Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/cb8fec23-e2ec-3003-86a2-c723d77d395e.roa
File:                     cb8fec23-e2ec-3003-86a2-c723d77d395e.roa (raw, json)
Hash identifier:          oubWQ3+x4dE5ec3A24F3B9igEiU7/UiNoUgDjXD+ifY=
Subject key identifier:   92:EB:11:F2:4B:C2:10:7B:E4:20:A9:E4:9F:53:F4:D7:06:81:95:1F
Certificate issuer:       /CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
Certificate serial:       010D0C9F4328584DBFD07C9B6FC4C40B51DEA400
Authority key identifier: D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/cb8fec23-e2ec-3003-86a2-c723d77d395e.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     398291
IP address blocks:        66.179.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:7c:9b:6f:c4:c4:0b:51:de:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=8f37d662-fe7e-44ef-abe9-b2ac6d0fe90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:ef:f2:b8:21:3c:46:ee:44:83:57:5a:d6:
                    47:66:9f:ff:ec:98:21:4d:c2:7c:51:aa:ba:06:c4:
                    0d:43:39:19:68:ae:5c:e7:14:27:62:b1:1b:c6:d0:
                    4d:8b:e5:da:f0:04:d6:99:41:2e:8c:53:74:c9:0e:
                    1e:57:2f:bd:57:29:3b:5f:ab:21:7c:57:81:57:3f:
                    88:a2:57:cb:22:7a:a0:63:59:20:af:c9:17:2d:94:
                    91:26:0b:10:5d:1d:25:50:ae:25:50:6c:62:b4:b9:
                    13:67:75:8e:99:0b:d2:08:e1:29:b1:6b:19:79:2d:
                    78:fe:67:29:e2:2e:fc:a4:08:f2:19:cc:07:dc:32:
                    80:2d:b8:f6:95:05:a5:67:d3:ee:5f:df:d3:b3:5a:
                    59:2b:70:24:d6:3b:e7:80:ac:d1:29:bb:7d:d3:a9:
                    e3:83:3a:62:cd:3c:e7:e4:4a:a1:3c:bf:23:49:98:
                    d3:1b:9d:b5:a3:70:bb:31:e7:aa:f4:58:58:5d:03:
                    d0:c3:09:86:22:03:31:ef:1a:98:2a:71:f1:a1:d1:
                    e7:4a:b7:14:5c:d5:87:3a:42:e9:1d:b9:ab:7f:dc:
                    12:7c:2d:73:68:86:0d:13:09:c6:d1:ec:24:5f:a6:
                    56:86:fc:4b:f6:bb:38:4a:24:77:0c:83:20:70:9c:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EB:11:F2:4B:C2:10:7B:E4:20:A9:E4:9F:53:F4:D7:06:81:95:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/cb8fec23-e2ec-3003-86a2-c723d77d395e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl

            X509v3 Authority Key Identifier:
                keyid:D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:eb:d1:6a:ab:5a:dd:0d:39:86:d9:c1:74:55:a7:70:61:c3:
         a6:44:4e:c1:3b:8d:5f:04:87:ff:54:23:8c:9a:8e:dc:44:ce:
         aa:dc:46:e1:13:c1:78:38:24:ec:2f:24:33:e4:b9:ec:b8:e7:
         dd:5b:d2:0c:12:ec:91:20:e6:ce:c7:57:74:55:f5:67:21:de:
         40:45:ca:16:f5:af:a0:da:8d:eb:66:ac:c8:ef:83:af:19:03:
         c4:3c:62:aa:f7:c0:8d:c0:33:3d:8e:de:42:0e:48:f6:33:d7:
         48:f0:f8:1a:b8:65:33:3a:64:a4:c2:f8:ee:de:61:b9:49:58:
         3d:be:8b:b6:61:60:98:79:b2:69:fe:be:be:16:82:25:49:14:
         a0:47:1b:6e:e2:22:9b:45:66:38:2b:20:23:a8:11:b4:84:a3:
         57:cf:cf:a3:4a:f4:5e:9d:da:ea:9b:d3:63:0d:ce:ac:49:53:
         04:b9:3b:fd:9a:01:29:bc:62:48:68:d9:eb:f3:71:4c:56:bd:
         95:10:44:d0:d0:ca:4a:c3:b8:0f:a5:48:4e:a8:89:32:b2:90:
         ed:3b:e2:ed:62:eb:7b:cc:bf:b2:f4:42:81:d6:fb:2b:d4:09:
         86:e1:65:4e:10:40:c5:6e:61:b6:fc:d1:f1:9f:b1:be:d8:73:
         92:f3:51:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:47 2026 by rpki-client