Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/5648e0e7-f721-3218-b2cd-15162c532a4f.roa
File:                     5648e0e7-f721-3218-b2cd-15162c532a4f.roa (raw, json)
Hash identifier:          Jxzfwy8GxSajsHCvIcUJTgJVO0GULS+uIAJF5ZGa6Hw=
Subject key identifier:   94:74:27:45:A0:DF:0C:B8:44:CC:8E:E6:D3:41:4D:C9:B6:2A:5D:C3
Certificate issuer:       /CN=ae74ee3b-204b-4c4e-958f-cd716b99ed12
Certificate serial:       010D0C9F4328584F51D2A4AF417A3F5E5338EC80
Authority key identifier: D4:C5:5C:07:DA:77:69:29:BF:B3:81:C4:9A:94:5C:C7:97:69:6B:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/5648e0e7-f721-3218-b2cd-15162c532a4f.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     60725
IP address blocks:        66.178.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/ae74ee3b-204b-4c4e-958f-cd716b99ed12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/ae74ee3b-204b-4c4e-958f-cd716b99ed12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a4:af:41:7a:3f:5e:53:38:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae74ee3b-204b-4c4e-958f-cd716b99ed12
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=c8af3518-5bf8-479e-80fa-8c12192c5238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:81:f7:09:7c:68:a7:4d:b4:8d:d4:65:0a:55:
                    de:65:3a:29:e4:b5:16:a1:a2:0b:26:44:8f:90:87:
                    7b:04:71:96:eb:fe:ec:85:b7:b1:12:c0:cf:13:d1:
                    46:ff:94:c3:b6:5d:fc:14:a0:3f:40:b1:8c:16:6e:
                    c7:e2:52:63:1a:14:d8:c4:93:8e:cb:f0:12:01:49:
                    10:99:de:1a:12:58:cd:41:6c:14:f1:09:99:d0:48:
                    8f:b1:fc:5c:c4:d7:5f:e1:d1:c5:5f:88:d9:c8:f2:
                    82:3d:ec:89:53:8e:27:b7:70:d6:af:6e:ef:64:ce:
                    07:6f:56:7b:f4:1a:ca:54:89:21:27:76:59:ed:5f:
                    b3:4f:a8:02:21:fc:71:66:d2:15:27:91:dc:d8:de:
                    b9:19:ee:b7:f7:45:d6:25:b8:4a:ff:29:b1:17:96:
                    cf:77:23:f3:f2:ef:47:60:9d:f6:73:67:8e:d6:e6:
                    67:90:97:c3:6f:ea:9d:a3:d8:a7:e3:bc:a0:cb:53:
                    fd:63:64:e2:e8:31:0d:6f:1d:fe:62:4d:6b:7b:42:
                    8a:13:48:b8:f6:02:f1:e4:16:42:7b:e9:7f:f1:70:
                    44:51:0b:bc:ef:68:e8:04:d2:39:de:8a:c0:8c:f9:
                    5c:f8:0f:59:95:03:0a:22:e3:9a:aa:c2:d0:31:ec:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:74:27:45:A0:DF:0C:B8:44:CC:8E:E6:D3:41:4D:C9:B6:2A:5D:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/5648e0e7-f721-3218-b2cd-15162c532a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/ae74ee3b-204b-4c4e-958f-cd716b99ed12.crl

            X509v3 Authority Key Identifier:
                keyid:D4:C5:5C:07:DA:77:69:29:BF:B3:81:C4:9A:94:5C:C7:97:69:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:67:9e:58:b0:2d:2f:e5:9d:d0:c5:1e:82:cb:69:f3:29:be:
         bb:a2:0d:ac:30:c3:fb:41:c7:16:41:e1:49:ab:15:f9:f9:a3:
         a3:30:d5:7d:77:cb:7b:73:5d:9b:58:8f:21:8c:97:6e:1b:27:
         7b:fe:a4:cf:9d:52:42:c3:1a:df:57:a5:01:c3:f3:94:37:f4:
         f6:a8:e6:3b:0b:5c:17:20:13:1e:20:28:64:4e:cc:c4:e5:74:
         fd:2c:76:2a:1e:5c:1d:1f:1f:a6:58:1e:ae:d5:b1:98:00:86:
         bc:2b:cd:b0:e6:78:ad:e2:1a:1a:b9:21:d2:64:8f:22:4c:de:
         df:78:01:68:fa:8a:c5:54:99:60:c0:b6:27:ad:76:ab:2b:6d:
         7b:1b:9c:07:8c:5c:27:31:8e:83:e4:7e:98:16:a8:c2:2a:11:
         8e:d5:6a:5c:ac:8f:4b:85:9e:07:63:8a:87:37:03:e0:80:94:
         02:5e:f1:c3:ab:45:2a:73:7a:e4:41:d3:7b:88:22:77:65:33:
         ee:42:45:b0:a8:6c:8d:94:ea:c2:18:94:df:1e:c8:5b:d5:ac:
         06:87:38:b7:af:3b:a4:7d:bf:1e:8b:a8:3e:70:a6:e2:fc:97:
         47:fc:51:e4:e9:6b:36:e7:af:4c:24:27:70:c6:bd:ef:20:ea:
         bc:98:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 04:49:48 2026 by rpki-client