Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/43b9097e-7e23-3f8b-85d8-45fd70b40542.roa
File:                     43b9097e-7e23-3f8b-85d8-45fd70b40542.roa (raw, json)
Hash identifier:          HC8VCpve0mlJpQkHbf+zvZOJXrhooteJUy3IDQQpjUA=
Subject key identifier:   41:FB:25:4D:CD:FB:0B:EF:60:56:AC:32:AA:53:FA:AE:98:8A:1E:0A
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584D9810C6DD47690B27C7487F60
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/43b9097e-7e23-3f8b-85d8-45fd70b40542.roa
Signing time:             Wed 22 Apr 2026 19:18:15 +0000
ROA not before:           Wed 22 Apr 2026 19:18:15 +0000
ROA not after:            Tue 21 Jul 2026 19:18:15 +0000
asID:                     401728
IP address blocks:        66.186.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:10:c6:dd:47:69:0b:27:c7:48:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Apr 22 19:18:15 2026 GMT
            Not After : Jul 21 19:18:15 2026 GMT
        Subject: CN=89738d2a-cdcf-4bac-b3ec-307e42470d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:8b:b6:50:39:ca:0c:c9:c0:69:79:29:b6:
                    65:ad:5e:ed:b2:cf:b6:28:c4:f1:5c:55:cd:26:3a:
                    99:cc:b9:28:ac:6f:5c:52:32:b5:35:ab:4e:30:98:
                    6f:34:e7:0c:a1:2d:c9:81:72:8f:8e:f4:dd:06:cd:
                    46:e8:fa:b9:2c:0c:b7:81:5c:7c:14:1c:82:40:9c:
                    00:f5:a9:ea:ae:70:04:b7:07:7f:e0:0c:24:01:05:
                    55:27:da:55:6b:58:ca:dd:bc:14:c9:17:63:a0:01:
                    f5:a4:66:95:c0:5d:e8:cb:8d:56:7c:f3:b6:04:0e:
                    13:57:b8:50:09:57:df:d6:ab:46:cf:e0:7d:fe:32:
                    70:82:43:dc:5f:a7:15:ef:20:8d:a3:e1:78:eb:b5:
                    d4:26:de:fc:fc:3c:dd:5d:17:fc:3b:ae:fb:15:89:
                    24:37:d0:20:4b:6b:76:01:97:5a:c0:8e:3a:78:d3:
                    64:eb:e6:b1:aa:de:60:c8:52:ad:01:fd:65:09:97:
                    a3:9b:cb:e8:13:ab:66:e4:75:8e:4c:c9:4d:5c:53:
                    b0:bd:28:e0:ea:c2:af:ce:d7:54:00:d9:90:e0:69:
                    63:98:21:61:ad:2d:02:75:01:a3:55:d0:07:9d:af:
                    36:0f:44:2c:9b:48:ff:67:e0:7e:39:6f:ec:d5:ca:
                    ac:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FB:25:4D:CD:FB:0B:EF:60:56:AC:32:AA:53:FA:AE:98:8A:1E:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/43b9097e-7e23-3f8b-85d8-45fd70b40542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.186.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:de:62:3b:fb:1f:22:9a:a0:81:28:99:bf:29:ff:9e:ed:5e:
         fb:52:f6:7e:af:bc:3a:22:5f:01:e5:43:7e:ef:b8:26:fc:13:
         71:80:70:f0:ff:0a:df:67:c0:f7:87:81:e2:c8:b5:69:bf:cd:
         cf:72:91:f6:59:c1:4f:f5:98:78:db:f6:b4:b1:11:9a:77:8e:
         60:25:47:4a:21:49:c1:40:17:39:4e:64:f2:2d:9b:af:2c:51:
         6d:e7:e0:51:8d:df:1e:e3:71:47:83:5c:44:1e:85:ca:1b:a1:
         9e:a5:59:fd:92:43:e7:0e:a2:29:10:e7:27:e9:ce:9e:dc:6d:
         a0:6b:6d:48:68:35:0e:d3:8b:7f:29:23:3d:8e:71:0b:81:9b:
         3c:b0:a9:fd:95:55:89:7d:39:a0:19:d1:67:55:db:2f:f4:17:
         64:2e:20:a7:e9:d7:02:71:ba:32:95:2d:8e:b6:94:45:29:47:
         ea:6c:22:9f:4c:1e:5c:2f:3b:3e:73:33:25:41:e0:8d:20:29:
         2a:c4:fe:f9:56:42:8b:ec:e8:d7:56:57:d8:a9:e8:c8:53:35:
         47:b0:39:ff:0c:e3:1b:ff:0f:9b:e6:fc:3f:d9:d5:a6:e3:0c:
         d5:8e:06:da:b4:d9:40:3d:ac:8a:85:f8:1c:5a:fa:4d:48:b9:
         a5:aa:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:14 2026 by rpki-client