Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/c44e61b8-7798-3f83-86be-f00f980cf35e.roa
File:                     c44e61b8-7798-3f83-86be-f00f980cf35e.roa (raw, json)
Hash identifier:          4F+xKm07cbvvNB6OQLfLjS4rnLCj7mFixVcY2u1sLUY=
Subject key identifier:   E3:5F:24:CD:82:0B:17:CB:1C:CC:BA:C1:54:70:BF:13:4B:3B:D8:22
Certificate issuer:       /CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Certificate serial:       010D0C9F4328584F4975E5D09CF017DA987E2D80
Authority key identifier: 9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/c44e61b8-7798-3f83-86be-f00f980cf35e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23483
IP address blocks:        66.244.4.0/24 maxlen: 24
                          66.244.15.0/24 maxlen: 24
                          66.244.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:e5:d0:9c:f0:17:da:98:7e:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=706e8116-fa16-46e6-851b-914466041d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:fa:f1:ce:0c:de:71:2f:02:c4:74:05:81:
                    76:3d:f4:c4:0d:a8:2a:d4:6c:f2:7b:b3:aa:7a:ce:
                    36:5d:60:7a:d9:01:3e:46:a0:bc:9d:83:07:65:fa:
                    f8:3e:c7:50:81:f4:2d:0f:56:cb:a0:cf:f6:ef:ea:
                    f5:59:d0:e0:9d:b7:47:b9:f6:16:df:de:60:d0:ed:
                    9d:a6:d9:95:15:f8:24:07:39:6d:f9:df:49:c5:fb:
                    30:28:07:fb:ba:54:4f:9a:7c:12:f8:37:db:c7:47:
                    53:ea:d3:08:75:59:93:b2:eb:82:17:79:9e:ec:df:
                    e8:11:a2:38:1e:dd:7d:f9:7a:8b:36:8f:6d:b6:45:
                    be:35:00:4e:b1:7c:d8:f6:19:c9:cf:ef:a6:e9:2c:
                    26:1b:3e:af:d7:dd:54:ac:39:52:d3:d7:f1:04:fc:
                    dd:0b:94:ed:b5:73:17:2c:f6:9c:d8:26:a2:01:6a:
                    00:4e:a4:38:6b:c6:e8:42:33:3c:2f:55:f8:d3:98:
                    68:9a:1d:e2:79:cf:5a:54:32:62:41:bd:75:a1:7a:
                    20:7f:52:29:ed:dc:a9:39:22:fd:63:9a:84:37:74:
                    e0:be:00:d7:db:a2:d3:64:6b:a4:21:aa:f0:ed:bf:
                    f8:d6:88:94:0d:97:c3:1d:d6:7e:d8:04:c1:04:1a:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5F:24:CD:82:0B:17:CB:1C:CC:BA:C1:54:70:BF:13:4B:3B:D8:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/c44e61b8-7798-3f83-86be-f00f980cf35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl

            X509v3 Authority Key Identifier:
                keyid:9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.244.4.0/24
                  66.244.15.0/24
                  66.244.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b4:df:83:54:f6:f0:ee:75:db:85:d4:c7:31:9c:7f:ba:d1:
         89:39:43:1e:81:3b:76:12:98:3a:6d:51:a5:8b:1a:cb:01:0e:
         cb:9c:ca:97:82:61:8f:9d:22:9d:23:b9:b0:7c:32:9e:7f:02:
         02:c6:ee:a4:5b:d8:3b:84:c8:f4:d8:7d:41:fd:0c:65:40:99:
         12:ee:2b:f5:14:58:8d:4b:3f:3a:29:0f:f2:b1:cb:4a:5d:f5:
         ae:58:11:e8:47:bb:8d:83:c9:3a:33:b5:f1:e0:4a:a5:8d:eb:
         98:09:a0:8b:22:06:a8:18:b1:ca:d9:17:65:97:61:27:86:8f:
         57:4a:29:1b:b3:37:d5:06:61:4e:f1:7f:06:27:bc:27:6d:00:
         7d:d7:cd:2c:66:bf:3c:3f:c7:0c:b8:bb:b3:e9:e5:81:58:47:
         45:d9:30:ea:7b:d2:47:f4:5f:41:61:6c:27:6a:2e:75:5b:5b:
         5b:e6:20:96:e1:37:62:3f:7f:e7:b9:e3:bf:c3:e8:00:dd:6c:
         dd:4f:96:ac:3d:6f:87:9f:33:5f:a6:c7:cf:9d:e8:ae:8c:8f:
         cb:09:1d:34:d4:89:2b:22:39:22:8b:25:73:bd:53:0c:08:99:
         18:1f:d0:15:97:73:4e:19:54:d2:5c:c4:b3:e8:82:1a:c4:6d:
         07:a2:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:02:12 2026 by rpki-client