Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eaa3a791-73e0-3aa4-86cc-a48fce6a583e.roa
File:                     eaa3a791-73e0-3aa4-86cc-a48fce6a583e.roa (raw, json)
Hash identifier:          1FGRRB4HjYVVIdb/5DSuuZ98riaIbILNziXJsOM1g+E=
Subject key identifier:   98:E2:4F:C4:CA:85:16:5D:85:39:7A:5D:BA:14:93:04:31:03:E4:D2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E5D149E26FC9F4F3CD12DE700
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eaa3a791-73e0-3aa4-86cc-a48fce6a583e.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     23473
IP address blocks:        66.253.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:9e:26:fc:9f:4f:3c:d1:2d:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=da4bea33-7330-456b-9586-d123020e7bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:47:af:42:9c:ad:5d:5b:83:a0:e5:91:c4:
                    94:70:f2:8e:69:d2:c5:ec:cc:d5:10:81:36:a1:3f:
                    7d:e4:25:ff:db:84:87:b0:1f:39:e7:90:23:bb:1f:
                    42:bb:49:fd:61:f7:2b:ee:47:df:88:6f:01:7b:f2:
                    63:e3:da:c1:a8:c1:7e:32:ca:5b:7d:af:0a:a5:37:
                    ff:69:f4:70:f5:33:76:0d:5f:db:fc:3b:54:82:9e:
                    7f:7d:e2:88:fd:59:68:9e:87:4a:72:af:f9:e3:21:
                    b1:6d:be:ca:90:0a:55:bf:72:2c:fb:ab:d9:6e:44:
                    04:38:ef:d6:6b:3b:21:f4:a9:01:a0:24:fb:89:6e:
                    58:a0:f3:8c:61:5c:a7:e6:f0:96:55:f9:9d:a9:1b:
                    50:88:16:d4:5e:41:bf:74:0c:b9:8c:62:23:98:e8:
                    ce:fb:b3:7a:a7:31:7b:e7:f0:47:7a:1e:22:99:81:
                    60:c0:38:2a:af:73:1c:eb:e2:45:7a:0e:32:52:55:
                    d0:99:68:69:96:95:6f:cb:b7:d1:d2:29:f5:78:83:
                    e8:66:70:86:87:2e:51:59:3d:c8:85:5a:49:62:75:
                    0b:16:6e:e3:a9:57:15:2d:34:a8:be:bd:01:6f:00:
                    da:75:7c:9b:19:80:e2:e9:d0:09:33:a3:2f:97:55:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E2:4F:C4:CA:85:16:5D:85:39:7A:5D:BA:14:93:04:31:03:E4:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eaa3a791-73e0-3aa4-86cc-a48fce6a583e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:73:7a:1f:d7:91:4a:0d:18:fb:d7:92:76:f5:84:72:46:6b:
         f1:e0:5e:05:66:15:86:29:9f:ad:51:38:6f:03:94:bc:a9:89:
         46:4c:4c:95:64:3c:ec:51:d0:1e:a2:5f:08:8d:c5:ee:4a:8b:
         1e:f6:a6:f8:93:74:72:28:f8:dc:97:12:09:9e:44:24:40:a2:
         3b:50:f7:5a:d0:7b:47:bf:d8:9a:44:c6:95:d9:50:67:3d:19:
         aa:7a:eb:8c:e3:a6:3a:ab:91:b3:e8:fa:24:b3:a2:b5:3a:86:
         11:0c:28:71:53:eb:ba:be:43:4f:0c:90:13:92:c6:d1:a2:70:
         9b:63:fa:8f:0a:c2:45:d4:01:72:95:f1:00:54:a5:0a:dc:b8:
         bf:cb:0f:b9:43:76:0f:24:0c:9a:bb:fa:78:46:7d:21:83:d0:
         20:fb:7a:37:df:5a:99:5e:2a:74:1b:b6:10:01:f3:2d:25:9c:
         25:c3:0b:03:dd:33:cc:ea:dc:2a:2b:d3:ac:d0:ba:ef:c1:36:
         cd:37:0f:c6:d5:36:60:70:0e:f6:aa:ab:86:f4:37:d7:04:e8:
         17:a8:0b:b1:8f:04:1f:bb:7d:4e:71:14:f4:4e:50:3f:21:36:
         16:ec:69:fd:6b:ce:39:fb:c0:0a:7d:ec:8f:69:06:1f:8f:ed:
         55:8c:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:37:52 2026 by rpki-client