Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/672add88-3b30-3810-8920-978f4babfea7.roa
File:                     672add88-3b30-3810-8920-978f4babfea7.roa (raw, json)
Hash identifier:          KWweo1IWfup4eOyBx76ww7jv490X6XVhxE3OCSGh348=
Subject key identifier:   27:E0:2D:AB:98:68:F2:87:DE:17:96:64:B0:6C:AD:B7:A3:BB:C0:05
Certificate issuer:       /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
Certificate serial:       010D0C9F4328584E8B24F1B3DB98579B214AE480
Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/672add88-3b30-3810-8920-978f4babfea7.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     17176
IP address blocks:        66.187.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f1:b3:db:98:57:9b:21:4a:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=7d15ac70-0738-4f3d-bdd4-9551e60585fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:9e:48:ee:4a:8c:a9:bc:ae:90:1d:ee:5e:
                    34:82:23:f3:1c:c4:14:d0:cb:31:49:b7:5c:ea:5b:
                    a3:19:66:ec:10:5d:3a:48:dc:78:52:75:52:c8:82:
                    3f:c2:16:60:95:71:31:01:71:19:fd:f3:7c:55:34:
                    0e:38:b3:46:77:b7:7a:43:b1:b3:61:a8:a2:22:14:
                    eb:8b:0e:85:9e:07:bb:b7:e9:59:9b:db:70:b6:17:
                    14:c4:e9:1e:1b:fb:ee:25:da:56:c6:d3:1f:bb:4d:
                    e0:ec:9b:65:39:b0:67:f8:42:02:ee:8a:00:a6:4f:
                    35:54:62:ce:69:1c:49:73:f5:27:85:d3:d9:b5:f4:
                    a5:4b:63:10:cf:15:e4:08:26:76:79:4b:9b:c8:63:
                    73:30:85:a8:2a:77:c2:22:6d:8b:7e:fe:2c:06:54:
                    5f:d1:46:9b:58:02:dd:29:90:20:c1:e7:e0:bd:7a:
                    76:82:23:c5:71:0f:d0:f7:2c:b0:72:f2:02:8b:94:
                    c7:22:f2:b0:d1:db:d1:c5:1f:e4:b7:1b:fa:7f:cd:
                    4e:76:3f:76:1c:cd:5b:bf:b5:0b:96:3a:00:9f:c6:
                    b0:64:0e:c3:5e:01:68:35:27:8b:a6:49:7a:c9:20:
                    57:00:ad:7e:10:1d:f8:f8:a1:11:53:0c:5d:a2:d8:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E0:2D:AB:98:68:F2:87:DE:17:96:64:B0:6C:AD:B7:A3:BB:C0:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/672add88-3b30-3810-8920-978f4babfea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl

            X509v3 Authority Key Identifier:
                keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:c2:ed:a4:49:ab:15:f1:01:33:4b:f1:c3:af:8d:d0:5f:f2:
         a5:27:fd:71:e2:e6:82:1a:90:fd:ed:69:31:e5:fd:35:bd:c3:
         1a:de:8d:75:5f:49:b7:44:ae:50:93:eb:81:df:4a:0a:e1:b5:
         77:bf:c5:61:53:cc:cb:a9:20:f6:fb:4e:a1:91:e8:67:17:a7:
         f2:c6:c5:4c:f9:ea:78:f6:5d:a0:b0:aa:70:2e:72:27:20:ea:
         27:da:67:9f:1a:32:a2:ce:68:89:58:c8:3c:f4:f0:e7:40:d4:
         70:6d:0b:d5:97:15:56:fd:10:24:7b:35:0f:b6:07:6f:32:3b:
         6a:cb:2e:37:6e:cc:10:77:a5:18:a0:2a:9b:37:31:ee:48:87:
         59:51:44:ff:20:27:ba:ff:13:7c:48:9b:20:94:e1:32:5f:6d:
         1e:74:ab:7a:ec:df:c5:95:f4:c3:8e:54:6d:e8:a2:ec:6f:37:
         2b:a0:cc:a7:b4:8e:60:b4:43:97:95:78:69:88:cc:32:bb:2c:
         f8:44:17:68:f9:17:37:d8:8d:e4:cf:64:0c:95:3e:db:2b:15:
         9b:73:9d:d5:23:bf:59:79:72:51:f9:b5:d3:71:9a:98:6c:d0:
         15:63:47:8d:3d:31:0d:44:4f:83:45:b3:de:13:a8:79:f0:7e:
         2b:f0:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:29 2026 by rpki-client