Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa
File:                     8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa (raw, json)
Hash identifier:          Rdq16ut63Fwkp0DsJSy4zh03YRtRoNnCmubp0HpWET0=
Subject key identifier:   4F:E7:09:CC:5E:A7:E3:93:B4:EF:54:D8:67:90:4F:00:5D:C1:AC:4E
Certificate issuer:       /CN=de8b5430-108d-4deb-960f-6c438a23adc4
Certificate serial:       010D0C9F4328584D19B4B6F1F475A86326635580
Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        66.132.138.0/24 maxlen: 24
                          198.73.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:b6:f1:f4:75:a8:63:26:63:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=4a1ef2f2-c133-4b65-9fe0-dd80eefa8269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:38:b8:4c:24:1a:1f:df:4d:e9:8c:47:4a:57:
                    c9:28:9d:2f:89:c7:f9:d9:e5:70:70:97:47:8f:82:
                    e8:bd:9f:b5:84:42:bc:9d:dd:d1:55:40:81:bb:42:
                    ed:fa:5c:75:80:4c:42:33:af:15:e6:dc:1e:3d:b7:
                    93:e0:42:f3:75:f9:9c:6d:9f:cb:23:2a:ac:90:ee:
                    c5:78:b4:88:88:14:4c:47:88:24:65:ea:1a:51:71:
                    e1:72:7a:bc:b1:80:4c:3f:b0:c9:64:3d:5b:68:4e:
                    0b:73:24:05:70:8d:27:de:7d:57:6c:a1:d6:f7:75:
                    4f:45:17:6c:f4:c5:a8:d8:f7:ac:11:d3:ac:01:a9:
                    2e:58:38:92:9a:e4:84:b8:5b:e4:4c:ec:13:55:69:
                    7e:39:05:22:70:3d:8a:71:4b:4a:92:28:08:4b:61:
                    d8:0d:fc:3a:a9:25:08:84:62:16:dd:f5:b4:ce:1b:
                    0a:eb:6d:4d:68:1e:1b:16:65:fb:5b:98:a6:31:5b:
                    17:63:8b:0c:77:a1:ba:cc:80:ee:18:d0:a9:25:c3:
                    3d:f6:58:36:2d:3d:5c:9b:38:b9:50:da:07:a5:a9:
                    b0:de:5b:bc:dd:69:47:9c:35:2c:1f:6d:f6:f1:b2:
                    ae:fc:c6:0b:89:73:4c:c0:b6:7d:6f:f6:36:d5:b7:
                    5a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E7:09:CC:5E:A7:E3:93:B4:EF:54:D8:67:90:4F:00:5D:C1:AC:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl

            X509v3 Authority Key Identifier:
                keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.138.0/24
                  198.73.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b9:36:25:ed:5d:d3:c6:6f:1a:54:59:2d:45:7a:f9:d4:8f:
         83:12:27:10:9e:ee:ee:18:1c:38:5f:88:96:0c:f4:33:05:49:
         a9:72:3b:ef:c6:9f:05:7c:f0:f5:2b:bf:cc:0a:dc:89:dc:e3:
         7f:c2:0e:c8:8e:8e:10:07:c7:54:2f:46:60:87:57:e1:be:3e:
         6c:49:de:71:1b:7b:7d:a6:a2:70:62:8d:a6:3b:60:50:21:30:
         a6:6d:39:af:d4:af:b5:9a:c9:21:47:b1:a4:82:65:82:2b:fd:
         36:e1:82:d9:8c:ee:64:d3:68:1f:e2:d2:a0:7a:da:c8:ac:6c:
         96:87:4c:91:79:7a:f9:90:23:25:9f:5b:b1:e9:15:9e:c4:ba:
         4b:f0:80:c4:c0:8e:5a:28:23:c3:51:25:04:3f:d8:7a:99:e2:
         93:bf:3c:34:71:02:06:94:8a:08:6a:22:f5:12:df:09:a9:80:
         bb:3b:c9:a7:ed:71:16:9d:06:78:33:ce:cb:bf:94:42:39:cf:
         ed:13:b5:1b:9e:a2:1a:87:0d:6c:db:d9:03:7d:b9:06:b2:49:
         bc:4d:00:1d:b7:d8:2f:4d:7f:d7:fb:1b:43:ab:d8:8a:44:35:
         87:03:ed:0b:eb:43:43:25:06:2e:0d:b6:5c:2a:09:e6:75:a4:
         04:4f:4e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:02:01 2026 by rpki-client