Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa
File:                     14949f9b-6dc4-3f59-ac26-e099378e8cef.roa (raw, json)
Hash identifier:          Rv8QJntZgeNsQLH9Wna+ksf9891IRgh99cdvuws4OD8=
Subject key identifier:   45:58:30:04:B1:EC:14:9C:73:AA:3E:23:BB:69:BD:55:A4:4B:79:28
Certificate issuer:       /CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a
Certificate serial:       010D0C9F4328584F0D6CDCF8E7D59D3945604300
Authority key identifier: 36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        66.187.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:dc:f8:e7:d5:9d:39:45:60:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=19cd8e28-158e-44ba-991d-81e906693e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:72:49:63:b9:6c:84:95:06:07:4e:fa:a0:
                    73:27:b9:f0:66:c7:4d:7d:be:5a:9f:c1:a8:9f:ff:
                    d5:31:75:b0:55:33:d4:bd:b0:8f:79:f9:dd:2c:c5:
                    50:f1:45:86:4f:ac:ff:5d:e1:d6:0d:b5:a6:f7:2e:
                    33:c3:f0:0a:5f:96:59:11:49:f7:bd:48:18:27:6d:
                    2a:dc:bd:52:e2:24:92:07:7a:45:13:e4:3e:aa:99:
                    5a:64:c8:25:91:ed:a0:24:00:af:2b:20:5d:25:89:
                    1b:d7:00:20:8a:60:f5:e6:1d:eb:aa:f2:21:31:e1:
                    e8:d4:c8:60:a8:a4:a1:ec:54:3c:76:ec:6f:c8:fa:
                    24:c5:56:e5:ab:82:56:c5:c0:fc:21:99:ab:97:b9:
                    7f:a8:7e:18:f3:ee:ca:47:3d:84:da:63:cf:a3:b6:
                    2d:51:aa:5a:da:9d:06:33:1d:7a:fb:be:cc:4b:fd:
                    31:e3:6c:4a:e0:ca:ad:12:cc:bc:77:d7:4c:66:91:
                    de:9f:08:0c:ef:00:58:55:48:fe:83:8f:ba:1b:01:
                    1e:fb:87:c0:21:f6:3a:42:40:20:fe:9b:01:b2:c7:
                    9c:83:ab:ba:cd:ff:fd:ac:e9:16:05:7a:92:06:73:
                    dd:97:5b:f5:c7:7f:88:c3:aa:99:37:aa:1d:67:de:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:58:30:04:B1:EC:14:9C:73:AA:3E:23:BB:69:BD:55:A4:4B:79:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl

            X509v3 Authority Key Identifier:
                keyid:36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:58:92:a8:a0:73:76:1b:01:93:c0:0c:b5:5a:ce:89:32:7c:
         78:f0:02:56:f0:0f:d4:31:eb:2d:83:dd:32:73:f4:a4:82:47:
         8b:23:c4:65:b8:d4:03:db:a3:3d:e4:65:3b:98:b0:da:81:a2:
         16:e5:8f:d9:0e:0f:81:46:65:a2:d0:7f:c9:71:08:98:ca:7f:
         9e:67:e1:65:0c:a2:ea:f6:20:3e:6f:cd:9a:07:7f:6e:3f:41:
         e0:36:59:e9:6e:02:0b:a8:f4:7c:e5:32:00:36:7e:73:b2:ee:
         0e:f8:27:91:05:da:93:e6:cd:2a:fc:1a:13:21:15:67:c3:c8:
         47:76:80:64:e1:49:10:cc:cd:46:1c:85:90:59:47:64:03:c7:
         9a:a7:78:62:91:dd:a2:75:40:03:c7:bc:88:88:7e:8e:d2:80:
         c7:0a:40:cb:fe:9d:25:66:73:be:c2:63:6e:36:00:4c:79:89:
         3d:51:dd:0a:37:c0:c7:a2:74:05:ef:08:85:01:8d:33:a5:1d:
         9f:af:6b:2d:cd:4a:15:74:29:80:bd:9b:ac:f3:f9:55:96:2d:
         68:09:7d:65:aa:6b:7e:ac:28:a6:17:f5:e7:0f:65:80:99:fc:
         e6:f4:a6:38:93:77:c9:a4:f3:ea:81:64:75:7d:54:0d:35:f3:
         6f:41:c6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:53:02 2026 by rpki-client