Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7906bf42-e53a-32dc-b163-36903bc1d1ed.roa
File:                     7906bf42-e53a-32dc-b163-36903bc1d1ed.roa (raw, json)
Hash identifier:          vxKKKgvdxQgMiqKp508PJcJd30JrkNQFce4rKHp39XE=
Subject key identifier:   97:39:F4:FC:3E:59:51:F1:4B:CC:13:31:3A:5C:49:72:C2:1C:07:C4
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328584F119CEE06894E0B8BAA8E9C00
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7906bf42-e53a-32dc-b163-36903bc1d1ed.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     88
IP address blocks:        66.180.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:ee:06:89:4e:0b:8b:aa:8e:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=5d17a81e-e570-4dba-9e7a-0ae9db436ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:13:30:04:8e:43:fe:7e:9c:82:0a:3c:0b:
                    0d:b9:78:9e:17:dd:da:f8:c0:a7:2a:f3:34:46:df:
                    09:74:77:1c:4a:d2:9a:e8:4f:f8:87:7e:67:f3:37:
                    f8:18:a2:a5:5e:66:d8:56:a6:5e:13:33:c9:20:4c:
                    d3:55:f6:f3:0b:32:25:ee:52:0a:54:3d:d1:22:f8:
                    b4:4f:bb:e0:38:92:79:09:af:8c:74:15:f3:0d:4c:
                    ea:7f:16:6c:79:62:84:0e:a9:9a:f9:90:f9:ce:da:
                    37:00:01:5c:e1:41:26:9f:4a:ca:69:0d:04:db:a7:
                    e9:ee:2e:48:42:2e:28:f1:8c:46:9b:b9:fb:25:59:
                    7a:71:83:22:14:ab:d7:cd:77:bb:6d:aa:36:ab:43:
                    53:1f:bd:56:5a:47:c1:07:03:c0:81:61:86:c7:a6:
                    d6:9d:97:e8:b2:5e:3b:b4:e8:91:88:ed:d9:10:4f:
                    00:61:fa:9b:d9:cc:29:24:84:d0:40:69:64:ed:b2:
                    29:c0:15:fd:46:42:3b:4d:e1:fa:37:8c:d6:f4:2a:
                    c8:4a:e3:cc:d5:55:68:4d:c4:f3:10:58:0b:95:a0:
                    a0:d0:c1:49:22:79:51:3d:49:c7:ee:d6:4f:fa:8c:
                    3d:11:95:8c:2e:8f:56:a2:53:9f:e9:03:8f:39:c6:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:39:F4:FC:3E:59:51:F1:4B:CC:13:31:3A:5C:49:72:C2:1C:07:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7906bf42-e53a-32dc-b163-36903bc1d1ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:f6:2d:29:0d:64:33:15:ca:85:b0:8b:b3:1a:ac:04:d9:07:
         7a:67:47:c1:40:fd:7e:ea:dc:2f:e3:ae:dd:80:d5:6a:af:30:
         18:25:85:0b:44:9b:df:75:5b:16:11:a1:d7:b6:c7:b2:e7:5d:
         b3:f7:34:9d:ef:52:02:8b:d5:30:a6:5b:93:17:cf:d1:07:97:
         68:98:8b:4f:d1:34:cc:e0:1f:46:d2:37:38:be:af:56:2e:91:
         d2:96:41:5a:c7:13:ba:2e:f0:67:0d:ba:eb:1f:4c:e2:6f:47:
         5a:b6:5f:c3:f7:7c:34:0c:73:07:55:31:b5:9c:8f:cb:3a:c1:
         cc:6d:7f:df:b9:1d:36:6b:c6:1f:4a:fa:62:01:17:33:44:51:
         fd:9f:b4:e4:c6:30:d4:bc:1f:2d:44:a8:ac:fd:13:90:71:b5:
         11:01:51:a2:19:63:7a:fe:d8:6c:08:9f:98:fb:eb:7e:31:02:
         81:22:b9:d2:09:1a:01:3d:e2:21:24:e0:16:1e:1b:4c:63:23:
         ff:4e:5f:1a:bd:4c:c2:f5:16:99:d1:f9:8c:5d:b0:04:46:84:
         3d:03:ff:03:4c:71:d2:ee:d4:8d:9e:41:d0:8a:f6:c0:d1:b0:
         9c:b2:b4:fe:d2:e9:03:c2:8c:e8:01:dd:c8:14:53:d1:ed:cf:
         fc:16:4a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:25:31 2026 by rpki-client