Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa
File:                     a1599c49-20bf-390c-9d21-4c927a2074e3.roa (raw, json)
Hash identifier:          vUrnRf9NCSU3+mYq8VjW4Ee7rSafKK5iqTz3RseMy74=
Subject key identifier:   B5:BB:66:F8:BE:AC:5C:E5:19:5F:34:B5:37:6E:28:BA:40:9A:3E:0F
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584EE7BCAB3C730883D44CF39F00
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        66.178.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:ab:3c:73:08:83:d4:4c:f3:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=b6626c0a-12bd-4119-af07-0e856e6a3258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:f1:f2:00:53:a1:a0:43:79:aa:61:11:53:
                    c3:86:4b:13:f3:d8:11:c3:19:4b:29:5b:73:b5:7d:
                    dc:b5:67:40:12:f6:fa:8f:8d:03:15:67:c1:e8:07:
                    27:ac:14:06:85:38:a9:f6:1a:73:30:df:4f:47:e8:
                    3a:c3:ee:a6:fa:61:a6:f6:a8:16:c7:20:46:85:f2:
                    71:49:12:f2:b6:bd:c9:c8:a7:04:83:fc:dc:38:7c:
                    62:bb:d1:e1:56:25:58:ef:03:ac:1b:f5:68:7d:0d:
                    16:de:14:d2:2e:83:c2:48:74:cb:a9:4d:a7:4c:4e:
                    c9:3e:e0:b4:e9:f1:aa:9d:f0:54:ba:56:99:a4:a9:
                    71:d8:e2:e8:62:0e:dc:09:6b:79:80:7f:31:c7:81:
                    0c:c4:4b:ce:41:5d:14:71:5d:a9:f8:07:cb:e8:ce:
                    36:bb:8e:93:28:fb:fc:23:cb:7f:2e:67:44:a0:5c:
                    0d:98:94:d8:a5:b6:b4:1b:e9:e0:d3:cd:ae:a1:f1:
                    0e:04:bb:9a:82:3f:f1:8e:ba:bf:1c:95:bd:fa:cd:
                    6d:a9:99:d2:d6:09:1e:7e:4b:88:a9:63:cf:cf:6f:
                    75:79:39:ec:d2:df:1c:02:00:03:4b:54:8f:de:1c:
                    5e:c0:59:29:51:4e:61:e5:39:76:21:33:2c:36:6d:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BB:66:F8:BE:AC:5C:E5:19:5F:34:B5:37:6E:28:BA:40:9A:3E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:32:99:50:aa:13:d8:54:ee:cf:89:82:2b:09:fa:11:ce:77:
         fd:87:3d:50:2c:7a:0f:93:31:5d:5c:96:df:d5:f0:64:b4:8a:
         cf:6d:84:37:91:75:e7:fc:71:9a:bd:a4:75:09:9d:f5:30:1a:
         4c:75:e0:df:27:e8:a8:91:75:de:13:2a:f8:fa:61:2e:14:1d:
         de:62:f2:ea:de:c8:7d:50:b2:69:e0:9e:2a:4f:8f:dc:5b:0a:
         79:05:3c:f2:54:46:59:56:4f:4b:7c:36:9f:dc:63:97:ae:11:
         ba:ba:64:1c:0a:f6:a0:ef:e3:db:1b:ce:83:6b:4f:64:e7:0d:
         f8:03:56:dd:75:92:d9:d3:8d:3d:00:c9:2a:ab:36:dc:55:24:
         42:d2:d7:77:8d:ee:cc:59:1d:51:93:a7:2c:f1:0f:58:8c:fa:
         04:4f:8b:ef:8b:0f:71:aa:1f:59:bc:2c:04:3b:f7:90:88:a5:
         17:31:9c:11:c0:74:8b:d2:7d:0e:07:14:56:c3:ee:2d:69:af:
         13:71:1c:69:80:d9:93:82:b7:02:4e:d4:6a:3b:5e:e4:f4:ec:
         35:5d:c6:dc:9a:1f:0e:c9:90:cf:5f:8b:e3:d5:3b:90:4b:f3:
         d5:41:ea:ff:3d:dd:91:9d:98:4d:0a:fc:6e:0e:c2:09:be:d2:
         a2:a3:9b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:05:17 2026 by rpki-client