Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/b1dc4fdf-c1d1-3d35-a216-360f9f633221.roa
File:                     b1dc4fdf-c1d1-3d35-a216-360f9f633221.roa (raw, json)
Hash identifier:          QJChqt29ThtwFWlRGA4PDzWMRdLJXYQJhzuAcHo9LK8=
Subject key identifier:   05:EF:AC:0E:89:BB:23:55:EF:F8:A1:F3:D9:48:3C:6D:00:92:46:13
Certificate issuer:       /CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Certificate serial:       010D0C9F4328584ECA6C8B4E266CD5DCD1F5E080
Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/b1dc4fdf-c1d1-3d35-a216-360f9f633221.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     399804
IP address blocks:        66.187.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:8b:4e:26:6c:d5:dc:d1:f5:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=4106f96a-745e-42d2-84db-33c7d145f584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:a2:cd:b7:1c:c0:b9:15:5e:48:fa:6c:80:
                    cd:26:b0:e2:d5:3c:36:8d:b5:fe:42:92:20:13:e0:
                    14:28:05:4a:d0:8a:5d:e5:90:62:3a:00:d0:72:0a:
                    93:7f:3b:12:8c:0e:89:13:7f:b8:bc:1c:fd:cf:1a:
                    16:a9:86:b9:ec:c6:ed:20:73:6a:d1:3f:a1:71:d7:
                    37:75:0f:14:d2:87:d3:2a:bf:44:66:2f:58:8d:53:
                    bb:e8:43:05:4d:31:a1:3a:ae:9a:a4:48:43:93:dc:
                    91:d1:4b:0a:7f:c8:a5:c8:c9:46:e0:a9:85:e3:f2:
                    ed:78:9b:20:5e:2e:eb:24:4b:76:5d:74:d9:d4:e0:
                    4e:dd:ec:d6:70:4b:d5:bc:30:9e:25:d7:fd:fb:97:
                    0c:a3:ea:29:b6:e5:57:ba:8e:77:fc:59:5a:28:87:
                    ce:34:5d:7d:ba:14:e7:82:4e:00:4c:60:c5:a0:a7:
                    02:c7:cf:56:43:ae:69:8d:68:f7:3d:35:12:cc:07:
                    71:98:55:9e:da:7a:20:97:29:0c:f3:63:ed:29:4c:
                    65:56:ca:1f:0b:3c:86:9d:58:84:bf:30:fd:2f:61:
                    fb:24:69:4a:9f:f4:25:93:22:7f:bb:39:f2:ee:92:
                    a5:71:81:8b:e8:8e:44:b4:91:fa:f9:1f:81:cb:7e:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EF:AC:0E:89:BB:23:55:EF:F8:A1:F3:D9:48:3C:6D:00:92:46:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/b1dc4fdf-c1d1-3d35-a216-360f9f633221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl

            X509v3 Authority Key Identifier:
                keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:86:b2:65:c7:61:a1:46:e7:06:bb:e0:13:a0:30:1a:0c:cf:
         49:59:3e:73:39:83:6b:3c:02:49:83:7d:a5:d5:0f:cf:00:4d:
         48:b6:54:4c:06:f2:01:3d:27:e6:9b:af:bf:40:45:59:dc:61:
         72:bc:12:72:ce:fc:c2:4a:8b:ae:62:b6:e7:e2:66:46:36:86:
         c2:40:5b:8c:a7:b8:8a:19:66:e0:1f:93:8f:a1:e8:ff:7a:7d:
         08:5e:0b:31:39:fc:97:16:bf:c4:e9:2a:4a:66:81:b2:f3:d6:
         4d:15:f8:c1:ca:52:73:d8:72:7a:4f:2b:0c:c9:88:a2:dc:17:
         4e:cc:96:98:ce:83:95:dc:cb:51:5b:a8:a6:e5:cf:b6:ba:8b:
         94:98:ad:03:b7:87:0f:c3:7c:f6:fb:46:15:03:67:3a:67:81:
         5e:90:12:09:24:14:21:3c:b0:30:0d:84:68:05:6e:f8:fe:c4:
         55:4a:1b:d5:40:e2:3b:21:07:1d:bc:44:30:41:dc:14:51:76:
         05:e3:4c:4b:92:46:b2:6b:7e:dd:3a:6b:e1:42:51:86:16:50:
         02:f6:4d:3c:3f:78:43:35:97:43:e9:dd:75:39:24:0c:86:ed:
         b0:0d:a6:15:25:1c:df:6c:e9:bd:86:98:81:d1:db:21:ed:7a:
         36:d1:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 23:37:42 2026 by rpki-client