Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/476f5b90-82c6-365a-a786-904a39975ba8.roa
File:                     476f5b90-82c6-365a-a786-904a39975ba8.roa (raw, json)
Hash identifier:          +MceRxAcYT8Mq5QeM1nEHF06a4WrIolC/DlhNl3wrjQ=
Subject key identifier:   84:E0:48:E3:C5:87:8D:DE:7E:1F:20:58:39:94:02:A3:0B:9C:CF:FF
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584D1B1A1BB79430880ABFD5C800
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/476f5b90-82c6-365a-a786-904a39975ba8.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     394437
IP address blocks:        66.249.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:1b:b7:94:30:88:0a:bf:d5:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=21465e09-c87e-44fc-bd88-dccd2ac61bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:b8:ab:e2:23:a3:c8:16:5d:e2:98:a4:10:
                    54:8e:08:4a:0e:c4:89:15:db:1d:17:3b:aa:ea:c5:
                    1e:95:d3:68:d0:46:ba:ed:8c:3f:53:f4:83:f8:0a:
                    f5:54:9d:e2:68:a5:da:dc:0d:c2:05:39:c9:5b:77:
                    2c:10:27:b1:b2:a3:7c:41:3d:12:4d:dc:70:99:b3:
                    31:c6:c0:fd:92:cb:9e:70:14:50:b9:c6:fc:97:be:
                    9c:d0:4e:72:62:8c:db:4a:d9:80:e6:9f:62:9a:dd:
                    f5:8b:eb:fd:c5:7e:28:a2:42:df:70:7b:0f:1a:8e:
                    72:f6:67:5f:86:cb:71:2a:d9:54:df:f1:c3:b7:14:
                    5a:73:4f:22:e1:70:bd:77:d7:f9:2d:3f:10:9e:2e:
                    1c:37:f7:ed:d1:e3:33:c4:30:86:99:30:da:cd:48:
                    f0:bf:42:59:35:89:99:2e:65:6f:c4:3d:16:e1:12:
                    d7:a5:e9:ea:ea:de:d2:d4:2f:e2:4a:c9:7b:b0:7b:
                    9d:7d:90:c4:f0:2d:62:79:f4:3b:c9:b5:19:eb:36:
                    3b:8f:45:f3:87:71:cf:68:f1:d4:a0:75:bf:4c:f5:
                    e8:d1:83:6c:36:ba:6e:e5:63:af:71:1b:0a:79:b1:
                    25:bb:e1:42:73:9b:4a:bc:32:10:22:94:de:57:1e:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E0:48:E3:C5:87:8D:DE:7E:1F:20:58:39:94:02:A3:0B:9C:CF:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/476f5b90-82c6-365a-a786-904a39975ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e2:fa:b8:ad:88:cb:96:9d:ab:46:fd:b2:88:68:89:3e:9b:
         c3:91:5b:24:01:9d:9a:5b:9d:c5:23:0f:72:ee:5d:02:79:d5:
         95:7b:8b:93:8c:dd:0d:e6:b0:4a:52:a1:2f:9d:08:d7:5c:88:
         88:04:6c:30:76:87:8b:d4:36:d1:f5:89:7f:b2:a3:91:64:2c:
         e0:8d:f6:2d:7c:d8:fb:f6:7e:35:66:7b:c2:4b:9e:7d:a8:f9:
         8e:65:00:4e:cd:d2:ae:3f:60:92:c1:03:14:de:9c:eb:05:28:
         d1:63:c7:6f:c2:be:a8:bf:a9:4c:cd:5d:6d:80:51:df:1b:c7:
         b2:a5:43:97:c7:0b:72:ff:69:c0:c0:38:88:37:c6:14:d8:b3:
         ce:e6:dd:5b:7a:ff:c7:38:55:35:04:b7:47:55:86:8f:2d:39:
         3a:9f:e7:ea:90:93:0a:5a:12:14:e5:bc:77:7d:78:c9:38:b2:
         13:84:f2:28:90:d7:4d:65:e3:6f:12:45:1e:cb:9a:fd:71:2f:
         5b:17:aa:0e:1d:43:cc:03:41:23:54:2a:b6:a1:ce:8c:46:58:
         15:49:03:84:de:51:2e:43:c1:be:84:9d:07:d4:15:5b:ed:cc:
         ce:8d:92:14:9d:e4:9d:00:ea:bb:f6:a8:d4:ae:bf:29:77:96:
         a6:e4:ee:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:00 2026 by rpki-client