Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/6216f178-50d6-3dd1-9bf8-fed90d50752e.roa
File:                     6216f178-50d6-3dd1-9bf8-fed90d50752e.roa (raw, json)
Hash identifier:          btrPWZz+VjxO8bw53enHHNZclz1wTdRt0iRepD3YMiY=
Subject key identifier:   B2:BF:22:19:25:9D:9D:57:B7:07:FE:84:1B:0C:39:2E:C2:63:F2:FB
Certificate issuer:       /CN=1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed
Certificate serial:       010D0C9F4328584F4975ECBE66E798618DBF6B80
Authority key identifier: 60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/6216f178-50d6-3dd1-9bf8-fed90d50752e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18671
IP address blocks:        66.180.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:ec:be:66:e7:98:61:8d:bf:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8c143e64-17f4-49a2-8bdc-1d10ef33445e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:b3:91:ef:4d:2e:b4:0b:58:36:7d:b5:24:
                    0b:6a:02:64:de:0f:e6:6a:9e:50:82:9c:a4:71:b0:
                    53:e3:d8:f9:91:c6:46:5c:ba:cc:ee:6c:22:25:43:
                    47:85:3c:d6:8e:db:a8:8f:30:7a:a6:94:8d:a5:d0:
                    d0:2c:ff:eb:73:89:c3:5f:ea:48:5e:cc:df:01:cb:
                    48:91:ec:95:fb:e9:36:ca:af:4d:30:ba:eb:d8:63:
                    09:da:be:4d:87:06:5a:48:8b:72:ea:10:da:a1:68:
                    69:27:82:95:17:26:5d:bd:c9:d6:37:56:3d:32:ce:
                    69:28:ed:ba:e9:66:5b:f4:ba:37:52:fc:ad:57:3d:
                    5e:20:17:b3:59:2e:44:1f:a4:81:48:88:ac:32:92:
                    b9:47:c4:9d:dd:a0:fc:9e:5a:b5:0e:0f:c3:f5:25:
                    09:fb:33:fe:cd:fc:c2:2e:d6:2b:46:3b:93:4c:b4:
                    4b:0f:64:fb:fa:94:3d:89:d9:e8:f7:27:e6:a5:08:
                    a2:65:ee:cc:0c:6e:08:e7:b0:9e:a7:11:34:e4:56:
                    d8:6b:f2:02:63:64:90:f9:ed:3c:91:2e:3c:d9:be:
                    88:52:b7:8e:5c:a7:a5:f8:01:b9:14:5d:73:03:24:
                    47:e6:b7:5a:05:da:ae:8a:2f:82:04:68:77:40:75:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BF:22:19:25:9D:9D:57:B7:07:FE:84:1B:0C:39:2E:C2:63:F2:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/6216f178-50d6-3dd1-9bf8-fed90d50752e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.crl

            X509v3 Authority Key Identifier:
                keyid:60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7c:ea:e7:90:39:65:a4:0d:78:ef:bc:bf:f5:76:97:57:3f:
         b2:a0:1d:37:55:34:16:e0:68:64:7c:02:89:53:c6:12:e8:ee:
         c7:7a:41:e0:bd:ff:9f:6a:14:63:d8:61:27:04:a3:96:3d:a3:
         0f:54:f1:6b:bf:d3:55:f4:f1:07:70:d4:a8:43:00:fa:58:43:
         43:55:6e:00:24:fa:52:a1:db:34:82:ea:21:74:b8:45:07:6e:
         03:ec:45:41:dd:b6:fa:c5:d3:1e:e4:6d:f3:8f:51:71:a9:d2:
         26:35:d7:a8:a2:b5:d6:e2:80:73:48:43:f3:94:3a:f3:e5:8b:
         e7:d7:8a:0b:99:bb:71:58:12:8e:ef:b4:54:65:34:c8:1a:c4:
         71:cc:09:2d:0c:eb:73:5b:8d:b1:28:1f:ff:59:e9:f8:04:cb:
         5a:64:2a:ad:21:cb:3e:1c:a0:fe:67:39:51:cf:6c:2b:6a:27:
         cd:30:10:94:62:a4:07:a0:11:66:f2:e8:48:9b:67:c4:59:d6:
         43:61:76:6b:c5:dd:42:dd:a2:25:5c:66:4a:a5:8d:64:82:9b:
         5c:ca:ea:b1:03:45:28:66:2b:08:5d:e9:75:60:46:66:99:7e:
         a2:36:44:35:7e:66:1f:b1:d9:15:c4:ec:27:5e:27:b1:3e:80:
         4b:c5:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:58:24 2026 by rpki-client