Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f46cf55-a7a1-360b-a280-e176b99e47d8.roa
File:                     7f46cf55-a7a1-360b-a280-e176b99e47d8.roa (raw, json)
Hash identifier:          HX4PDWU40HsUF2Ym7cDz+C+aXklCDo3iY89BZPyw3B4=
Subject key identifier:   1C:D8:75:54:60:86:36:4D:57:0E:CC:40:E3:8C:4D:2A:96:10:1F:D5
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584F19FCEE47319897766ADDAD80
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f46cf55-a7a1-360b-a280-e176b99e47d8.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     22351
IP address blocks:        66.36.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:ee:47:31:98:97:76:6a:dd:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=b792cf64-ef76-4510-bf26-b922718eb26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1d:01:7a:9e:8d:dd:16:49:b2:2b:b0:4f:d7:
                    13:c8:3f:42:5e:89:1e:10:b1:67:40:1a:ee:b8:24:
                    93:d4:e2:72:99:c8:3a:f5:bd:93:6a:7d:74:97:b0:
                    a4:f9:90:58:34:6b:55:56:fc:47:d3:6d:fb:08:2a:
                    38:13:5c:ea:6b:90:d3:8a:af:d3:f8:4a:6a:34:2e:
                    d9:c1:e1:b7:69:15:87:7c:bc:0c:12:ca:2b:52:da:
                    68:f4:6a:06:d9:23:a2:bb:0d:31:5e:06:57:17:e3:
                    4d:4b:96:27:23:9e:49:e8:27:64:cb:f9:7d:f3:04:
                    da:2b:fa:15:e1:91:19:13:6d:ea:37:8f:bc:0d:aa:
                    30:72:dc:21:cd:1a:70:48:6c:b5:ea:cd:ca:62:56:
                    1e:3b:48:2c:76:8e:a3:d0:65:0c:e6:a4:29:23:c6:
                    48:71:fc:fd:8e:4c:70:38:8f:f8:a0:ff:ea:21:05:
                    c0:ae:df:f2:f7:11:5c:b6:f8:d0:7d:ef:60:72:36:
                    b9:98:6c:0b:4e:84:86:1b:0e:c5:2c:ff:52:f9:af:
                    11:8d:d5:ae:db:17:68:52:6b:d7:27:93:7c:9a:fa:
                    52:7e:7e:14:0c:64:b1:1a:89:1f:27:32:8d:9a:63:
                    25:eb:05:05:a1:b4:8a:98:19:1c:08:21:69:6c:7e:
                    94:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D8:75:54:60:86:36:4D:57:0E:CC:40:E3:8C:4D:2A:96:10:1F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f46cf55-a7a1-360b-a280-e176b99e47d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:3e:bd:8b:c7:91:19:38:11:72:01:4d:04:91:e8:98:0f:
         1b:f0:8b:1e:37:53:7b:5f:52:29:a3:ed:f8:dc:22:9f:ee:74:
         ae:f4:b6:3a:6d:de:c3:9b:d4:db:d2:35:c6:b3:15:bf:a9:1f:
         a2:a3:e5:96:9d:53:5f:f5:a6:62:3b:fc:b7:36:b4:fe:36:13:
         ed:d9:a3:e6:81:10:2c:50:2a:41:82:13:8c:be:c9:db:8e:d4:
         e9:03:fe:93:87:26:6c:33:9a:69:f6:54:be:04:d6:cc:e1:0d:
         4a:45:e1:5a:2f:8c:0f:d2:7d:ce:0a:65:f3:3b:33:54:48:c0:
         8f:3e:77:4f:30:71:77:65:f0:ad:32:6d:04:70:08:2d:69:ca:
         19:89:2b:6b:6d:ba:16:cb:a5:70:b8:81:56:1a:5c:36:8e:0a:
         08:ac:1c:f8:1b:2a:fd:ec:3f:9c:9a:a7:78:53:b2:85:01:c5:
         91:25:db:57:90:57:2f:90:6e:17:67:3b:71:ce:a4:d2:36:f6:
         c9:c7:90:47:b0:ff:34:0f:b4:5d:7a:57:0c:62:f0:1e:85:96:
         e2:03:97:c4:e7:4f:91:71:3f:ac:db:b5:63:0d:17:6b:5f:4c:
         49:e6:2f:d2:84:c2:73:55:06:4f:e9:2d:aa:0d:84:d5:e1:9b:
         8b:22:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:20:33 2026 by rpki-client