Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/101a687a-13d0-3123-b463-f89dc488992c.roa
File:                     101a687a-13d0-3123-b463-f89dc488992c.roa (raw, json)
Hash identifier:          0+49HTo2dF3DOhS/mRYNypxBYCtkTgvhu8CFb+oQmSA=
Subject key identifier:   15:71:99:A1:33:A4:1D:A1:19:DB:D6:00:77:E2:37:56:67:D1:3E:03
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584F6DBD6DC3260CFF01517D0CC0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/101a687a-13d0-3123-b463-f89dc488992c.roa
Signing time:             Thu 08 Oct 2026 01:00:11 +0000
ROA not before:           Thu 08 Oct 2026 01:00:11 +0000
ROA not after:            Wed 06 Jan 2027 02:00:11 +0000
asID:                     198949
IP address blocks:        66.249.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:bd:6d:c3:26:0c:ff:01:51:7d:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Oct  8 01:00:11 2026 GMT
            Not After : Jan  6 02:00:11 2027 GMT
        Subject: CN=3e9fe760-060d-4719-a472-ff6508c29d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:91:83:49:31:ec:ba:97:72:cc:bc:d8:4f:fd:
                    74:fa:48:d7:7b:35:da:ad:05:cc:c2:fe:4d:a0:e9:
                    02:c9:db:67:ca:e6:3d:08:a8:45:76:32:2d:30:9c:
                    46:2a:2d:32:6a:2b:e4:06:95:b2:13:04:72:81:a6:
                    d3:b3:34:1d:da:1b:81:a6:1a:e5:f9:28:8a:04:b1:
                    82:f9:16:00:29:77:b3:c3:32:cd:5f:9c:25:ce:de:
                    6c:14:f2:f6:de:f5:e2:87:a4:0a:a5:43:fb:a2:f9:
                    93:c5:51:22:8f:6d:2e:b1:32:d0:c4:96:53:32:32:
                    2d:ea:ce:f8:45:da:ab:55:94:7a:74:5b:b3:f5:7b:
                    5a:ca:3f:ba:ba:d9:f4:7f:15:15:3d:27:06:4a:73:
                    3d:47:c6:00:df:b9:29:a5:a7:eb:6f:dc:7b:ef:a4:
                    3f:03:ee:69:bf:63:be:8b:65:64:2f:75:d0:f1:7b:
                    eb:e6:ea:12:ca:91:8a:aa:89:9d:5b:a7:9b:3d:f3:
                    7c:12:cf:ec:ca:cd:b5:c1:20:52:06:3e:bf:b5:1a:
                    fa:e6:1f:f8:33:17:67:d4:04:cd:c5:62:39:b0:61:
                    cf:39:4b:2d:bb:07:a6:30:92:15:41:51:b7:b9:40:
                    9b:29:b4:97:16:9d:82:1d:36:69:a2:a5:23:3d:14:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:99:A1:33:A4:1D:A1:19:DB:D6:00:77:E2:37:56:67:D1:3E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/101a687a-13d0-3123-b463-f89dc488992c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:32:b9:eb:00:3c:2c:5e:0a:08:94:42:a9:0c:80:4c:c3:50:
         81:eb:16:6d:d5:a2:3d:a0:19:1a:d4:a1:b4:6a:77:50:38:5a:
         eb:11:b2:90:dc:18:50:b0:ec:55:c2:24:a7:5f:fa:b6:2b:b0:
         5e:dc:a0:2a:78:41:04:a7:f0:3f:58:01:04:0c:c0:c1:2e:42:
         73:ec:b7:a5:12:0e:3c:4a:e1:27:0e:17:bc:86:6d:ad:c5:e9:
         50:ad:b2:14:a4:0b:47:33:0c:24:70:c4:d0:b6:aa:24:68:18:
         ed:83:c2:77:a9:d4:00:95:90:45:50:16:5f:16:19:45:88:4b:
         89:6d:84:3c:70:15:ab:f0:98:44:85:fd:54:ae:e8:05:25:37:
         a8:e8:58:dc:00:49:86:73:9d:76:7a:9d:fb:5a:91:19:da:74:
         72:22:77:d5:e7:7f:a0:7f:ef:3b:e6:22:29:7b:bd:71:19:49:
         72:8f:d9:ae:60:a2:ba:06:16:2a:9d:02:52:23:38:3b:d4:db:
         9f:f7:15:bf:9b:ac:8c:ab:81:1f:e8:0b:df:a5:84:da:55:98:
         cd:37:82:fb:76:cd:85:56:09:03:40:a1:bd:95:e9:83:3e:74:
         c9:1e:5a:30:dd:1c:03:a2:8f:3d:6a:b6:79:79:fa:88:69:7f:
         73:c3:78:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:45:43 2026 by rpki-client