Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/f978b2e5-fe4a-3539-8063-b0d25dbcf80d.roa
File:                     f978b2e5-fe4a-3539-8063-b0d25dbcf80d.roa (raw, json)
Hash identifier:          M6ZD2sa3eOaLspIYqoJ29O5i4lfROcNTxxEgt525wsk=
Subject key identifier:   69:70:6C:E9:26:13:65:65:4E:2E:46:FE:C4:C6:93:1F:9F:FD:6A:3F
Certificate issuer:       /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269
Certificate serial:       010D0C9F4328584EAB1ACC5D2C00A25D10C7E420
Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/f978b2e5-fe4a-3539-8063-b0d25dbcf80d.roa
Signing time:             Thu 30 Jul 2026 07:45:44 +0000
ROA not before:           Thu 30 Jul 2026 07:45:44 +0000
ROA not after:            Wed 28 Oct 2026 07:45:44 +0000
asID:                     40021
IP address blocks:        66.94.96.0/21 maxlen: 21
                          66.94.104.0/21 maxlen: 21
                          66.94.112.0/22 maxlen: 22
                          66.94.116.0/23 maxlen: 23
                          66.94.118.0/24 maxlen: 24
                          66.94.119.0/24 maxlen: 24
                          66.94.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:1a:cc:5d:2c:00:a2:5d:10:c7:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269
        Validity
            Not Before: Jul 30 07:45:44 2026 GMT
            Not After : Oct 28 07:45:44 2026 GMT
        Subject: CN=46e44b1c-b0a8-4a12-8ef2-bf688c42ff06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:bb:eb:84:ee:64:4c:b8:7c:d5:8a:18:94:
                    37:f2:9e:6a:f8:8a:9a:66:24:98:da:7f:17:6f:06:
                    17:a3:d4:a9:de:09:cd:91:b2:25:a1:63:ec:8e:57:
                    8a:bf:d2:ee:30:68:66:88:dd:d4:a4:fc:f4:f7:07:
                    70:4a:c7:f0:75:59:a5:49:c1:fc:bd:ca:98:3a:7e:
                    db:1e:f6:b9:98:32:df:57:38:07:d4:74:ce:a1:bf:
                    3e:40:09:66:53:7f:22:3a:53:e3:5c:ee:73:22:c5:
                    88:df:41:36:5e:2e:18:7e:c1:66:36:87:3f:fd:d6:
                    3c:9f:54:07:49:7b:af:bb:ef:ed:79:91:67:80:eb:
                    7b:13:7f:76:6a:5b:a7:78:72:95:34:f5:f1:a4:6e:
                    0b:b1:35:38:65:60:a9:73:2b:2b:6d:4c:a8:9f:46:
                    af:21:ab:dd:90:04:8b:f0:33:ce:1a:7a:88:55:3b:
                    1d:53:5d:7a:78:54:62:44:e5:f4:b3:72:9b:37:71:
                    01:2a:4f:15:62:fe:c6:7a:e2:c5:8c:c4:f7:3a:34:
                    88:33:76:84:58:b6:18:2c:71:9f:38:36:24:cd:1d:
                    64:54:87:23:cd:7a:df:37:8e:86:c5:86:fa:da:b1:
                    ca:bf:c0:a2:1c:ba:18:53:4d:70:cd:90:d7:25:c5:
                    23:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:70:6C:E9:26:13:65:65:4E:2E:46:FE:C4:C6:93:1F:9F:FD:6A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/f978b2e5-fe4a-3539-8063-b0d25dbcf80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl

            X509v3 Authority Key Identifier:
                keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.94.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:e0:04:e4:5e:7c:7a:0a:71:c1:0f:90:28:e6:61:d2:70:e8:
         f5:dc:70:35:10:26:2e:9f:64:c4:23:60:70:68:eb:1f:e2:66:
         90:e2:51:e6:e3:35:4b:15:27:c3:ee:a4:a1:9c:67:7a:24:91:
         f1:df:cd:4a:d4:be:2b:02:7f:d4:21:25:ef:e3:a4:ae:22:3c:
         b5:9a:44:13:c7:f8:ff:d4:0f:2b:5b:cb:fa:0a:3a:58:06:79:
         a2:c6:56:94:50:3a:e1:9d:87:e9:8c:22:b7:76:d2:aa:2b:1b:
         20:a8:95:44:98:2c:f0:6f:f4:b8:73:81:f3:7a:86:fc:21:d6:
         c0:8f:29:45:58:04:ad:6e:11:df:1d:fa:90:39:76:bd:7a:eb:
         0f:70:47:94:a7:08:d4:ef:5f:cf:18:26:9f:ba:2a:0b:47:62:
         7e:65:af:ec:94:53:ee:e1:25:40:00:d0:d8:38:e5:d4:bc:11:
         1b:a5:7b:88:e6:1e:35:49:da:d3:c2:8f:b9:2d:fe:1c:bc:87:
         31:c1:b0:5b:b1:1b:3a:ce:ed:6f:3f:32:b1:32:95:44:27:ea:
         9e:19:61:d9:90:2c:a4:05:8f:ee:81:ce:7b:fa:33:06:bd:10:
         50:fd:3e:db:fd:0f:22:fb:bb:5a:a8:ef:08:21:fe:b5:7a:d5:
         c6:a8:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:47 2026 by rpki-client