Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/fade97ca-586d-3ef2-b3b6-9d7106b26189.roa
File:                     fade97ca-586d-3ef2-b3b6-9d7106b26189.roa (raw, json)
Hash identifier:          dHBdqn4Fki1mx97bD3NUvcwQ+S/PQEMXGfMtSF6t0L4=
Subject key identifier:   3E:2C:8C:9E:93:49:15:F7:4B:EA:66:CD:A1:C1:2D:65:62:EF:D8:40
Certificate issuer:       /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
Certificate serial:       010D0C9F4328584F1CC7B166C950A41985C3FD00
Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/fade97ca-586d-3ef2-b3b6-9d7106b26189.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     394772
IP address blocks:        66.223.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:b1:66:c9:50:a4:19:85:c3:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=9864fb08-4a3f-4f64-a106-747d276e8e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:72:08:21:ef:f4:07:e6:4c:74:99:6c:3f:
                    33:41:6b:80:27:46:0f:9a:e3:24:85:db:b4:ba:39:
                    a8:bc:ac:d2:c5:13:75:81:17:b1:0d:fa:59:7d:5d:
                    f8:91:af:6a:59:7e:09:aa:49:06:3d:bb:0a:ba:c4:
                    9b:48:79:ed:97:f2:f0:52:97:ec:38:bf:03:be:ba:
                    2d:73:c1:da:5a:f4:52:40:7b:77:c2:af:fd:b7:d6:
                    e2:ae:73:14:cb:8c:8e:ea:1c:99:ec:ca:02:62:55:
                    8b:2d:be:e4:84:20:c9:6b:7a:e1:53:5e:69:38:15:
                    71:88:d4:7c:1e:7e:18:c8:00:f9:2b:06:ca:f7:06:
                    31:00:52:9d:b5:b5:20:aa:d3:de:9a:dc:dd:34:d4:
                    2d:d9:f5:0f:49:ef:71:06:36:9a:f7:fb:fe:6a:a4:
                    7d:c3:58:ed:28:7f:69:42:71:c9:59:b4:be:ea:84:
                    35:96:c8:d7:f2:75:f4:3f:f4:17:f6:e9:0d:6d:45:
                    68:91:cf:37:e0:c3:3e:d2:b1:b8:52:e6:82:9e:81:
                    9e:e0:ec:21:31:e3:26:87:ce:09:b0:40:c7:6d:73:
                    f7:81:83:50:96:50:08:5c:07:9f:9a:34:e0:19:ac:
                    44:b1:6f:58:87:28:30:ec:54:62:04:ee:0e:a6:15:
                    50:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2C:8C:9E:93:49:15:F7:4B:EA:66:CD:A1:C1:2D:65:62:EF:D8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/fade97ca-586d-3ef2-b3b6-9d7106b26189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:2a:23:b5:7f:dd:4f:83:f9:92:35:24:82:13:64:45:60:
         1d:f5:13:75:41:da:29:0a:24:58:b7:dd:46:2b:58:77:12:38:
         b8:93:97:36:f8:d6:45:3e:25:e4:c7:26:6d:33:a4:e0:d4:63:
         00:62:79:74:a0:d9:15:a7:fa:21:b6:52:05:3d:73:1d:de:dc:
         58:46:d4:d3:34:f0:8d:d8:fe:33:69:62:d9:e3:23:ff:4d:45:
         89:96:28:79:07:fc:a5:1e:04:e3:ac:a5:96:c8:cc:fa:51:89:
         4c:35:61:8a:63:e8:7e:40:34:17:fe:ca:2f:bd:60:84:ef:06:
         71:c1:f7:12:16:94:71:dc:36:6e:c6:5c:e4:d5:bc:f4:9a:a1:
         3d:21:e5:89:72:83:4a:04:c2:3c:ea:c0:7f:aa:80:75:9d:1f:
         1d:1a:d3:8a:0e:83:1e:d6:fc:ff:e0:a8:e6:ed:52:a1:6e:e6:
         da:d5:39:15:2d:1a:ac:74:d5:ba:70:50:b8:16:66:c3:b3:72:
         c4:d3:4a:10:b1:46:31:c4:7b:60:65:58:ae:aa:9d:e0:62:9d:
         60:3e:6a:f3:8d:b5:bb:55:0f:cc:07:8b:f8:60:b8:86:48:ad:
         3c:c7:23:7e:51:1f:da:41:a7:e2:41:d0:90:cf:d3:f8:68:37:
         15:55:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:43:23 2026 by rpki-client