Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/15ff7aa8-0e14-3932-86b8-2eba8e681bb8.roa
File:                     15ff7aa8-0e14-3932-86b8-2eba8e681bb8.roa (raw, json)
Hash identifier:          BG5wNmOQVJb29dG6KWh2IaMvNWqTMRx9zyWmqPfY27A=
Subject key identifier:   BF:D6:CE:0F:4F:46:83:89:53:C8:AA:1E:72:1C:D7:E3:F7:4E:E8:5C
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584D9817F81188549999EED3F600
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/15ff7aa8-0e14-3932-86b8-2eba8e681bb8.roa
Signing time:             Wed 22 Apr 2026 19:32:44 +0000
ROA not before:           Wed 22 Apr 2026 19:32:44 +0000
ROA not after:            Tue 21 Jul 2026 19:32:44 +0000
asID:                     14477
IP address blocks:        216.59.69.0/24 maxlen: 24
                          216.59.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:17:f8:11:88:54:99:99:ee:d3:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Apr 22 19:32:44 2026 GMT
            Not After : Jul 21 19:32:44 2026 GMT
        Subject: CN=dc334396-1260-45d3-bc23-eef9892b8f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:20:73:38:15:32:46:2e:b1:ed:6f:bc:99:
                    52:fc:d8:55:85:6f:a5:72:39:71:69:84:b1:68:b3:
                    42:6b:dc:dc:61:8e:15:4a:c1:aa:51:33:0b:23:a0:
                    4e:ad:b1:6a:01:92:af:f2:fd:c8:0b:9b:36:d7:71:
                    60:13:ef:6e:39:79:d3:e4:9a:25:08:03:66:78:ce:
                    d1:d2:00:61:29:e8:6e:a0:e4:0f:fc:ec:39:7e:1c:
                    bc:29:47:45:ad:77:2b:04:c1:36:20:61:bc:dd:60:
                    b4:15:8b:c6:5c:27:7f:28:1f:24:62:c6:e1:d1:7e:
                    03:f0:e1:ef:21:7c:30:f2:20:b9:f9:e1:be:b1:2a:
                    e1:c3:99:3b:30:d2:4e:8e:3f:cd:45:70:48:f1:26:
                    76:58:17:86:66:a9:3e:16:60:55:63:74:f6:c6:b9:
                    20:e0:3c:fb:06:32:7f:0e:ea:3f:85:25:32:73:65:
                    07:25:d4:66:39:2b:fe:17:f5:72:0a:3c:f3:ae:dc:
                    7c:1b:4a:26:d6:ed:90:c7:be:00:ee:4e:ca:1e:6d:
                    94:05:fd:8b:5f:06:3a:a1:69:2b:9c:26:32:b3:af:
                    57:0c:c1:23:13:85:79:1b:ed:b5:e8:71:9b:8b:0e:
                    a8:9b:b7:7e:a1:54:05:df:4b:09:a3:57:6d:3f:e1:
                    32:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D6:CE:0F:4F:46:83:89:53:C8:AA:1E:72:1C:D7:E3:F7:4E:E8:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/15ff7aa8-0e14-3932-86b8-2eba8e681bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.69.0/24
                  216.59.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:15:6c:f4:37:83:55:a4:22:cc:54:0b:a4:fa:4a:ba:2c:24:
         da:c6:a2:05:88:70:51:88:e1:08:ac:28:ca:6c:42:de:93:9a:
         5a:d1:92:a6:36:ab:f3:0e:4f:ed:15:6e:23:86:fa:53:5c:7e:
         7a:04:72:cd:45:be:fe:c2:f7:fd:18:7e:77:e3:de:83:78:83:
         a2:d9:1b:ba:e0:f9:72:d6:62:0c:ce:ca:66:71:0a:fd:5c:ed:
         f9:1c:6a:5a:22:cc:61:cc:af:07:af:96:a6:23:f5:27:42:d6:
         90:10:f8:ee:0d:f7:cd:eb:f2:9c:ff:7c:f1:4c:18:b7:29:c5:
         b1:15:bb:98:f9:ea:61:fa:0b:96:d7:6d:e7:15:10:a3:8d:cc:
         8a:f7:85:ac:c7:3a:c6:a7:14:09:d1:13:99:d6:1a:9a:c6:91:
         fa:d1:31:0c:75:49:8f:16:c2:28:b4:78:94:83:5f:a2:2f:9f:
         63:de:2c:ed:db:ae:15:24:2b:57:59:84:6e:cd:47:e3:81:b1:
         e0:b6:ee:55:61:91:d4:4b:cd:28:ba:ee:f1:f0:2a:53:fd:0c:
         d6:63:d7:a0:3d:71:92:94:ab:67:31:b9:90:69:ca:01:d2:c6:
         98:dc:82:3b:c8:4e:15:2c:e4:d4:e5:29:9f:47:db:be:c4:a4:
         04:cd:bd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:18 2026 by rpki-client