Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa
File:                     a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa (raw, json)
Hash identifier:          4eQULv8NhbhvGbpnTt+4Wdxg8zFCWYJdHhuK6Uxle6I=
Subject key identifier:   DB:1D:9F:F1:FB:79:9F:3A:F7:36:E5:43:F9:7A:6D:76:FB:38:7C:DE
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584EF717609BE145B6AEDCDC2900
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     30170
IP address blocks:        66.113.96.0/20 maxlen: 24
                          70.35.112.0/20 maxlen: 24
                          209.147.112.0/20 maxlen: 24
                          2607:f6f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:60:9b:e1:45:b6:ae:dc:dc:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=fbba3a87-2360-4144-9736-ccf946f1d5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:56:56:fc:aa:89:cb:db:51:8c:e4:e6:76:79:
                    0b:85:b1:2c:e5:54:ba:37:c8:0d:b0:30:c4:b6:74:
                    80:1d:af:27:c0:da:ee:eb:68:60:64:e4:00:32:af:
                    5c:ce:4a:70:c3:80:c0:d0:a4:5b:d6:a6:0a:5d:47:
                    b2:f9:a1:ec:92:f3:93:d1:8d:ec:14:58:5f:16:2f:
                    52:9e:8b:58:9e:2b:b6:d8:b5:c6:6b:02:4f:33:95:
                    ec:af:9d:59:cf:bb:f4:0a:ef:71:45:bf:ae:07:a8:
                    59:3c:47:40:d2:a6:f3:78:46:ef:c3:2e:e3:60:50:
                    56:59:9a:e0:5b:7f:aa:b4:7a:16:c7:93:01:47:80:
                    66:ba:60:6e:2b:68:bf:a8:a4:5f:80:47:e5:c1:87:
                    a4:8b:09:42:40:be:85:98:65:26:28:1b:7b:13:1b:
                    54:32:94:5f:be:b1:ee:90:e0:2f:8c:c2:b2:45:b0:
                    fe:cb:3b:a2:36:4c:f2:c0:b3:23:d6:91:a8:89:bc:
                    af:db:44:bc:18:09:c2:ef:b5:2a:75:20:37:ab:3a:
                    a8:1a:43:ee:c3:1e:30:45:e1:14:10:b0:d5:d8:64:
                    9d:47:aa:23:dd:5f:01:04:88:5d:1a:22:2d:81:bc:
                    af:99:ff:86:d6:fe:3c:80:28:ce:c7:ab:8c:81:76:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1D:9F:F1:FB:79:9F:3A:F7:36:E5:43:F9:7A:6D:76:FB:38:7C:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.113.96.0/20
                  70.35.112.0/20
                  209.147.112.0/20
                IPv6:
                  2607:f6f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:27:52:1d:9b:81:c9:bb:0b:64:e8:65:3d:a7:bb:41:13:c7:
         cd:00:be:36:30:b7:a3:eb:d5:c8:44:4c:15:c5:0f:83:36:14:
         9d:3e:58:73:2c:d9:ae:91:d6:d2:61:0d:5a:0f:56:9e:10:04:
         92:5d:c5:ce:d0:7e:db:28:6f:b5:c8:60:20:7a:4d:1f:0c:a7:
         bb:00:bd:0b:db:6a:a5:e2:81:00:6c:3c:30:84:14:f7:d8:42:
         d8:94:cf:3b:cc:77:94:14:76:d3:77:09:dd:96:7b:f9:15:89:
         6d:cf:4a:78:86:2e:16:0c:02:10:dc:8b:86:4b:4b:3d:80:93:
         dd:14:d8:32:af:a8:69:2e:59:18:bd:a1:f3:0f:9e:09:e5:1b:
         75:94:b1:67:63:25:d7:02:fb:fe:77:a1:98:0a:e4:d9:b8:5b:
         d2:c1:7c:38:8e:aa:e5:58:5d:b1:25:f0:84:43:5c:8e:68:16:
         0a:92:ae:dc:8c:bf:55:8f:4f:5a:1f:68:89:b6:33:62:0f:6a:
         b3:b7:eb:8e:7d:0d:50:2b:bb:50:ca:8b:ef:30:ce:a6:e1:b3:
         f3:42:53:68:df:07:33:87:a0:d9:d6:bb:50:0b:45:8a:2d:51:
         46:a1:1a:5c:a3:61:4a:64:7b:99:fa:06:c0:ed:f0:00:4f:f5:
         de:77:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:40:56 2026 by rpki-client