b:
         3b:9e:1e:dc:cc:af:82:a4:71:da:88:a9:9d:84:ce:bc:82:b5:
         8e:e6:71:42:ac:2e:24:06:62:a9:4d:32:4b:5a:ab:0c:77:9a:
         bf:0d:68:0d:9a:3f:93:0a:c1:2f:8a:25:54:35:40:7e:9a:6d:
         b6:47:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:54:08 2026 by rpki-client