Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/882427a4-2cf5-482d-ba58-bd53a3104d53/e4569706-39b2-3bb8-aa61-83624d785348.roa
File:                     e4569706-39b2-3bb8-aa61-83624d785348.roa (raw, json)
Hash identifier:          3GB3D6FvvxaqfmxvV9kDlNwYkslg3W0L8P1qbZYJG+w=
Subject key identifier:   AA:38:A8:17:5A:AC:98:1F:0C:ED:9C:0C:CA:40:A5:59:FD:1A:79:2D
Certificate issuer:       /CN=882427a4-2cf5-482d-ba58-bd53a3104d53
Certificate serial:       010D0C9F4328584F211FA7A65AC89347503CE580
Authority key identifier: 61:BB:9E:FB:7D:2E:A6:2F:56:CE:04:0E:CB:2A:85:82:E7:76:95:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/882427a4-2cf5-482d-ba58-bd53a3104d53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/882427a4-2cf5-482d-ba58-bd53a3104d53/e4569706-39b2-3bb8-aa61-83624d785348.roa
Signing time:             Thu 10 Sep 2026 14:20:54 +0000
ROA not before:           Thu 10 Sep 2026 14:20:54 +0000
ROA not after:            Wed 09 Dec 2026 15:20:54 +0000
asID:                     2729
IP address blocks:        66.33.116.0/22 maxlen: 22
                          66.33.116.0/24 maxlen: 24
                          66.33.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/882427a4-2cf5-482d-ba58-bd53a3104d53/882427a4-2cf5-482d-ba58-bd53a3104d53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/882427a4-2cf5-482d-ba58-bd53a3104d53/882427a4-2cf5-482d-ba58-bd53a3104d53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/882427a4-2cf5-482d-ba58-bd53a3104d53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:21:1f:a7:a6:5a:c8:93:47:50:3c:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882427a4-2cf5-482d-ba58-bd53a3104d53
        Validity
            Not Before: Sep 10 14:20:54 2026 GMT
            Not After : Dec  9 15:20:54 2026 GMT
        Subject: CN=234580b6-6d8e-4ef7-991f-273b275ae74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:1a:7a:22:fb:15:d8:e4:e8:f8:20:d5:c3:
                    3a:59:a8:91:e1:a7:f1:2b:f1:d7:78:88:c9:d1:72:
                    03:27:55:27:51:fe:4c:0a:40:23:18:9d:22:d7:3b:
                    17:45:d3:47:91:3c:71:63:8b:1c:17:d4:7a:65:fb:
                    45:1b:ba:36:f9:3f:3c:cb:f8:8c:d3:ba:06:11:5b:
                    e3:ad:55:93:69:a5:89:fe:2d:1e:7e:fe:a3:21:0c:
                    cc:cb:df:05:29:5d:9b:ed:d6:e6:b6:7d:bf:e1:12:
                    6c:e5:eb:5f:2f:0e:e4:00:81:ba:8d:c2:a5:ee:9f:
                    19:c5:2b:40:73:5e:e6:bc:c6:22:e2:9d:37:9c:b2:
                    f5:b1:7e:10:76:59:bc:ba:ff:39:0a:25:4d:ed:33:
                    93:66:de:52:57:7c:f9:3a:21:d7:e4:7c:78:f0:a4:
                    ed:fd:a2:1b:48:e6:59:d5:2b:d3:21:bd:f9:7e:a3:
                    c7:67:5d:fb:84:ad:26:a8:a0:03:67:9d:95:94:6c:
                    cc:6b:6f:4c:ba:70:93:b7:20:cf:c0:ea:3f:02:ca:
                    af:6b:60:13:31:e2:d0:70:2b:17:b9:bc:e7:79:1c:
                    dd:ed:62:db:b0:37:54:26:ce:b1:18:fb:6e:8e:89:
                    98:22:d5:04:be:08:d1:4e:c6:af:a1:ce:cd:5d:6c:
                    b5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:38:A8:17:5A:AC:98:1F:0C:ED:9C:0C:CA:40:A5:59:FD:1A:79:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/882427a4-2cf5-482d-ba58-bd53a3104d53/e4569706-39b2-3bb8-aa61-83624d785348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/882427a4-2cf5-482d-ba58-bd53a3104d53/882427a4-2cf5-482d-ba58-bd53a3104d53.crl

            X509v3 Authority Key Identifier:
                keyid:61:BB:9E:FB:7D:2E:A6:2F:56:CE:04:0E:CB:2A:85:82:E7:76:95:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/882427a4-2cf5-482d-ba58-bd53a3104d53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d8:e8:5a:a3:e3:b0:c6:9a:6f:fc:f5:de:ed:15:c9:0d:47:
         36:dc:ec:e3:f7:6f:72:73:52:aa:69:41:9d:f2:e6:73:a5:34:
         00:54:a4:77:a7:36:d9:b1:7c:ac:7b:cf:19:f5:6f:2d:26:2a:
         83:55:8a:e5:f9:fc:08:68:70:2e:0a:27:24:90:d2:a7:7c:0c:
         da:89:01:3c:5a:d4:46:ca:cf:ff:b1:5e:6f:0b:fb:13:10:75:
         03:1f:30:cf:43:c4:1a:4c:35:4e:9a:93:fd:81:39:62:b7:9c:
         7e:90:54:b7:26:d3:ee:49:3f:2b:33:ff:4f:61:04:53:48:81:
         71:c6:8c:cb:1d:50:d3:3c:d3:7f:a3:70:e1:a6:48:30:7d:70:
         11:91:09:73:7a:f9:67:ea:0c:7a:10:2a:b4:bc:05:7d:26:05:
         d8:6d:49:3d:d2:06:12:3d:38:65:08:7d:78:30:83:18:06:ea:
         b8:7e:12:04:2c:82:12:cc:d4:e4:4f:c4:01:45:50:5a:0e:1d:
         e8:e1:9c:77:a1:50:a5:e7:51:fb:a4:39:6f:3f:b4:0c:3d:41:
         c3:c1:f1:18:0b:1e:fc:55:46:4f:0d:2d:3b:03:60:fe:00:8d:
         f8:d0:8a:29:e0:28:6b:18:58:ec:1b:65:90:c4:61:2f:79:37:
         f1:12:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:21:41 2026 by rpki-client