Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0bd3a235-2bb3-3731-944c-83b327d1a863.roa
File:                     0bd3a235-2bb3-3731-944c-83b327d1a863.roa (raw, json)
Hash identifier:          AOKKqvse2CeF1DCg0i+Bx5SSsYqzQstIRy5fL+WozD0=
Subject key identifier:   EA:D7:60:A9:8A:46:92:AF:DC:88:FB:1B:6E:29:E2:7B:E8:B2:98:AE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E384D5900230A6DBA7A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0bd3a235-2bb3-3731-944c-83b327d1a863.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        66.168.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:38:4d:59:00:23:0a:6d:ba:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=745268bd-4e96-4ce1-9756-afd8b6b02260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:56:78:2e:84:8b:6a:46:4c:6e:52:25:25:
                    90:e3:7b:cb:82:5d:09:e5:db:11:4f:8a:f2:2e:be:
                    b0:18:9f:cf:2a:39:24:78:94:d8:55:ef:e0:03:be:
                    d2:aa:47:4e:65:96:7c:26:c6:d2:91:65:4b:3d:4e:
                    bc:59:83:1e:0e:dc:46:e1:e1:f4:01:23:8e:35:18:
                    f2:8a:d7:49:dd:30:4d:16:8a:6d:6a:50:fd:a8:d9:
                    ac:ce:d8:95:f5:16:bd:2b:94:c6:dc:eb:e2:eb:58:
                    d1:03:09:b5:1a:47:de:55:c4:16:54:72:c5:13:fc:
                    72:7d:eb:bc:78:ff:2b:97:b7:c1:27:c0:30:0c:92:
                    23:fd:1e:32:c9:c2:af:5d:1a:0c:b4:a9:18:a0:b1:
                    e6:b1:47:d2:59:f8:4e:d8:99:1e:c8:aa:5d:ec:67:
                    36:2b:7b:a9:6d:da:0d:7a:5d:59:8f:9c:06:1b:8c:
                    c7:87:64:fa:cf:83:9e:2d:d8:7c:6f:e4:04:cf:0d:
                    30:f6:bb:78:00:98:cb:05:74:79:80:6b:cf:8a:7a:
                    1b:2f:32:9d:a0:f2:78:63:e5:50:a1:12:0f:dc:1a:
                    cd:89:fc:c7:09:42:9e:67:64:0b:59:f1:aa:f3:7f:
                    27:98:d5:15:8d:02:bf:f9:14:49:f0:4d:56:cf:73:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D7:60:A9:8A:46:92:AF:DC:88:FB:1B:6E:29:E2:7B:E8:B2:98:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0bd3a235-2bb3-3731-944c-83b327d1a863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:54:16:db:0a:0d:6f:0c:85:3e:fd:a3:f7:06:ed:a0:88:67:
         36:64:c9:b5:52:33:f3:13:a5:93:86:58:f4:2d:d5:a1:7a:2e:
         6b:87:90:ff:02:68:c1:82:96:b3:74:d7:0a:8b:96:5f:d0:8a:
         b6:a0:86:c8:0d:16:2b:3f:7c:51:bf:fe:a6:ed:8d:d0:a2:88:
         94:f7:40:03:76:c4:60:b2:80:b7:05:80:58:ca:09:5f:32:1a:
         a3:91:a8:64:f8:56:ec:a9:22:79:b3:c5:7f:82:bc:18:44:e7:
         1a:b4:8b:b6:8e:6a:ea:28:41:02:6c:48:45:65:e0:fa:69:53:
         39:be:4d:da:31:7e:a1:93:57:4b:a9:75:ba:f5:bd:f5:4d:9a:
         c4:d7:9d:98:20:87:d1:c8:c0:5e:86:2c:96:bb:65:99:36:f2:
         6e:ff:38:73:6a:9e:1c:97:2a:df:fa:c0:22:ce:17:85:34:af:
         1f:3c:ea:80:7d:2e:62:69:a0:a1:4e:3b:c4:59:c7:c8:aa:9a:
         c3:39:2b:9c:d8:f4:75:ba:a1:6e:93:55:07:91:9c:60:43:42:
         17:55:5d:3c:2d:ba:0e:27:19:3b:6a:fd:d5:10:a1:d6:80:4d:
         a0:e5:65:60:bd:36:7a:ad:ca:6c:ac:f5:c9:54:7d:b5:b8:c4:
         27:fa:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:16:36 2026 by rpki-client