Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9adc897-9049-318d-8e45-de757d0ccd44.roa
File:                     c9adc897-9049-318d-8e45-de757d0ccd44.roa (raw, json)
Hash identifier:          99SRbZtADPnd2IFZosN5tDiMwO+k/8OWKQv5QKusbzk=
Subject key identifier:   F6:8B:35:C6:92:80:B1:8C:6D:1F:B8:D8:71:7D:4C:59:B9:CC:1C:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78A52D4CF6839AA2B527F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9adc897-9049-318d-8e45-de757d0ccd44.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13367
IP address blocks:        66.41.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8a:52:d4:cf:68:39:aa:2b:52:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=93c84e90-3928-4254-bf9e-10faf886748f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c5:93:10:82:f4:6e:33:46:73:48:2e:52:05:
                    15:36:b8:cf:70:a4:3d:e5:c1:9b:b3:a1:45:0e:de:
                    c8:0f:09:f3:4d:64:86:10:4f:3b:97:78:f4:30:1f:
                    3d:52:57:f8:37:6b:c6:eb:91:00:62:fb:26:77:27:
                    8b:13:20:62:ac:39:bb:0d:72:45:11:cb:5b:bf:6a:
                    69:e2:b1:fd:e3:94:a5:68:9e:d0:3b:d7:d9:03:0a:
                    55:57:dd:b8:34:a9:76:07:fe:bb:ce:d8:cf:8d:ba:
                    fd:fe:8e:d6:15:26:14:f8:05:24:99:89:17:06:43:
                    5c:e8:3f:fe:25:e8:3f:51:ad:91:c4:6b:be:a7:e4:
                    8a:95:05:be:df:0c:4e:43:ab:e4:9b:81:5b:a9:99:
                    30:28:07:61:18:a4:f4:36:fc:3c:3d:51:0f:72:09:
                    c7:db:48:e4:e2:c4:d5:1c:54:3c:ab:64:31:15:a5:
                    d3:79:9d:dc:97:6e:13:7e:dd:62:da:0e:5e:f9:6f:
                    9e:e0:36:4b:90:15:7b:3b:f0:f0:63:c0:45:e9:54:
                    9f:d2:65:aa:68:f8:c3:11:36:02:59:2e:a2:98:2e:
                    8e:06:f0:32:bc:12:ba:13:0d:79:15:ae:20:31:7e:
                    0e:df:5f:63:2c:40:12:be:cb:f5:d6:42:34:be:c4:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8B:35:C6:92:80:B1:8C:6D:1F:B8:D8:71:7D:4C:59:B9:CC:1C:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9adc897-9049-318d-8e45-de757d0ccd44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:a9:83:32:ed:46:3a:ca:37:ba:82:fb:5b:d8:ea:e8:bf:
         df:c6:2b:f4:92:30:52:4e:42:06:9f:f9:37:1d:1d:91:e7:05:
         99:df:95:38:34:1a:85:ed:10:9e:61:c0:99:05:23:e0:3b:57:
         76:b4:1a:05:06:e9:13:d2:c2:7d:60:e4:44:1e:eb:d5:46:b1:
         e8:e2:a9:2e:b5:9c:0f:4f:c4:9b:75:c7:b4:15:9c:35:df:6f:
         9d:b0:60:db:12:40:c7:63:1a:c6:14:6c:2f:b9:3f:d7:79:ea:
         ad:91:d4:6d:57:7d:4d:ac:b1:5f:6f:98:a4:cf:37:57:d3:5d:
         05:fb:24:b6:4b:45:01:4a:f5:fe:53:c6:ca:97:4e:70:f9:09:
         28:6b:22:e4:34:77:5e:00:a8:14:ca:9f:82:09:65:2d:a2:4f:
         d6:46:49:6f:a7:4f:0b:53:6e:6e:93:02:e5:a6:e1:1b:c5:2a:
         69:19:4e:2a:45:dd:57:e8:df:02:d7:a9:b7:b4:c3:e9:66:3e:
         80:31:4a:e8:53:17:1e:62:0c:7e:27:0f:10:fd:06:d4:04:ad:
         ca:3c:5c:cf:6a:cd:81:41:6a:47:e6:af:22:20:06:fa:11:4f:
         44:62:e7:89:4c:e5:ea:2a:50:4f:25:de:11:63:5c:51:c0:ec:
         ab:32:9f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:58:22 2026 by rpki-client