Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa
File:                     d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa (raw, json)
Hash identifier:          ywE3DoBoSPnhXZuM4V7uMvuhSQFb+oa76EyL9S921A0=
Subject key identifier:   60:AD:EC:2D:92:4E:EA:0D:95:2A:F7:E0:D0:62:9C:6C:03:BB:99:2D
Certificate issuer:       /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Certificate serial:       010D0C9F4328584E9D4A7554318B8C230BF4BA80
Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     14511
IP address blocks:        66.231.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:75:54:31:8b:8c:23:0b:f4:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=9c482d76-9f1e-4b8d-9a46-0cd8eea45ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:b9:98:0b:59:66:bb:ce:0b:57:0f:56:a7:
                    af:a4:b5:b5:82:6d:b1:d5:88:da:3f:40:b4:c4:a6:
                    ac:7b:21:2a:3b:ff:02:43:2e:12:09:00:09:aa:d8:
                    59:e2:88:b4:bc:95:73:d9:a7:ed:52:d8:3a:c5:89:
                    9d:7e:a0:99:8c:47:90:a7:ae:50:da:73:98:84:64:
                    08:dd:8e:23:da:37:9c:c6:ef:1d:19:cd:10:07:de:
                    e2:fe:0e:2c:bc:7c:b5:32:35:84:d3:78:aa:29:c1:
                    c3:2d:dc:7e:1d:ad:c2:16:ef:71:b4:de:b5:ec:9b:
                    64:74:90:10:6f:42:25:f0:7b:f5:db:6a:1a:6c:aa:
                    1a:99:aa:39:ac:d3:2e:0f:30:69:30:3b:f5:22:77:
                    02:f9:0e:cf:c7:4e:72:80:91:b6:5c:88:9f:b0:cd:
                    98:05:a8:1c:24:34:fa:54:d3:e9:8a:58:82:25:1f:
                    49:48:ab:d6:0e:2c:ff:b9:ff:be:2a:4c:32:15:52:
                    8f:8c:d1:1e:4e:77:4f:f5:ac:b7:40:8b:68:89:a9:
                    08:c2:ed:77:25:b9:0b:0f:72:94:77:89:0b:90:d1:
                    f0:34:d8:51:de:fa:b3:67:10:2d:44:aa:0e:8b:3f:
                    f4:f8:69:7c:a7:dd:5f:34:34:bf:cd:1f:b4:87:ac:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AD:EC:2D:92:4E:EA:0D:95:2A:F7:E0:D0:62:9C:6C:03:BB:99:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl

            X509v3 Authority Key Identifier:
                keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:98:af:b7:2f:c3:42:b5:21:c6:49:d0:18:8f:d9:a2:3b:d2:
         ba:34:15:41:d7:eb:95:de:22:9f:ed:46:ef:95:06:a0:ab:1b:
         6b:90:ad:e1:c4:48:06:58:29:a5:6a:63:77:6c:08:3f:29:70:
         ad:1f:1f:86:a6:a0:7b:ee:2d:6d:83:4f:44:76:10:4f:03:77:
         2d:ac:a2:27:7d:60:06:a3:23:41:68:01:36:d5:9d:d1:3b:51:
         87:45:1e:51:b3:0c:bf:e0:38:f9:db:ea:c4:53:83:6a:7d:43:
         d7:2f:1d:9b:cd:81:58:cf:d1:7d:6d:6d:fa:ba:f2:a0:31:b2:
         e6:10:d2:cf:05:c4:f3:f7:21:3d:40:b8:af:aa:59:bc:ae:28:
         e6:92:6d:1d:c6:33:42:4d:f4:1f:b3:e6:3f:b1:e2:78:80:14:
         89:84:ce:3d:31:00:17:e4:b7:74:83:3c:f0:1e:6a:26:66:00:
         6a:60:70:10:07:52:4e:31:e5:98:dc:e1:5b:a6:07:cb:88:36:
         be:0f:f6:91:5e:d7:33:69:74:5c:65:fc:74:ee:30:00:3d:3c:
         f4:e1:22:95:a8:ef:e0:aa:6b:0a:d0:4b:61:a7:44:ea:17:a2:
         66:99:6b:fc:99:f0:78:19:0c:b0:81:da:e4:5c:ea:27:7b:21:
         b5:5e:c0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:34:17 2026 by rpki-client