Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/5887cfae-8c62-3084-8853-2e533a04a923.roa
File:                     5887cfae-8c62-3084-8853-2e533a04a923.roa (raw, json)
Hash identifier:          PWZ/aHtXur7lE7xGZF0onDoFivx/gfuED1ROLyevucA=
Subject key identifier:   12:99:57:8E:93:E2:0F:43:0C:5A:5E:71:92:AD:AB:BA:DA:CB:9A:21
Certificate issuer:       /CN=607fb4c7-9b54-4d7e-9099-986be3553d20
Certificate serial:       010D0C9F4328584D3F64F508796535F9B2DB8540
Authority key identifier: 67:05:BE:41:56:11:B2:6C:50:E2:36:B0:F1:A2:97:38:EB:52:E4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/5887cfae-8c62-3084-8853-2e533a04a923.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     32579
IP address blocks:        66.223.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:f5:08:79:65:35:f9:b2:db:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607fb4c7-9b54-4d7e-9099-986be3553d20
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=bf516200-3a83-45d9-87cc-bb606eebbf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:e9:75:c1:a9:f7:3b:68:74:df:68:d1:7a:
                    f7:03:04:2c:79:08:e2:5b:fb:cc:e3:7e:6c:db:8d:
                    3e:28:a5:84:33:9b:ef:94:f0:22:42:01:f4:e0:95:
                    2e:bc:f2:4a:af:e9:17:e8:8f:24:08:4d:5c:7b:ed:
                    d8:c5:bd:ca:3e:65:0d:26:1e:63:92:fe:69:58:58:
                    38:69:cf:ec:90:65:39:68:cc:a9:03:c4:22:d4:99:
                    1b:48:92:6d:0f:a7:99:ab:e5:e4:ad:12:11:62:c3:
                    76:b1:c5:e2:13:54:4f:df:96:96:4d:50:27:67:c3:
                    f7:f2:33:89:0a:01:ab:7b:38:73:fc:89:11:f0:65:
                    e2:63:93:70:9d:e6:c4:78:5f:93:c9:b9:0d:31:da:
                    92:ca:62:f0:a6:a6:a0:7a:f5:05:9d:0b:df:e8:86:
                    c8:95:fe:a1:01:78:4b:8a:8b:28:f5:d2:08:18:80:
                    9c:6f:51:f0:0f:74:49:a2:6b:c5:e2:42:8d:1d:de:
                    28:d4:94:e0:58:c8:21:bb:95:de:ef:6b:a8:43:11:
                    8f:d1:4e:63:ca:3c:66:57:90:79:63:72:2f:5b:d3:
                    de:22:92:cc:f7:10:93:c1:2f:16:42:86:00:cc:8b:
                    a7:73:fe:b2:5b:8f:a8:53:d2:92:b5:ac:15:06:10:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:99:57:8E:93:E2:0F:43:0C:5A:5E:71:92:AD:AB:BA:DA:CB:9A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/5887cfae-8c62-3084-8853-2e533a04a923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.crl

            X509v3 Authority Key Identifier:
                keyid:67:05:BE:41:56:11:B2:6C:50:E2:36:B0:F1:A2:97:38:EB:52:E4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0b:88:f7:c7:4d:6e:81:5e:88:c3:fe:ba:41:d7:3e:0d:29:
         f8:f1:39:43:ef:0d:bc:d6:d8:a5:c1:70:6a:00:4d:06:f9:fc:
         aa:98:66:5e:c2:7b:46:7c:6f:22:d1:c6:47:a3:73:fb:bf:33:
         4f:7e:a5:79:15:32:e3:46:9e:cc:3a:0a:d6:86:9f:e6:84:5f:
         ce:f0:fd:62:2f:dc:a9:c8:86:b8:65:b6:02:64:75:ef:3b:6b:
         18:72:95:d0:a7:d2:5b:09:21:0f:f2:bc:19:24:2c:ef:0e:2c:
         ed:05:1f:e4:57:e0:59:bd:85:74:6b:16:07:a6:a5:ea:dc:44:
         b5:4f:e4:cb:fb:4b:c8:43:da:99:65:56:af:19:e1:a3:3c:da:
         d2:ab:99:6d:4b:9b:16:68:7d:e6:0b:24:60:28:00:fd:b6:cd:
         c5:cf:34:4c:76:9d:fb:7e:5b:2f:a4:c3:f1:21:8e:81:5a:cf:
         57:fc:19:d1:5c:56:53:3a:cc:04:1e:2e:3b:e2:c0:08:2e:cd:
         60:3a:7a:54:33:0d:88:c4:bd:90:d9:4c:51:fa:d0:67:e4:66:
         52:18:ac:94:68:a7:31:ff:ec:6c:8a:01:f9:ff:0c:e3:62:dc:
         a6:60:51:3e:33:e8:6f:78:b7:5b:a6:13:b8:91:b7:0b:07:75:
         c1:14:d9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:39 2026 by rpki-client