Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa
File:                     d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa (raw, json)
Hash identifier:          V5fgwbEf8LmtEzkROao8aFRmEVkrkQXYaPcoOxUSBw4=
Subject key identifier:   25:22:31:27:25:81:CD:5A:1D:31:63:BA:47:43:56:05:ED:BA:4A:84
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F119D1C9639FFDFD5FEB6DE80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     30058
IP address blocks:        66.90.123.0/24 maxlen: 24
                          2001:49f0:d0fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:1c:96:39:ff:df:d5:fe:b6:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=c449c464-f707-4c33-ae72-61232c5bd825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:10:b2:e2:98:bc:2e:55:63:10:45:56:27:
                    67:f0:06:1b:d6:ca:74:48:9e:ca:cf:27:1e:b4:c4:
                    0d:b7:b7:47:af:a1:b6:33:71:3d:41:42:48:1b:c4:
                    41:b9:1f:90:69:c3:c3:5c:ac:ee:99:c1:f1:d9:c6:
                    85:43:f1:34:70:1f:3f:81:26:55:83:7a:41:11:b3:
                    bf:30:cf:8e:2c:c5:a7:27:c2:e9:f4:ee:1b:1d:46:
                    6c:01:5f:1b:4d:78:fa:94:53:b0:d3:52:97:5a:b0:
                    a1:ab:38:75:3d:9e:8e:3c:dc:99:d2:95:ab:63:4e:
                    fa:c7:50:25:b9:7e:17:6a:44:9c:f3:58:6e:9d:cc:
                    73:a5:a4:e5:45:e9:45:36:19:de:65:77:a9:db:a5:
                    a9:84:b1:a1:7e:11:1b:b3:bd:03:1d:90:3a:97:9c:
                    8e:04:a0:26:42:a1:26:20:bc:bd:da:4c:a2:59:ff:
                    24:32:f9:55:67:6b:69:38:9c:33:4a:26:19:84:11:
                    b0:7e:c8:e2:63:71:3a:3e:cd:ca:47:9e:f1:df:28:
                    31:f1:6b:ec:62:6c:bf:76:b4:82:06:dd:ec:37:b7:
                    84:96:66:8f:eb:76:13:d1:3a:73:cf:92:84:3a:7d:
                    3d:c2:61:2d:39:87:ba:59:df:70:dc:2b:e5:4b:6d:
                    10:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:22:31:27:25:81:CD:5A:1D:31:63:BA:47:43:56:05:ED:BA:4A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.123.0/24
                IPv6:
                  2001:49f0:d0fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:2d:5d:61:5c:b5:ac:af:b6:61:e4:2e:1c:22:eb:88:60:3d:
         4c:eb:e0:58:ac:20:9a:59:a7:06:89:14:5c:ee:80:58:31:83:
         d8:8f:47:c3:4e:90:22:99:dc:0d:7a:14:dc:d3:5b:03:ff:bb:
         4b:27:fa:8b:34:93:c8:76:11:26:4a:8b:15:e5:29:4c:96:9b:
         af:5c:42:2e:de:de:13:ee:b2:5c:f8:3e:50:91:a5:4d:4c:b2:
         eb:32:4e:44:77:8c:70:81:8e:3d:46:75:d4:5c:4a:d0:57:55:
         55:cd:96:2f:f3:42:50:f8:77:85:48:18:28:05:69:10:c1:12:
         45:88:95:12:06:36:4c:95:26:79:78:6a:f7:4b:6d:8b:00:cb:
         cb:36:e0:67:ea:4d:63:7a:e4:e7:fa:2b:a4:eb:e4:48:e1:3b:
         bc:7f:9a:67:e9:23:d5:de:1a:a1:7a:91:7e:44:89:9a:b2:bc:
         ad:c6:3d:96:1e:bf:b4:5f:13:39:b9:d5:6d:9b:13:fa:6b:c2:
         70:cb:af:5d:16:27:a7:10:d4:61:3f:2d:33:9d:53:18:e1:bb:
         34:ef:42:f5:56:64:22:4c:b7:06:cb:d0:00:33:15:2e:f5:05:
         b9:e9:51:19:3d:80:8d:b9:28:f1:fe:e7:42:93:c0:cd:64:e5:
         74:94:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:02:58 2026 by rpki-client