Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa
File:                     9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa (raw, json)
Hash identifier:          YUkr169axoX8u/x7KfAxbeIQ1NJ9aXDZt288D5+NudQ=
Subject key identifier:   C7:38:19:81:E3:19:92:7D:EC:79:78:A2:FD:84:00:B5:D8:35:6C:5A
Certificate issuer:       /CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049
Certificate serial:       010D0C9F4328584E3451D4AC56C49AA43E765980
Authority key identifier: 3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa
Signing time:             Wed 17 Jun 2026 18:35:26 +0000
ROA not before:           Wed 17 Jun 2026 18:35:26 +0000
ROA not after:            Tue 15 Sep 2026 18:35:26 +0000
asID:                     55189
IP address blocks:        216.38.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:34:51:d4:ac:56:c4:9a:a4:3e:76:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049
        Validity
            Not Before: Jun 17 18:35:26 2026 GMT
            Not After : Sep 15 18:35:26 2026 GMT
        Subject: CN=886d1a09-2aaf-45b5-be5c-2bb3e4018049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:8d:25:b5:94:1e:5c:ee:a3:92:11:4d:2e:
                    78:56:05:ee:9f:5f:0c:bf:5b:7c:fc:4d:ca:b6:c6:
                    18:c8:a2:8d:06:ae:9a:2b:c9:e7:9c:33:fd:40:98:
                    66:18:5b:24:f6:31:1b:fd:9f:5e:42:a0:de:41:00:
                    ac:f7:44:03:06:8c:88:99:a1:3e:3c:b7:38:fc:61:
                    22:22:af:d1:b2:2d:c6:d7:95:a1:bc:4c:72:dc:e2:
                    c2:a3:3e:bc:1b:b4:95:42:b0:37:1a:75:80:71:6a:
                    1e:86:f5:4c:2d:0f:54:32:1c:37:57:de:5e:4a:7b:
                    6d:16:95:8d:21:59:d9:02:6c:ca:bb:4c:19:1a:2a:
                    fc:ae:c4:ec:f3:6b:7d:ca:9b:dc:8d:83:19:4a:62:
                    0e:6e:53:49:2a:97:e4:99:9c:d3:57:74:91:9d:73:
                    50:97:95:bc:9d:73:0a:3b:2d:26:c1:dd:f2:bd:a3:
                    38:42:2d:66:2d:0a:d0:35:66:cf:fd:8f:1e:5b:3e:
                    b3:43:51:c2:e5:3b:f9:07:fe:95:7f:3f:67:f9:ec:
                    2e:e0:6c:f5:a1:83:dc:c2:17:5b:e8:76:71:49:38:
                    cc:df:9e:f5:83:6a:99:9b:3f:83:24:7a:d8:13:ee:
                    77:4c:88:8d:0a:19:2a:df:1c:56:8e:76:31:8c:10:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:38:19:81:E3:19:92:7D:EC:79:78:A2:FD:84:00:B5:D8:35:6C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl

            X509v3 Authority Key Identifier:
                keyid:3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3a:26:46:cb:c5:2e:e8:58:94:cb:e5:83:3e:6e:c4:62:c9:
         52:46:0f:28:c7:8c:15:58:21:fc:79:06:a1:79:0f:f2:9a:b8:
         bc:83:e0:91:fc:4f:09:37:27:e3:67:a6:28:b5:89:1a:e4:15:
         1e:8e:38:45:a0:3e:64:62:b5:73:29:b1:9c:c3:e1:a1:e4:e9:
         5c:25:f1:5f:0e:d9:25:83:26:b0:c8:b5:77:16:53:34:58:f1:
         d4:c8:c8:fb:36:33:a6:88:b1:b6:8c:a1:f8:e6:2c:27:94:e3:
         1f:34:36:ef:75:f8:c0:cc:f0:d4:d3:81:8d:c3:70:16:ec:8a:
         77:2e:05:0a:3c:20:c7:3b:b6:91:07:78:44:f2:19:be:a8:2c:
         3b:b9:db:82:59:d7:54:f4:87:de:69:36:18:79:36:85:00:a2:
         a2:a5:0f:48:b6:7e:70:3c:92:aa:ad:8a:83:d5:b8:66:a4:59:
         98:fe:77:08:94:ad:39:56:5f:de:c3:37:6b:cd:5c:4c:06:4b:
         08:1f:01:7b:9a:2c:02:cb:a8:77:6e:fc:3d:b5:21:78:f5:36:
         ff:3c:a5:13:a2:ee:c9:43:81:c1:20:97:12:05:06:a8:40:2f:
         88:43:32:a1:4f:12:05:d7:a8:ac:14:c0:a9:90:5f:33:3c:eb:
         28:3d:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:32:31 2026 by rpki-client