Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/65822c3b-b52b-39ea-90c5-54326be8b9e2.roa
File:                     65822c3b-b52b-39ea-90c5-54326be8b9e2.roa (raw, json)
Hash identifier:          WvmjsYxt61t3h3RE9doK8zLn7BI3KXXcC94GPaUJrX0=
Subject key identifier:   AA:A4:A4:75:6A:0F:28:CC:CC:2A:FA:02:35:54:EC:D1:47:ED:89:A4
Certificate issuer:       /CN=4550770a-2981-4fa9-bb7d-de9c7306d120
Certificate serial:       010D0C9F4328584F3E47CBB810EEB25565759F40
Authority key identifier: 70:EB:7A:F3:32:C8:A8:D7:7D:BA:C5:54:24:81:B9:3C:18:48:A7:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/65822c3b-b52b-39ea-90c5-54326be8b9e2.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     18602
IP address blocks:        66.179.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:cb:b8:10:ee:b2:55:65:75:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4550770a-2981-4fa9-bb7d-de9c7306d120
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=64738faa-2d2b-4b2a-bc2d-886b0290e2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b5:3a:94:0c:af:fd:9d:ac:ba:bb:0f:01:53:
                    0f:8a:20:2a:50:80:3b:43:4e:d5:d1:3f:bc:7f:20:
                    27:83:23:00:17:4b:65:f9:b4:43:e3:d5:b7:00:77:
                    fd:fb:c3:80:ff:81:c5:59:4d:2a:07:2b:22:10:d2:
                    43:bb:04:20:db:24:8e:f0:8b:73:63:46:45:e2:cc:
                    03:5d:fc:1e:ae:9c:20:06:1e:8b:ca:f0:9c:ae:f2:
                    16:25:69:ce:21:62:c3:05:bc:15:3c:78:f5:97:bc:
                    8a:9e:e9:02:91:66:77:3d:59:48:56:4d:db:e4:c1:
                    17:8d:71:bb:e3:26:97:2c:f1:b8:9e:88:35:54:c4:
                    18:30:51:03:35:ae:4a:aa:34:ab:91:50:e2:2a:26:
                    3d:c7:e5:78:ee:7b:c3:78:ea:02:3f:92:01:02:68:
                    b6:0a:56:54:40:df:46:98:b5:df:25:2f:23:30:63:
                    0f:b2:60:3b:ef:d1:65:23:f6:96:80:b9:9b:58:50:
                    01:a8:92:bc:f1:57:1d:ee:82:91:e8:94:fe:84:af:
                    81:22:c6:1e:96:16:89:25:33:50:1e:46:d7:7a:ee:
                    96:46:5b:fd:1b:20:8f:01:67:de:4e:5a:14:78:c0:
                    42:88:20:86:e1:36:30:93:3f:be:9f:7d:41:fc:80:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A4:A4:75:6A:0F:28:CC:CC:2A:FA:02:35:54:EC:D1:47:ED:89:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/65822c3b-b52b-39ea-90c5-54326be8b9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.crl

            X509v3 Authority Key Identifier:
                keyid:70:EB:7A:F3:32:C8:A8:D7:7D:BA:C5:54:24:81:B9:3C:18:48:A7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:b5:ca:96:20:79:71:d1:7c:c5:8f:2c:84:e9:0b:c8:f7:
         1a:ee:84:ac:30:68:79:d8:cc:42:b3:5b:1f:55:3a:d3:7e:e7:
         bc:8d:03:9c:f8:72:56:a3:70:d6:b3:e2:32:22:68:35:61:f3:
         a4:45:2e:22:4f:bf:13:64:0f:65:03:35:8d:d5:fa:f2:77:96:
         86:4a:f2:35:15:3c:3a:d9:de:d5:4d:4f:aa:a3:cf:0b:ba:5f:
         18:b8:53:9f:53:36:2e:ca:f9:c6:ac:99:e5:44:bd:15:76:b3:
         fa:ac:41:e9:fd:dc:bf:3d:43:22:62:43:bc:81:90:38:62:3d:
         bc:1f:98:1d:f8:dd:ba:8a:3f:05:c4:e3:62:d3:33:2c:a8:14:
         6b:ff:25:36:3f:d4:e5:70:06:32:02:e4:65:b3:20:11:fb:b7:
         cf:12:9e:85:87:03:00:24:3c:5b:a2:82:fa:8d:35:ac:b5:b2:
         21:26:f1:6e:d5:04:a0:88:12:9c:ca:ef:7c:24:b9:60:1c:a3:
         75:22:88:db:59:a9:bd:13:4e:9c:9e:98:a8:a3:ee:02:8e:3b:
         12:61:9a:06:1d:e3:7b:c9:d6:1f:5e:5a:dd:cb:25:47:a3:f7:
         cf:1a:03:1b:29:5e:bf:ad:4c:e1:95:d6:ed:c4:f1:49:11:75:
         41:ca:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:59:42 2026 by rpki-client