Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/1238197e-c803-32c8-a947-689ae5d99183.roa
File:                     1238197e-c803-32c8-a947-689ae5d99183.roa (raw, json)
Hash identifier:          ED1vwODiVOyWkcFIOxMXcuACp3kiIEzUwBo/YLNeQus=
Subject key identifier:   20:EE:4D:D4:19:F0:AE:6F:6A:CE:FE:56:53:EF:F0:50:0C:C7:94:C4
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584F0D6CE41E796765198B80EDC0
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/1238197e-c803-32c8-a947-689ae5d99183.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     21713
IP address blocks:        66.172.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e4:1e:79:67:65:19:8b:80:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=34c93267-6669-43d4-919c-03ead474d98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4d:bc:fd:a5:ac:d2:ba:2a:71:58:cf:3e:6f:
                    72:e0:2a:19:2c:4b:1f:7f:c3:c7:9d:09:c6:f3:ca:
                    ad:b7:a7:df:53:92:65:ac:c5:b6:ef:bf:1a:c0:0c:
                    24:0d:1a:62:7f:ee:d0:20:54:74:1b:cb:45:6e:d9:
                    a0:15:d9:ae:78:5d:c5:88:9c:2d:c4:cc:4c:4d:e3:
                    f1:10:67:b7:ce:2d:f9:01:64:3a:d2:94:95:50:30:
                    db:62:b5:a2:99:c9:23:3f:06:07:82:b5:3c:f4:a0:
                    c8:07:77:78:01:62:14:6c:f0:52:a7:83:a8:da:8a:
                    7c:ae:d7:0e:1d:f2:29:bf:14:87:08:21:ec:96:fb:
                    90:e5:bd:8b:0e:e8:5b:f8:7e:a4:7c:b9:3d:1d:5b:
                    03:77:10:2e:95:89:c0:83:89:2d:1c:eb:ee:17:a1:
                    66:2f:5d:20:af:15:13:b0:29:c2:50:48:d8:d9:30:
                    af:f6:81:e9:6b:ac:9f:44:9d:91:21:a8:c2:ab:90:
                    03:38:15:a6:cb:0f:17:02:0c:77:1d:30:8d:d0:5c:
                    0b:b9:27:d7:24:49:c6:92:0a:61:8c:1a:02:c2:c0:
                    13:3e:e8:24:7b:10:d1:71:82:49:7c:3a:99:6b:85:
                    b7:1d:a7:23:2e:4b:65:3c:be:39:d9:8f:8c:53:0b:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EE:4D:D4:19:F0:AE:6F:6A:CE:FE:56:53:EF:F0:50:0C:C7:94:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/1238197e-c803-32c8-a947-689ae5d99183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.172.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:31:3f:2c:02:22:85:50:27:c7:65:fb:38:a5:c6:0a:2a:
         67:5e:82:0f:dd:09:ca:aa:81:9b:96:e5:42:14:16:81:a0:0b:
         db:10:6c:95:f8:47:9c:e2:f8:34:12:88:67:14:d8:6c:05:32:
         c3:75:86:55:5e:37:ed:ab:bf:22:ce:1f:aa:66:a6:ad:92:62:
         e6:d5:3b:f5:75:cd:e7:8c:e4:8c:4e:45:d8:79:37:dd:c5:89:
         e0:e8:d8:9c:fc:6c:3e:99:24:ce:d8:46:7c:ac:5b:68:39:7c:
         b7:21:f4:48:85:6c:16:0c:db:7e:8a:d8:78:fa:60:c0:b3:af:
         a7:ae:84:09:20:7f:ba:8f:72:f8:ef:3d:2e:cf:c5:6e:e8:f5:
         a3:31:d9:2c:d0:2d:a5:4a:de:29:ed:88:3e:66:cd:ab:84:16:
         8b:5f:37:a8:7a:af:c4:ea:28:b2:4f:5c:c9:35:c7:e2:be:4e:
         42:ba:4b:b3:b1:59:ef:3c:a9:17:66:7d:de:46:35:e5:0f:d0:
         93:4f:46:93:ce:0b:74:2c:76:f8:5f:c6:e2:4a:2f:9e:f7:31:
         4a:12:1b:67:57:96:de:5c:05:47:b8:a4:5b:02:64:8f:b6:b5:
         27:63:df:55:d2:09:66:e3:f0:37:9f:c2:1e:db:7e:a4:28:51:
         25:4f:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:33:42 2026 by rpki-client