Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9455e783-265d-3279-a1fd-8b7fdf845801.roa
File:                     9455e783-265d-3279-a1fd-8b7fdf845801.roa (raw, json)
Hash identifier:          4XDs7RqlKhAPsrYpcrpZyOSRXyEL4e77cLajFsK/5iw=
Subject key identifier:   85:AA:F5:70:7B:8B:46:DB:AF:09:8A:40:48:D2:D4:17:95:73:FF:ED
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584D86954FC5B4047B7D90BDE000
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9455e783-265d-3279-a1fd-8b7fdf845801.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     21782
IP address blocks:        66.199.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4f:c5:b4:04:7b:7d:90:bd:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=f260ddd5-8d9b-4378-9fe5-b57a33eb392b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4b:3a:90:e3:90:9e:ff:13:0e:b5:12:1f:0e:
                    a0:e8:9b:01:9d:4a:ae:a0:d7:fc:db:41:14:0c:19:
                    2d:e3:74:f1:5d:f6:53:25:0e:56:b4:cf:ba:f4:ed:
                    f9:aa:30:91:4f:3f:40:b6:0b:78:1f:36:ec:66:57:
                    51:ea:b5:88:2d:8f:78:89:8c:01:f2:26:d5:79:dd:
                    c7:aa:2e:26:a7:31:e6:7e:bb:e4:4d:c9:a4:57:10:
                    ca:16:88:67:e7:92:16:91:2e:d2:d8:d9:5d:28:da:
                    1c:ae:64:4d:b3:2f:6a:bf:84:2e:00:e0:68:55:2c:
                    a4:89:6e:21:5c:5c:1c:0a:5b:68:81:8b:66:ba:66:
                    d6:9a:84:b8:d9:c4:f8:17:c9:97:e6:20:dd:1c:00:
                    cc:0c:3c:51:29:9d:92:3e:46:c7:67:d8:f0:ec:f3:
                    d6:95:ba:4d:ee:0b:18:0e:3a:51:24:9d:4e:a3:84:
                    1a:a1:be:20:5d:bd:b4:3d:df:8f:18:d4:47:cd:d8:
                    74:32:28:24:16:75:71:1c:c1:8c:0a:5d:0e:c1:de:
                    81:7e:9c:fb:8e:5e:bf:21:d4:bd:f7:7a:dc:a9:11:
                    de:ca:f1:8b:51:a9:0a:af:01:52:0b:72:87:94:fe:
                    10:c7:42:24:d8:ee:e2:b0:fa:ca:78:93:f3:39:b9:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AA:F5:70:7B:8B:46:DB:AF:09:8A:40:48:D2:D4:17:95:73:FF:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9455e783-265d-3279-a1fd-8b7fdf845801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.199.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:00:8c:8d:4e:49:2c:7a:77:79:24:17:39:b3:2e:f8:72:0f:
         44:d2:9d:f4:d2:d7:43:85:ad:6d:87:0f:61:aa:09:08:41:73:
         d4:16:a9:dd:38:d4:5f:54:9b:55:70:7d:b5:c0:93:28:75:d5:
         33:f7:e6:0a:33:93:c2:8a:a2:f2:9b:0a:71:76:7c:96:ca:ad:
         c2:bb:4b:30:0f:d2:17:e5:b8:f1:dd:ec:1f:df:ca:22:73:84:
         e8:69:ca:5d:80:6d:42:7e:af:f3:fc:5e:4f:61:5a:3c:8c:e3:
         8d:0e:d8:da:2d:2a:91:e7:fb:77:46:7f:08:c4:47:58:8b:6b:
         d7:a4:da:7e:d1:b1:ce:6f:82:c2:9e:87:c5:e4:ba:af:be:b8:
         2d:b4:74:35:29:ab:26:8c:75:f7:7e:d8:b7:32:ba:f8:a5:8b:
         7b:40:08:cc:18:f7:61:0f:f4:01:23:de:ca:e9:27:08:4d:7e:
         f2:8d:04:9f:e7:d4:f7:08:17:b7:32:02:2a:5f:cd:69:51:fa:
         0e:71:38:d1:4e:a2:02:66:fb:c5:8e:42:b8:44:9d:38:36:11:
         1e:21:55:70:75:e4:1c:19:d3:ec:d5:5b:30:75:21:9c:42:ce:
         a9:d9:d0:55:4a:3f:bb:6f:5e:36:82:b9:8a:38:d0:aa:ad:ea:
         d6:f2:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:10 2026 by rpki-client