Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa
File:                     66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa (raw, json)
Hash identifier:          yb/STnt8uHWQ0iP+rLg25lpDhz0faucAYZFpPclbCtw=
Subject key identifier:   C3:52:E9:A3:3C:97:AD:B8:B0:75:B1:3D:59:6D:D3:A9:21:6B:21:76
Certificate issuer:       /CN=20345bca-b793-4f14-a066-8653ac933903
Certificate serial:       010D0C9F4328584F4975B69E49FFF86430944D00
Authority key identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        206.41.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:b6:9e:49:ff:f8:64:30:94:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20345bca-b793-4f14-a066-8653ac933903
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=223831e7-f9b7-4e4c-aaeb-a5449ccd0dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:4a:fb:ec:69:86:31:47:8d:30:15:5f:5d:
                    be:01:b8:61:0e:04:4f:02:25:ab:97:0a:f3:7a:1b:
                    be:30:1c:87:87:27:16:88:1c:78:89:ef:d6:90:10:
                    91:c4:ff:f4:04:3f:28:93:ca:82:4f:da:9d:a3:97:
                    52:d9:3e:b3:ca:c4:5a:65:b2:97:9e:f0:f6:d0:37:
                    31:65:a4:30:e6:f4:6f:3b:94:3c:da:0e:91:a5:85:
                    f3:29:21:85:52:6f:2e:f8:da:3a:06:5e:cb:5f:e9:
                    a9:3c:39:4a:08:c9:aa:d8:5a:6d:f7:18:cb:13:a0:
                    4d:c7:30:d1:43:0f:a5:6c:e4:10:1e:43:59:7a:14:
                    a3:9b:2f:a1:26:46:42:78:f5:2a:36:fc:70:31:6d:
                    93:61:6e:39:61:eb:0a:8e:49:b2:db:b5:af:4b:11:
                    ab:5c:ea:78:5d:c9:f3:62:7e:18:a5:5d:11:19:04:
                    31:1d:fd:ca:96:ba:cb:75:48:2b:cc:dc:81:b1:94:
                    bf:d5:38:2b:90:13:96:3f:26:02:e2:22:95:05:0f:
                    b0:29:60:c7:5b:0c:f4:c7:fd:fb:e1:f6:18:7d:1b:
                    6e:b7:ac:ae:76:0f:a0:51:fd:a6:b1:5a:ee:17:5b:
                    af:ed:ae:d7:f0:d7:f4:1d:a0:fe:7d:18:04:ba:54:
                    66:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:52:E9:A3:3C:97:AD:B8:B0:75:B1:3D:59:6D:D3:A9:21:6B:21:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl

            X509v3 Authority Key Identifier:
                keyid:10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:2c:a9:42:73:8f:ed:70:3d:60:2b:f9:ac:17:aa:4a:cc:39:
         2d:cb:20:72:7e:e8:47:81:f0:4e:7b:2c:b6:92:3c:83:90:4a:
         04:2d:c5:23:97:9a:66:49:40:59:87:ea:9a:2d:d0:71:26:bc:
         ab:32:1f:b9:ec:00:d5:b4:16:6f:cb:e1:a1:69:c4:d0:21:5e:
         e5:8b:c8:a8:dd:2f:bb:54:b3:5f:45:00:5a:89:56:05:a0:36:
         18:f9:ae:fd:ae:b0:6e:5f:7c:f6:a6:dc:57:d5:f8:04:d4:d3:
         23:81:87:e8:75:0a:88:98:d1:c2:bd:c6:c9:42:fe:a9:e4:e0:
         c0:c6:ec:16:87:1a:0e:61:6f:d2:14:fb:3e:4e:b9:7c:a7:b4:
         ec:f9:cf:fb:aa:6c:ee:b7:13:e6:b2:6f:99:1e:a9:5e:e6:16:
         58:e7:79:86:11:d7:26:12:a5:78:d1:9f:76:fc:19:e7:ae:4d:
         8f:c3:2a:2c:35:3a:e0:7b:dd:4d:b2:93:39:40:c6:ba:b2:69:
         2d:0c:a7:ab:ff:28:c9:0b:58:c5:16:12:dd:7b:52:64:4e:26:
         1f:85:4e:33:c6:0b:2b:54:1a:94:f5:37:5e:a9:2a:94:60:9f:
         55:91:ba:09:ab:d4:3f:aa:bf:d9:b0:a3:8c:7e:d0:a5:07:22:
         b7:4c:a8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:33:43 2026 by rpki-client