Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/05b1fa2e-2611-395f-9aa8-5634243ff82a.roa
File:                     05b1fa2e-2611-395f-9aa8-5634243ff82a.roa (raw, json)
Hash identifier:          NpccBmeFsIW7hrBIEVDjZYdnpWKkz2TQaBPz2GJtOw0=
Subject key identifier:   BF:64:5B:9E:75:F1:98:16:51:72:7C:F2:AF:70:65:4F:66:EC:48:78
Certificate issuer:       /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial:       010D0C9F4328584EE921EEFFCA1C198F371BD660
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/05b1fa2e-2611-395f-9aa8-5634243ff82a.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     400587
IP address blocks:        109.205.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:ee:ff:ca:1c:19:8f:37:1b:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=95a35621-d5d5-4693-bd93-8602ec649a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:55:02:bb:d9:23:07:8a:f7:ba:30:08:c2:
                    90:da:be:b9:b6:0c:97:9a:0b:3c:e6:dc:c5:4e:48:
                    17:6c:ba:f1:8c:fd:5a:fd:69:06:eb:38:37:18:fb:
                    60:06:e0:8f:df:e3:ba:25:8b:3c:02:6b:33:aa:b7:
                    cb:ab:65:71:cd:c6:21:30:1e:f9:16:c0:98:a1:b6:
                    97:4a:ef:92:df:6f:57:89:51:60:14:d5:3e:e2:77:
                    6f:fa:a7:b4:b4:9d:06:8a:f0:ff:3a:6d:a8:0f:c8:
                    11:c8:61:35:37:81:c8:a3:c0:b2:75:b5:b7:f7:f2:
                    08:4f:71:86:3b:8a:64:8f:0a:f4:50:fa:3a:79:29:
                    75:a5:7b:d2:d9:b2:46:72:26:4a:0c:df:37:61:7d:
                    19:c4:5b:49:76:10:88:bc:31:d4:c3:10:6a:a8:4e:
                    d1:b1:dd:05:2a:6c:11:82:c0:37:1a:65:87:20:b1:
                    ed:f3:12:0e:21:f1:42:af:32:ba:c1:8b:a3:6b:d7:
                    f3:e9:73:81:bb:25:30:43:3f:23:57:28:0a:96:88:
                    ad:51:a8:ec:ef:d1:65:e4:63:d4:05:cf:71:0a:55:
                    c7:46:85:65:ec:cc:ec:ff:f1:05:1e:f8:4e:4c:1b:
                    e9:0f:e0:bc:c9:b3:5f:c4:62:0c:92:a5:22:45:37:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:64:5B:9E:75:F1:98:16:51:72:7C:F2:AF:70:65:4F:66:EC:48:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/05b1fa2e-2611-395f-9aa8-5634243ff82a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl

            X509v3 Authority Key Identifier:
                keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d4:a9:19:61:84:35:3d:c1:61:31:86:08:0f:77:c7:dd:07:
         69:a3:aa:be:85:22:ad:3e:76:05:84:03:9b:fa:87:55:29:70:
         f5:5d:0a:6e:a7:ba:93:ee:30:82:61:9f:fa:e5:15:a0:35:b7:
         f5:60:be:33:94:f7:a2:69:05:17:87:61:04:c1:fd:b2:67:6c:
         6d:6d:0c:ea:94:ec:c2:40:70:43:54:ed:c7:b3:ee:bd:77:bf:
         10:53:ed:42:ae:64:80:d8:17:3a:16:7c:36:1e:c3:46:31:b2:
         00:80:f4:59:52:c7:e0:ce:e1:54:94:00:74:23:7a:04:b8:cf:
         35:43:68:7c:4c:20:39:4f:74:8a:4b:57:dc:9d:38:82:d5:18:
         7e:d0:d1:8a:87:da:ca:91:12:9d:ee:20:cf:c1:90:13:91:67:
         7f:17:73:65:d7:e0:9e:7a:45:4f:2a:ea:f8:d3:cc:f8:45:26:
         14:31:73:5f:6b:1f:6d:e3:d9:b3:ec:2d:93:05:7e:af:8b:d7:
         13:3e:d5:6e:b9:8a:ae:ce:6d:e9:c4:4b:0c:89:3a:6f:9d:e6:
         16:0e:50:df:69:5e:f8:44:3a:28:c8:fb:47:09:c8:57:e2:00:
         f9:46:9c:9a:00:fa:01:19:54:cd:eb:95:2f:15:a1:a7:0f:47:
         ef:63:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:13:13 2026 by rpki-client