Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b11922f8-cfcc-3bf8-9cd0-946b59bf14d0.roa
File:                     b11922f8-cfcc-3bf8-9cd0-946b59bf14d0.roa (raw, json)
Hash identifier:          ZLZnWcHAJwkGB3j3fUgbikIs+uNV+PBsneD1RXDn2B0=
Subject key identifier:   67:8D:39:9A:4C:17:E0:37:A0:0B:AD:9F:11:78:EA:03:88:6B:73:C9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DF60E24A7390E4E7AE2A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b11922f8-cfcc-3bf8-9cd0-946b59bf14d0.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     54288
IP address blocks:        66.220.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:f6:0e:24:a7:39:0e:4e:7a:e2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=f969dcb8-97c2-4d9f-8359-fb7e13643c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:8d:81:97:60:e4:a2:68:89:73:39:dc:e1:
                    b3:47:03:d2:df:04:2c:4f:1b:e3:db:ed:44:aa:4a:
                    ed:bd:98:b3:a9:53:d9:c3:60:fd:07:31:2f:1c:f4:
                    24:00:0e:a9:fc:87:03:2e:84:3d:53:8f:cc:ef:62:
                    a3:0a:9b:c5:55:dc:83:7d:16:d7:f2:3d:8d:a9:7d:
                    65:dc:fc:f0:5f:b5:2f:99:ac:db:38:a5:18:e1:9f:
                    22:e5:05:2d:d5:cc:45:fd:73:fb:f7:90:b6:5a:9f:
                    09:a9:6a:6c:1b:0d:72:90:b0:b5:ea:df:10:99:78:
                    15:95:c6:a9:41:79:84:11:47:6b:8b:08:7d:42:e7:
                    b5:e8:bd:22:4e:78:b4:e7:d0:99:fa:03:85:a5:d1:
                    91:48:e8:bb:d3:5d:f1:3a:f6:bc:ed:fb:07:27:55:
                    a3:f2:cd:a6:44:5b:5e:c7:a9:89:49:dd:1a:b8:df:
                    bf:da:7a:83:eb:fc:52:36:56:5b:2d:1b:d2:f5:80:
                    73:33:ab:4a:b1:80:5f:c3:a2:ab:49:91:7a:18:81:
                    89:d6:8a:c4:37:d0:4d:d9:43:4f:97:dc:99:01:79:
                    06:e5:7f:a7:54:fc:c0:44:b2:83:02:72:27:f8:18:
                    80:eb:0a:e7:e4:95:d1:df:bb:95:f6:a2:86:20:af:
                    8b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8D:39:9A:4C:17:E0:37:A0:0B:AD:9F:11:78:EA:03:88:6B:73:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b11922f8-cfcc-3bf8-9cd0-946b59bf14d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:de:97:26:af:c5:86:39:c6:f4:1e:7d:61:c1:c9:dd:82:58:
         5d:80:c1:a9:3c:be:2b:c6:96:e5:a6:d1:a2:44:18:02:45:1d:
         57:c0:58:0f:bf:ad:c5:e9:bd:d2:38:bb:10:e3:10:65:46:d8:
         19:b8:3d:2a:52:7c:52:c0:c8:c7:90:45:a1:1f:32:bc:47:f3:
         2c:d1:9f:9e:c3:a3:9e:f8:1c:42:fb:94:6e:33:5e:18:26:c9:
         74:f5:a6:60:0c:ef:f1:9b:9c:05:6d:15:2d:24:44:ec:45:f8:
         ac:b5:47:36:d2:e1:6c:81:ad:82:d8:26:b8:04:f5:05:b1:3d:
         f5:35:ef:b8:45:1a:46:e9:7f:3f:a6:95:ba:1c:55:4f:60:61:
         2f:31:51:af:9d:58:79:de:69:81:67:cb:b3:98:0e:f6:23:98:
         bf:2c:e2:ed:d2:43:14:b2:06:a8:b0:2b:ad:82:24:b1:47:97:
         ec:ea:5c:f5:bb:a1:a9:8c:7a:a5:7f:d9:7c:f5:b9:e9:03:7c:
         20:d2:10:f2:c8:e3:5c:a8:13:23:9f:94:82:46:49:69:7d:8e:
         d9:7b:77:e9:23:a2:2f:f5:28:3b:cb:df:33:79:cb:05:14:d3:
         29:7b:1a:88:4c:da:8c:07:a3:1d:96:52:80:3e:a0:53:9a:11:
         ad:44:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:45:30 2026 by rpki-client