Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa
File:                     976bff61-e8bf-3711-88dc-a4ab9c98b531.roa (raw, json)
Hash identifier:          fp8qHv5gNuEVRs2/75fo1Nq71LAYrLAPspLwqz4/Pzo=
Subject key identifier:   A0:A1:A5:82:6C:79:B9:D9:4D:B4:74:B7:DF:76:F5:68:6C:D5:8D:E2
Certificate issuer:       /CN=957264f8-0474-43d0-9a3b-5f53ce28790d
Certificate serial:       010D0C9F4328584ED001E3AF6FB7FE5C809ECDE0
Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     15344
IP address blocks:        66.212.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e3:af:6f:b7:fe:5c:80:9e:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=85930bfb-1542-4272-89aa-2f44e15110b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:0b:8c:38:74:de:1b:0a:e0:17:a8:d1:18:
                    0e:da:58:a5:ba:b7:e1:c0:c9:7c:cf:93:50:34:ef:
                    91:cf:c4:d3:9b:04:7a:a4:24:5b:89:a2:a8:f0:7f:
                    d7:28:b7:63:c3:93:9a:ab:47:71:84:40:56:44:5b:
                    99:17:b0:41:60:46:4d:f6:9b:a0:e1:82:d8:3f:36:
                    f6:ef:19:5f:df:88:42:23:da:80:63:6f:10:0b:5b:
                    22:fd:ca:91:c8:43:31:f1:95:72:20:5a:b1:b5:60:
                    5e:e0:f3:b5:a5:c3:78:2d:8f:56:bc:51:6a:84:19:
                    a3:d6:ae:13:c2:05:85:00:53:f2:79:10:95:f4:85:
                    5a:32:66:fc:ac:89:c8:fe:2c:33:47:85:d1:a9:9e:
                    34:73:a1:cd:6b:5d:7a:da:04:dd:6d:05:10:b1:33:
                    68:68:16:b8:b0:0d:cb:7b:e7:74:9c:c8:0c:99:d4:
                    86:e8:86:1e:13:c5:d6:bd:08:b4:03:b7:45:e6:ab:
                    7e:77:df:8d:b7:3c:5c:63:81:92:d8:54:5f:a3:6b:
                    95:16:62:37:12:d8:50:8c:cb:3f:89:55:04:50:c8:
                    ff:2f:7c:e5:89:28:da:c8:d5:14:0e:4d:1e:0c:85:
                    df:c4:64:21:f3:55:77:a1:2f:ab:72:c1:b5:eb:46:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A1:A5:82:6C:79:B9:D9:4D:B4:74:B7:DF:76:F5:68:6C:D5:8D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.212.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a0:73:96:70:67:1b:6b:8d:20:b2:d5:38:39:8c:bc:84:29:
         01:f7:8e:b4:15:1f:f0:62:9c:9e:49:4a:79:b3:6a:94:f2:d5:
         21:31:63:07:f0:0c:77:97:e9:10:6b:36:68:bb:80:45:af:67:
         2f:39:11:9e:cf:82:e1:d1:29:ee:c8:f1:0c:df:32:c6:62:d6:
         58:15:47:02:37:78:3a:82:ec:af:49:76:65:29:48:b4:c9:07:
         a7:a0:d5:9d:b1:5e:d1:b3:ba:94:b8:75:9e:3e:45:f4:a4:69:
         d2:a3:c7:56:0d:01:7f:d5:fd:ee:ac:13:97:b6:dc:1a:a9:c8:
         e6:5c:fc:05:35:67:34:d2:33:2c:d8:e7:d2:a1:f9:15:04:7a:
         6c:70:42:26:27:4c:28:ba:38:78:9c:52:16:71:04:1e:53:16:
         f1:37:38:ff:e8:26:46:0b:00:d5:ae:fc:78:fc:5b:b4:8a:28:
         d0:f2:0e:4e:20:c5:89:4f:5f:d8:3b:d1:43:f1:29:dd:da:50:
         eb:10:37:ca:6a:d2:bd:a5:e4:f3:74:cb:18:2c:ac:52:87:2f:
         75:12:f2:fa:e3:9e:cc:35:21:65:06:cc:3c:e0:68:7a:16:75:
         47:94:dc:b2:cd:93:3b:c1:4a:cd:93:4f:6b:20:1b:38:2b:67:
         89:36:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:27:44 2026 by rpki-client