Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd/dd273106-839c-3764-a178-0c89a0d646b0.roa
File:                     dd273106-839c-3764-a178-0c89a0d646b0.roa (raw, json)
Hash identifier:          gt9mgz+D0lUh7Nq1rwzeklRIEGrIsM4cFZ1QGskd794=
Subject key identifier:   FF:61:5E:57:65:D6:34:6F:16:83:63:3D:0E:08:40:D9:5F:71:7C:14
Certificate issuer:       /CN=e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd
Certificate serial:       010D0C9F4328584F409EF41210251F700C9D5100
Authority key identifier: F0:DF:BB:37:B1:51:A0:4D:A0:B4:6A:B8:B6:82:9F:9B:FB:F9:45:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd/dd273106-839c-3764-a178-0c89a0d646b0.roa
Signing time:             Mon 21 Sep 2026 21:07:27 +0000
ROA not before:           Mon 21 Sep 2026 21:07:27 +0000
ROA not after:            Sun 20 Dec 2026 22:07:27 +0000
asID:                     61084
IP address blocks:        66.208.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:9e:f4:12:10:25:1f:70:0c:9d:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd
        Validity
            Not Before: Sep 21 21:07:27 2026 GMT
            Not After : Dec 20 22:07:27 2026 GMT
        Subject: CN=59087a92-1413-4ff5-9e02-4a08521ba772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4b:49:71:30:42:6d:cf:0b:45:86:f2:23:bb:
                    f8:e2:97:e0:77:17:00:a8:9a:ac:e3:b7:65:4d:0a:
                    79:00:55:f3:33:2d:69:50:8d:fb:ca:82:15:af:25:
                    6c:0d:c8:0a:2e:a2:ed:46:5b:9a:67:5e:1f:fb:09:
                    a3:a4:1d:23:bd:be:15:74:7d:7d:ae:8a:37:aa:ec:
                    86:80:63:a3:54:70:63:41:17:51:4b:6f:81:8c:7f:
                    42:00:59:f1:ea:94:7e:4b:84:ec:e5:7a:cd:36:a6:
                    9b:60:dd:51:6d:69:7f:f2:53:59:0d:47:10:d6:61:
                    f8:e1:db:50:19:29:ae:39:e2:cb:7d:d1:a9:40:87:
                    b5:15:ce:fd:a6:4c:cc:2b:58:d3:65:92:fc:e0:ea:
                    15:7b:bd:0a:e6:3d:ec:62:c1:cd:69:ac:b7:b7:28:
                    83:cc:05:a9:43:cb:cd:09:c3:1d:01:c0:15:8a:03:
                    3d:9f:e7:f1:4d:d1:d8:86:87:fe:6f:e1:84:36:8c:
                    fb:07:b4:32:a7:62:f3:23:09:61:bd:d5:66:42:5a:
                    98:a5:14:99:a9:68:95:2f:d7:82:12:d5:e0:c0:17:
                    d0:f5:07:1a:2c:98:bd:96:fb:55:eb:3f:72:0f:61:
                    6b:7d:d1:99:a9:22:e3:a1:f5:40:61:08:6f:94:89:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:5E:57:65:D6:34:6F:16:83:63:3D:0E:08:40:D9:5F:71:7C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd/dd273106-839c-3764-a178-0c89a0d646b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd.crl

            X509v3 Authority Key Identifier:
                keyid:F0:DF:BB:37:B1:51:A0:4D:A0:B4:6A:B8:B6:82:9F:9B:FB:F9:45:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:70:44:de:c1:26:90:4e:12:a9:27:ca:4e:02:04:ef:e7:00:
         c8:a7:c0:73:26:f9:b9:d5:79:47:95:e4:32:c6:9e:6f:64:10:
         de:a6:d3:e5:7c:ef:ad:79:3f:f4:63:27:8e:68:43:4a:91:70:
         7e:75:55:a8:b4:87:76:ad:80:a9:87:ab:da:b6:55:4d:e5:9e:
         f2:df:73:7c:3a:7d:f7:00:f1:e6:26:0e:fa:54:7e:ec:6f:6b:
         b3:e6:a7:d4:18:7d:7e:5e:4f:38:2d:99:4a:78:28:94:e4:3c:
         5c:2c:fc:9f:81:f3:41:a2:56:b2:7c:42:ad:ad:a9:91:be:d1:
         81:b2:e5:66:1c:d5:22:5f:04:df:2d:b0:a3:d7:af:9a:45:66:
         86:d3:a9:ee:14:f4:58:85:05:d4:77:a7:c2:74:eb:72:68:26:
         de:f7:8c:e3:a2:cf:f9:0b:ea:cf:e7:5b:cf:05:d1:24:1d:7a:
         3a:59:32:bd:1b:62:7f:20:35:0c:ae:f1:f1:65:c4:ad:58:30:
         f7:c9:98:47:49:40:af:0c:cb:74:2d:24:a9:04:3e:cb:ea:1d:
         89:b3:86:23:d8:4b:95:32:29:c9:09:11:e7:4c:ae:44:19:a3:
         ac:63:5b:29:30:4c:a7:2d:ad:7e:65:fc:9c:20:6c:d6:be:87:
         a4:a8:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:51:06 2026 by rpki-client