Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
File:                     25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa (raw, json)
Hash identifier:          qqr6dTVxauHIAz+oSSjVj9zWKi1VNHJQQhGzSlAIE3k=
Subject key identifier:   B0:18:D4:EE:27:6F:79:B0:AD:08:1E:0B:7F:D9:1E:B4:A8:E0:0D:6A
Certificate issuer:       /CN=f9d82c71-366a-467f-9b6c-3667d1ae7605
Certificate serial:       010D0C9F4328584F0ED242FA99791F8AF3361000
Authority key identifier: 8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     32083
IP address blocks:        66.158.192.0/18 maxlen: 24
                          173.46.160.0/19 maxlen: 24
                          208.111.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:42:fa:99:79:1f:8a:f3:36:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d82c71-366a-467f-9b6c-3667d1ae7605
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=67f4fa0c-c6df-48a1-b8ae-6671f6fc75c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:26:b2:e7:65:60:bd:2a:30:0a:40:f7:c7:4b:
                    a0:0f:d5:6b:6b:99:25:e3:65:43:71:08:64:13:1b:
                    9b:67:27:91:59:a0:54:c6:b5:11:0c:1b:1f:0e:16:
                    d4:fc:e9:a0:5b:77:9e:79:eb:0d:3e:13:41:32:62:
                    fe:aa:0a:be:a6:d3:5d:9d:0a:89:8c:e0:f4:f5:69:
                    2a:37:05:88:db:06:41:d9:51:71:c5:24:3b:34:f7:
                    59:54:17:46:5f:e5:24:1f:7b:25:0c:ad:39:e2:45:
                    97:3d:29:ec:a4:3e:56:ae:20:e1:0e:fa:c6:0a:d4:
                    70:7a:b3:87:d8:ad:9a:ff:f9:33:d8:30:11:15:23:
                    f0:48:5d:29:52:e6:33:57:dd:a0:2d:b7:9b:7b:ef:
                    f3:c4:91:a7:1d:a0:43:16:c7:04:1f:fa:6d:d0:29:
                    da:e3:79:7a:f7:2b:dd:d5:14:56:e5:87:e2:16:29:
                    d9:57:f0:67:2f:75:7e:a8:f0:97:b1:dd:cd:8d:64:
                    c8:c8:74:bc:c0:9b:f7:89:52:48:45:6f:c3:4e:22:
                    27:80:88:82:31:b5:e8:d7:f5:56:c7:cc:13:79:b0:
                    1c:62:24:1a:4d:53:1c:ba:75:27:3e:7d:15:db:9a:
                    a3:89:c1:26:c7:0d:cd:f1:51:ab:f5:ad:da:f0:60:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:18:D4:EE:27:6F:79:B0:AD:08:1E:0B:7F:D9:1E:B4:A8:E0:0D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl

            X509v3 Authority Key Identifier:
                keyid:8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.158.192.0/18
                  173.46.160.0/19
                  208.111.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:6b:86:15:fe:74:1b:47:f3:4a:c6:a1:64:fc:3d:e3:07:
         ec:4a:96:6c:60:35:84:11:f7:27:f8:32:5c:47:24:2a:b0:70:
         d6:81:95:2f:a5:3d:48:43:c8:15:9a:40:78:06:16:ec:5b:9a:
         05:dc:a8:21:bd:a6:2c:4e:2d:26:68:f1:a4:0e:2c:19:be:56:
         93:fe:0c:e9:30:6a:f2:b8:1d:8f:ed:e0:ac:03:04:72:d4:19:
         20:5d:b9:99:2d:e1:ce:9e:fd:1e:1d:14:e3:50:18:8c:68:0b:
         39:0a:b3:5b:53:5a:64:0b:da:e0:3c:b9:8a:62:65:e6:96:6e:
         bf:99:80:22:d4:97:95:8a:02:ef:11:f8:c0:bc:e7:77:6b:61:
         af:f5:ea:ad:c9:2a:e9:51:fc:de:dc:96:23:b5:d4:1e:b6:64:
         b8:3a:1e:58:a3:93:5d:b3:4d:65:c0:e1:a8:d8:6f:e3:76:3e:
         67:e2:4b:43:99:10:86:33:0c:08:37:76:63:66:fa:c0:33:ac:
         42:0e:d7:d1:0e:eb:08:70:de:26:ab:b7:d0:73:98:a5:9b:f7:
         f8:b3:56:f8:87:ea:8b:87:ba:e6:43:e4:b2:9c:08:da:b5:2a:
         06:4e:6b:37:19:99:5c:d7:62:62:24:16:24:31:a0:da:1f:21:
         1c:f4:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:18:33 2026 by rpki-client