Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2323a2d9-a29a-3373-8134-018021c957e2.roa
File:                     2323a2d9-a29a-3373-8134-018021c957e2.roa (raw, json)
Hash identifier:          Bh7crrXLprHYnp61978wrrywI8MoY8N5NgO3ApeaDXU=
Subject key identifier:   9A:9C:04:5E:AE:EE:85:40:BE:79:35:27:20:8E:19:97:DB:55:5C:8C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F5908967CD82600073E7F4380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2323a2d9-a29a-3373-8134-018021c957e2.roa
Signing time:             Wed 30 Sep 2026 14:59:42 +0000
ROA not before:           Wed 30 Sep 2026 14:59:42 +0000
ROA not after:            Tue 29 Dec 2026 15:59:42 +0000
asID:                     11427
IP address blocks:        66.52.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:08:96:7c:d8:26:00:07:3e:7f:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 30 14:59:42 2026 GMT
            Not After : Dec 29 15:59:42 2026 GMT
        Subject: CN=3d40fcfa-0a2a-430f-9ec0-91a6d2ad880b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:ae:82:ef:55:05:52:07:3f:a1:db:43:16:
                    86:74:7d:e6:da:c4:8c:bf:9c:b0:7e:fd:6d:f5:30:
                    30:78:ff:b3:f9:dd:ef:f9:f7:d2:12:51:d7:55:cd:
                    c2:f1:26:b9:df:89:ac:8e:d3:9f:7e:3c:8b:7f:71:
                    aa:00:21:ff:a0:2c:2d:8a:c1:fd:7e:64:cc:34:bd:
                    68:59:21:c8:c7:28:d5:41:0f:f7:41:3a:47:40:bb:
                    7e:2a:12:09:2b:69:f9:4a:fe:f5:a0:6b:d8:2d:71:
                    92:9e:b2:5b:d3:2b:e5:1d:e7:5e:12:9b:83:7a:a7:
                    94:44:0d:00:70:b3:a4:66:25:96:e8:dc:3c:cb:24:
                    e5:c0:d3:bf:a2:94:91:bf:5c:a8:f2:b0:eb:81:c0:
                    cf:60:77:dc:d3:0f:6e:c5:b9:19:40:f2:4c:09:3b:
                    f4:86:53:3a:41:72:6e:c5:de:5a:69:b6:0d:36:93:
                    50:3b:86:0a:98:a8:02:28:75:a4:a7:98:98:fe:27:
                    a0:c4:b2:e9:9f:1d:72:9e:f9:a2:19:1c:ab:00:29:
                    b9:cb:ce:0a:90:c4:48:43:8c:56:41:57:45:58:83:
                    79:a7:e8:03:6d:62:60:ae:8d:6f:20:3a:93:a8:56:
                    18:eb:0b:d2:87:53:2d:8f:cf:85:25:9d:ba:54:de:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9C:04:5E:AE:EE:85:40:BE:79:35:27:20:8E:19:97:DB:55:5C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2323a2d9-a29a-3373-8134-018021c957e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.52.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:2d:25:a0:31:74:9e:1d:9b:e3:09:09:98:1e:ca:6d:b4:
         f2:6a:ee:ee:96:a6:56:e5:8b:f0:6c:54:47:c5:14:57:b9:2f:
         fb:e2:83:a3:71:b7:9e:52:4e:38:2d:0d:e1:95:93:ca:b0:85:
         c7:5d:c7:d9:bc:11:69:15:7f:b2:8b:89:1a:61:69:6e:1b:79:
         08:4d:76:a0:1c:78:30:b6:e0:55:b0:05:e7:04:5e:a0:ea:c2:
         bc:bb:0a:1b:d5:18:3d:e4:48:8c:0d:a2:d7:03:b9:09:40:1a:
         24:72:ff:ca:c2:a2:1a:53:dc:65:37:c3:7e:1d:d7:69:bb:20:
         13:08:ff:13:7b:b2:73:2a:b8:9f:8a:0b:32:df:b6:5c:5d:12:
         57:60:c3:d9:4a:d3:75:f8:44:04:be:d7:43:f1:4c:b4:03:ed:
         71:ea:57:1e:3d:ca:11:72:41:1d:3e:c0:c0:47:ba:6f:6f:45:
         d5:01:ca:5f:31:25:6c:5f:02:e4:51:75:27:ed:d2:9f:a2:cd:
         35:65:88:21:4a:07:09:40:e9:05:28:9e:13:f5:9b:74:14:39:
         a1:92:66:d2:ab:46:95:45:0b:c6:c7:e9:16:f7:3c:ab:f7:13:
         b6:ad:68:0c:ad:3e:a0:c7:77:20:6f:25:fa:4e:81:ce:7a:bd:
         df:76:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:32:54 2026 by rpki-client