Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/f3e7bcd2-9bd4-36ef-a982-ed43871e7f75.roa
File:                     f3e7bcd2-9bd4-36ef-a982-ed43871e7f75.roa (raw, json)
Hash identifier:          oJLbJcGqJm1wtqCPY24Xw+gJK6akljUj6yGz3JsVWQg=
Subject key identifier:   FE:2D:D2:FF:49:C6:50:56:7A:1A:3F:6B:73:D3:82:52:A8:F9:BC:B1
Certificate issuer:       /CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
Certificate serial:       010D0C9F4328584DCAFAFF5815604199B8AF2580
Authority key identifier: A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/f3e7bcd2-9bd4-36ef-a982-ed43871e7f75.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     23465
IP address blocks:        66.103.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:ff:58:15:60:41:99:b8:af:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=c8ece54b-6234-48e8-a0d3-4f50281c6ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f0:a7:f1:e3:05:87:0e:78:6c:c3:76:ba:53:
                    dd:d3:41:34:f1:46:88:54:a5:4c:96:85:eb:c4:fa:
                    01:29:5a:ed:3c:cb:ab:9a:ec:a4:e5:d1:f6:04:7e:
                    00:27:e2:40:44:58:91:d2:cb:ac:dd:60:1d:18:08:
                    8f:f1:30:d3:4b:f4:83:11:bd:d9:22:5c:c6:5a:e3:
                    c1:b0:09:27:ed:61:bc:0f:c1:8d:1d:5e:36:7e:0b:
                    52:3e:ba:de:b2:62:03:ea:8b:da:c7:32:c6:51:f9:
                    e1:b6:40:90:80:7b:37:26:43:fb:de:61:79:b4:f4:
                    55:a8:c7:ca:2a:12:00:7d:ac:86:27:28:4d:da:93:
                    7a:28:03:3a:4c:66:c2:16:ff:57:65:81:b6:9b:46:
                    3b:d9:56:38:da:6d:86:38:bd:76:a7:4d:c3:ca:ee:
                    77:b2:d6:94:e4:f5:9d:fd:33:ce:cd:ac:4a:8a:cd:
                    04:76:57:da:07:16:ab:6e:42:fe:ce:cc:ae:bd:eb:
                    0f:07:61:5e:b4:1e:4d:25:dc:33:00:ce:b9:df:d2:
                    44:28:53:46:d0:b1:ee:4e:c3:37:86:86:19:80:e6:
                    1d:56:4e:90:b3:b2:34:d7:ce:9d:36:29:61:f0:b1:
                    16:cd:f9:70:88:3e:48:f7:32:e8:74:68:0c:c2:12:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2D:D2:FF:49:C6:50:56:7A:1A:3F:6B:73:D3:82:52:A8:F9:BC:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/f3e7bcd2-9bd4-36ef-a982-ed43871e7f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.crl

            X509v3 Authority Key Identifier:
                keyid:A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b4:9c:1e:be:8a:2e:7b:ef:cb:99:fe:52:b1:4d:67:ac:81:
         cd:e0:70:e3:dc:1a:63:78:f5:55:44:2c:d1:37:b8:b7:a3:ed:
         d5:ec:76:99:bd:f0:e0:ba:78:6b:b9:ec:85:9c:b1:d9:3d:fa:
         2a:52:0f:fb:57:ab:fe:bb:c1:6f:4f:e5:e5:fa:54:91:35:f2:
         21:59:e8:c6:58:17:3b:50:a2:ef:40:96:e6:14:d3:f5:07:27:
         ba:3b:fe:a6:de:45:d3:b9:ab:40:a3:e8:37:fd:f1:95:26:68:
         02:70:6f:ec:50:71:d7:cb:9c:32:4e:aa:09:54:df:32:f7:6a:
         9b:c2:e9:b5:37:13:3b:3f:a9:d2:fc:32:bd:1d:4f:bc:48:bb:
         54:fb:bd:de:69:fd:7f:52:c0:ea:2e:19:5e:9f:3e:9f:57:8d:
         d9:f1:3f:2d:57:d7:41:42:f8:6c:ba:e8:76:11:72:87:77:ad:
         b0:f5:26:f8:3b:f0:44:db:d1:99:8b:3d:be:c1:4f:e3:18:1d:
         67:40:42:41:5f:40:5a:51:cb:e0:33:00:52:b6:04:d7:8b:fd:
         e2:bc:d2:c6:b8:99:35:1a:b8:b6:cd:e7:d3:12:e6:12:a3:fd:
         60:61:4f:1e:d0:ba:c5:56:1b:7a:cc:5b:e7:72:17:53:2d:3b:
         5c:56:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:39 2026 by rpki-client