Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7adec87b-b3a1-3c0e-906a-887149451ac0.roa
File:                     7adec87b-b3a1-3c0e-906a-887149451ac0.roa (raw, json)
Hash identifier:          uTN24mgauk4NemJ1CuQ6BuJn9pBzs5lSHB7ivy4M1qA=
Subject key identifier:   F0:B8:64:95:9B:0C:F5:4B:C4:1C:1F:6E:CC:50:C4:A7:63:50:C0:C4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F5E62B7CBE664C26E7718B0A0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7adec87b-b3a1-3c0e-906a-887149451ac0.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     9304
IP address blocks:        66.134.82.0/23 maxlen: 24
                          66.134.88.0/23 maxlen: 24
                          66.134.90.0/23 maxlen: 24
                          66.134.92.0/23 maxlen: 24
                          66.134.94.0/23 maxlen: 24
                          66.167.140.0/23 maxlen: 24
                          66.167.142.0/23 maxlen: 24
                          66.167.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b7:cb:e6:64:c2:6e:77:18:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=8e35dbe4-299a-4a72-8624-7f6a5f8431c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:63:86:e8:4f:b3:87:9e:7e:7e:d9:1d:1d:
                    61:91:1d:02:e2:bd:f7:7d:e0:8c:21:e5:24:4b:b0:
                    8f:5a:b8:12:23:5f:95:72:8f:03:d1:7e:e5:a2:fb:
                    57:37:85:41:76:e4:a8:27:9a:2d:ee:57:42:87:5e:
                    fa:47:aa:df:72:ad:50:ec:2c:b7:22:81:2b:45:17:
                    50:cf:8d:12:9d:66:2a:35:36:97:70:96:72:47:1e:
                    cf:9e:d9:e9:f5:04:54:38:39:21:eb:19:67:33:ae:
                    91:26:41:13:89:ca:99:12:bf:c3:a9:cc:76:31:90:
                    0b:8c:8f:67:0d:f5:43:a5:02:2a:d1:65:4b:b2:59:
                    de:7a:2b:ac:3d:31:0b:03:41:b9:93:13:69:0a:83:
                    4c:89:3c:38:ff:8b:50:0b:3c:0f:55:55:4a:00:4d:
                    52:b3:be:5b:ff:2a:24:73:9d:bd:69:47:4b:6c:b7:
                    e2:7d:b7:d8:90:c7:dd:d6:48:c1:2c:67:9d:3c:db:
                    aa:76:7d:a7:9d:c8:c7:6f:6b:01:99:ec:13:ad:6e:
                    1e:bb:c6:4c:02:0b:ac:3d:43:3d:99:64:74:89:8b:
                    08:17:bf:ca:66:02:5f:99:d1:e5:ea:d1:0f:b0:2c:
                    b3:d7:08:95:6c:16:c7:36:c4:d4:1f:a9:df:df:e1:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B8:64:95:9B:0C:F5:4B:C4:1C:1F:6E:CC:50:C4:A7:63:50:C0:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7adec87b-b3a1-3c0e-906a-887149451ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.134.82.0/23
                  66.134.88.0/21
                  66.167.140.0/22
                  66.167.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d9:59:08:d9:0c:6a:48:cd:e4:eb:28:e9:45:31:e8:96:84:
         6a:66:79:10:82:11:9b:0f:84:f4:a4:9b:ff:b6:e8:54:a5:c5:
         e7:34:81:0b:0c:5c:f0:4d:c2:dc:3b:7d:15:b4:8f:7d:4c:69:
         30:47:6f:6d:16:80:f9:ad:11:3f:c1:68:8d:59:5f:03:00:49:
         74:65:2a:96:a9:16:0e:53:b8:c9:67:8f:ef:24:46:9d:d6:32:
         bb:17:08:62:2d:3c:90:b7:9e:43:39:53:ab:c6:8f:d4:37:73:
         97:41:90:34:f8:f7:22:4e:33:14:ff:40:11:1e:bd:ff:ef:73:
         f9:c9:90:0a:32:ca:b0:34:00:9c:66:6e:9f:08:49:f4:a3:fc:
         f2:b9:5b:4d:90:2e:8e:d1:c5:8a:da:09:27:c9:be:cb:9b:f8:
         49:d8:ab:61:d4:f1:7a:af:9b:fc:a6:41:15:03:36:88:c8:ef:
         6b:8e:20:15:32:24:b6:ca:c0:24:f8:5d:cd:2a:f1:7b:9d:5e:
         01:f7:da:a3:e6:c5:b0:d7:ba:26:e2:8a:30:56:9f:76:49:59:
         80:a7:2d:6d:69:5c:9e:e6:35:36:09:cf:16:8a:f4:ee:67:06:
         c8:e9:c4:e8:f6:12:0c:0d:12:a4:fc:09:7f:e2:a2:1b:c9:d1:
         00:c3:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:53:09 2026 by rpki-client