Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa
File:                     4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa (raw, json)
Hash identifier:          ++Y0qaB+9FHWZLjL0+zYEVKjFeQwZDvIJQyXoxOaiKc=
Subject key identifier:   6D:81:B4:E6:53:69:68:93:11:E9:FB:BD:08:83:0E:C1:23:93:3C:19
Certificate issuer:       /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Certificate serial:       010D0C9F4328584DC29AF39ED2E1A8F6404A5260
Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     26703
IP address blocks:        66.102.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f3:9e:d2:e1:a8:f6:40:4a:52:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=20ede7b7-a045-4470-b865-bc96e622f4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:ae:de:d6:0a:9f:bf:e1:c0:fd:57:f8:56:
                    22:7c:14:b2:a1:ca:ad:d7:92:13:c4:22:9d:f3:b6:
                    24:78:4a:b9:d0:60:fd:61:3c:de:76:13:7d:2f:b1:
                    87:a7:71:9a:1a:8f:79:fa:98:48:d0:14:f4:cc:c2:
                    7e:d2:fe:9a:df:93:c3:3a:08:57:fe:07:8d:64:58:
                    2e:13:a1:28:c6:28:09:87:ca:ad:48:06:a6:50:9f:
                    69:e7:26:64:5a:e8:c0:65:39:24:bf:f2:a8:b2:db:
                    f9:78:c1:79:86:c4:e7:59:ac:3a:83:8a:02:b3:41:
                    31:ce:e5:43:6e:d0:a0:bb:03:43:c2:b0:55:bb:23:
                    ba:32:c5:d1:38:ef:58:fd:ce:e0:64:e8:d1:23:9b:
                    e5:af:a6:ef:0a:61:f7:b7:e6:31:db:db:84:a7:e3:
                    bd:e3:3a:17:d2:10:6f:dc:c9:ca:28:06:47:3c:2e:
                    40:45:e2:06:5c:b1:ca:a8:fe:01:fd:a6:1f:2c:31:
                    08:76:c3:6c:bf:8f:8a:0b:3f:6d:03:16:4c:e5:f5:
                    be:c5:a2:e4:49:48:ed:fe:1c:f6:a5:b6:07:1e:58:
                    ea:0b:d6:6e:10:50:e3:68:ef:f3:40:63:53:a7:ca:
                    78:e6:7b:90:24:c5:bd:43:8f:45:d8:f3:60:cb:8d:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:81:B4:E6:53:69:68:93:11:E9:FB:BD:08:83:0E:C1:23:93:3C:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl

            X509v3 Authority Key Identifier:
                keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:52:fd:b6:8d:cb:73:62:be:52:eb:97:c2:f8:3b:2a:10:2c:
         f9:ae:bb:c2:b2:c7:30:d5:37:5c:7e:31:61:9d:9d:cb:e1:6c:
         05:37:57:1c:6a:bf:dc:03:a9:d5:73:fb:04:6d:1d:28:1a:56:
         23:b0:37:89:3f:50:e5:55:d6:4a:08:d1:48:40:64:50:9d:8e:
         e8:db:fb:be:f4:23:52:09:8d:e4:41:70:a3:f4:08:50:57:3f:
         d5:5b:73:2f:37:dc:66:73:23:91:0a:6d:e7:8a:6c:2a:ec:79:
         61:58:6d:dc:24:69:6f:ca:bb:14:95:c9:1c:30:46:b1:88:62:
         ba:2e:64:e5:71:7d:04:02:e2:cf:66:ce:13:20:3a:83:cd:eb:
         db:9d:30:b2:61:65:5f:09:98:76:a1:5f:0a:6a:c7:26:da:94:
         7b:91:62:da:91:0f:98:25:7b:2b:00:9a:1c:eb:98:9c:d6:92:
         81:1d:ac:72:f4:5a:9a:ba:e7:88:4d:8c:8f:55:fc:8c:c3:01:
         32:59:d5:5e:90:b9:1c:77:7a:03:35:de:4d:e9:42:00:68:f6:
         ce:42:3a:cb:7e:97:61:d8:f7:b5:3c:16:ac:fe:f8:b7:3d:96:
         d9:aa:88:50:93:e8:ad:c5:2c:e4:97:4d:1c:e1:3a:92:e9:b9:
         23:58:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:15:49 2026 by rpki-client