Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/1ecb5a96-beee-34e1-bc86-f614d73d3b6b.roa
File:                     1ecb5a96-beee-34e1-bc86-f614d73d3b6b.roa (raw, json)
Hash identifier:          0p6qHjqIqQxREH7hcybYNJzzRZp+Cd7Po+1PXGAHmsU=
Subject key identifier:   4D:D0:33:1E:6D:4D:92:60:58:35:FC:42:28:0B:2F:8B:D2:4F:E1:13
Certificate issuer:       /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Certificate serial:       010D0C9F4328584DCDC5AEC85203681531BA6C00
Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/1ecb5a96-beee-34e1-bc86-f614d73d3b6b.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        207.174.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:ae:c8:52:03:68:15:31:ba:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=10fe3051-28b1-464d-9cca-564a842ab5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:c2:f1:c6:03:07:2b:f0:8d:d1:17:dd:2f:
                    a2:48:f4:19:47:b9:f9:d1:56:14:99:00:94:a2:64:
                    3e:57:0c:94:08:29:29:bd:90:25:56:2f:f0:d4:4d:
                    c1:28:1e:b7:32:ee:6d:c6:6d:58:26:bb:43:ab:dc:
                    53:f9:d4:f5:0f:99:cb:d2:92:fa:35:e1:dc:05:bb:
                    ff:c7:0b:76:cd:af:43:e3:ec:be:19:b6:4a:b0:26:
                    3a:85:8a:71:96:d2:dd:e3:7e:c1:80:bc:c2:23:08:
                    cd:36:1b:13:e5:24:c9:d9:92:0b:0b:47:5c:89:4c:
                    22:06:7a:5b:00:3c:eb:00:8c:22:23:93:72:65:f6:
                    1d:9f:0e:ad:0d:b9:37:9f:75:56:c1:8c:e8:71:08:
                    73:32:cf:41:bc:12:ff:a1:7c:04:50:3a:b8:5e:ea:
                    fa:6b:63:45:93:90:94:85:f5:68:fa:f4:82:5e:9a:
                    4d:a4:2d:45:42:eb:dd:e2:4e:ce:0f:92:3f:ab:f7:
                    05:56:9f:56:b9:15:84:3e:3e:9e:e6:f5:f7:b9:d3:
                    6d:3b:1f:2c:15:91:83:d8:44:68:b4:4e:5c:75:7f:
                    58:f3:87:aa:50:8d:81:f1:44:bc:ae:15:8b:03:7e:
                    6f:b1:16:8c:06:89:fc:56:71:16:c4:44:f6:ee:20:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D0:33:1E:6D:4D:92:60:58:35:FC:42:28:0B:2F:8B:D2:4F:E1:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/1ecb5a96-beee-34e1-bc86-f614d73d3b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl

            X509v3 Authority Key Identifier:
                keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8f:a5:cb:e6:2d:b9:0a:80:c2:80:ec:4d:4f:45:5c:57:a4:
         e8:db:cc:af:3c:92:7b:65:be:1e:cf:79:0b:00:43:29:83:88:
         58:39:a2:89:e7:22:d4:ba:dc:fa:ce:b4:19:2e:c1:4e:0c:46:
         ce:17:2c:5d:4c:4c:77:d3:da:4e:ba:9c:9a:a2:1d:2b:77:a8:
         bd:ac:07:2b:3e:d3:f9:ea:e6:ca:ee:4d:47:e3:2d:3d:ad:de:
         ab:3f:11:c1:83:f3:c9:42:f0:0f:ad:61:fa:cf:04:ca:6e:fe:
         f1:5b:ca:6e:80:2d:ec:71:e8:af:97:4b:9c:93:4c:09:3a:4d:
         71:0a:9f:d9:04:33:6f:16:c7:c2:ce:d7:6b:31:20:8d:65:fc:
         09:a4:f8:d0:cb:07:a2:f7:b8:37:6f:8c:f3:f6:a4:dd:0d:38:
         3c:b9:d4:79:bb:31:9a:16:31:69:a7:1a:92:52:cb:b0:1f:6d:
         f9:99:39:66:0a:87:b6:0d:60:17:41:6c:50:e3:24:8f:93:74:
         b8:b5:b0:84:79:29:f0:1a:0d:8a:e9:f2:3e:e4:e1:38:38:93:
         8d:f4:49:0d:d9:58:81:ae:0a:1b:96:8d:21:a1:16:05:7f:a4:
         98:90:3f:ee:df:ee:81:55:61:5d:78:75:87:86:8a:4a:6c:3c:
         4b:24:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:38 2026 by rpki-client