Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/bffe4b47-a010-3d20-8f69-87067738401f.roa
File:                     bffe4b47-a010-3d20-8f69-87067738401f.roa (raw, json)
Hash identifier:          hlPe8IsR0LZV0Ld2dWyh8HIKUjgRQnCU97RiaXo5oWY=
Subject key identifier:   2E:DD:05:AD:16:83:39:82:76:5E:6D:37:E4:34:56:43:1C:66:9E:47
Certificate issuer:       /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial:       010D0C9F4328584F549DAE9EB7E9065B8D5388C0
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/bffe4b47-a010-3d20-8f69-87067738401f.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     16992
IP address blocks:        66.37.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:ae:9e:b7:e9:06:5b:8d:53:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=ec043a27-7da8-4834-b1f8-f58b79aa8a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:ac:13:a3:aa:cf:4a:c8:cf:dc:1c:79:d2:
                    1a:a5:c1:f1:f6:6e:d1:2e:58:c1:2f:aa:7c:88:7c:
                    ae:3c:af:8f:8c:b0:db:c4:66:61:7b:c9:71:89:0a:
                    8a:c6:dd:20:52:88:e5:13:b4:16:57:65:bf:da:fa:
                    73:cd:dc:a3:02:5c:99:8b:ba:c4:05:f3:c2:69:b8:
                    b6:89:b8:e7:e1:55:50:01:28:be:4e:01:1a:ed:04:
                    56:f9:9a:79:12:9c:66:2d:50:3c:ca:64:54:15:a1:
                    bb:85:84:22:d3:ae:85:8b:d3:f7:b6:24:d7:57:99:
                    c9:72:b7:50:b8:fc:a5:e0:33:70:d2:0e:dc:5b:a5:
                    fb:4d:9a:e5:20:95:bd:e4:af:ee:59:11:fd:9f:d4:
                    b5:99:2a:48:d9:89:fe:37:87:c7:c2:d5:af:d5:40:
                    5a:a7:9f:df:ed:ea:11:b8:74:f2:c1:26:90:32:ee:
                    14:2d:cd:0e:5a:ae:88:e1:c3:77:c9:07:ea:45:2b:
                    38:f3:f1:a6:90:86:96:dc:c4:6d:b6:be:5b:d9:6c:
                    3f:41:8d:a1:03:1d:33:d2:a6:87:e6:17:4a:99:22:
                    47:1d:e0:04:8c:a2:ba:1e:85:53:31:64:d7:f2:a3:
                    14:30:f3:42:e1:94:cd:8e:bf:97:ae:fc:e4:54:49:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DD:05:AD:16:83:39:82:76:5E:6D:37:E4:34:56:43:1C:66:9E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/bffe4b47-a010-3d20-8f69-87067738401f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl

            X509v3 Authority Key Identifier:
                keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:25:1c:18:2c:f7:94:82:c4:ea:65:b4:00:8f:b6:0a:73:0c:
         59:5b:7d:74:83:36:b2:40:5a:67:99:4a:c9:6f:95:ad:84:76:
         64:8c:2d:bb:cf:8e:7f:08:8f:79:7b:db:bf:6e:f2:0c:4d:0d:
         68:ea:c9:a1:44:f0:c1:d0:c2:3a:b2:cd:28:fb:44:37:8a:7c:
         e5:c0:67:ee:96:45:55:2a:9e:f3:dd:c3:8b:4e:89:8c:c9:04:
         42:6b:1a:d3:61:79:34:da:f0:be:fb:08:61:22:da:99:ac:65:
         43:99:1a:09:fb:d7:19:d7:93:9b:4f:75:2d:23:c9:1b:5c:e4:
         aa:86:bd:6c:f1:8a:c2:d5:35:6a:05:3b:13:4b:cc:7b:93:a4:
         dd:cc:c5:21:e6:6a:0d:42:02:0a:80:15:82:55:23:db:4e:e4:
         34:cc:7c:07:df:20:29:0b:32:9e:05:91:20:fa:a4:7f:62:f3:
         da:fe:fb:13:63:86:b6:11:c8:ad:2e:f3:16:73:f4:97:e2:f4:
         90:98:69:92:60:d2:b1:4c:96:42:f9:42:0b:d5:fa:06:b1:9b:
         b7:50:5f:c7:c7:0c:38:fd:5f:f1:45:10:59:2b:4d:8e:06:23:
         8a:05:e6:89:fc:a9:ee:1d:bc:06:6b:81:7a:42:57:3e:f3:1c:
         cf:56:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:38:09 2026 by rpki-client