Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/69d94c14-5526-3778-ac02-8d4082fbfbbe.roa
File:                     69d94c14-5526-3778-ac02-8d4082fbfbbe.roa (raw, json)
Hash identifier:          iSJlO6TAOAOBxyR9HMxMiIbYo4JURkQvTp9kz4nIzAE=
Subject key identifier:   85:76:A0:EF:E5:8C:63:BC:E8:F9:6F:BA:7F:93:32:C5:35:20:77:A0
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584D1B1A1B87E14F33AB034DAB80
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/69d94c14-5526-3778-ac02-8d4082fbfbbe.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     394437
IP address blocks:        66.249.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:1b:87:e1:4f:33:ab:03:4d:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=5f793ca9-649c-4dd7-819f-b3365321a746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:d4:c6:2c:4d:de:3c:e0:2b:45:07:4e:b8:
                    6c:7c:e7:99:57:e7:d0:83:42:32:1c:62:4b:63:76:
                    73:7d:b7:37:26:45:ec:ed:82:a7:e8:d9:1f:b6:be:
                    00:a4:a3:47:ab:ae:3d:ba:ed:9f:92:a5:c6:90:5d:
                    3b:75:29:d2:cb:d0:81:a3:ec:3c:39:62:aa:0b:78:
                    21:22:03:8e:37:9a:93:34:6c:42:63:06:ef:0f:4b:
                    c7:b9:6b:27:80:c6:6c:73:68:48:54:10:98:2b:d3:
                    7d:6c:e9:3a:11:8f:5c:e0:7e:d1:d6:57:c9:38:a7:
                    a2:00:74:88:27:a7:db:19:c4:49:e4:bc:2c:53:8b:
                    90:3a:4d:5f:b6:67:76:75:21:55:d9:a9:46:0f:87:
                    69:b8:4b:6b:a5:16:f9:b3:0a:6a:59:41:bb:ec:f6:
                    68:cf:95:b5:62:31:25:17:89:70:69:55:99:e0:8e:
                    c8:b8:90:6a:9c:03:d6:d3:b8:c6:65:b0:48:c0:d7:
                    10:96:87:84:5b:bf:fb:f2:6f:aa:ab:45:bf:a2:c3:
                    0f:a5:f4:60:2d:ca:e6:4c:e2:93:b9:76:84:f1:38:
                    c3:5e:f7:66:af:c0:4f:7e:99:e7:00:de:3a:0f:63:
                    48:1e:c8:0c:b4:31:17:71:dc:f5:af:ce:92:90:75:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:76:A0:EF:E5:8C:63:BC:E8:F9:6F:BA:7F:93:32:C5:35:20:77:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/69d94c14-5526-3778-ac02-8d4082fbfbbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:bc:a9:77:f7:f4:06:5d:35:61:7e:af:97:19:b8:be:0c:7b:
         99:33:dd:ed:eb:87:62:bd:6a:cc:3f:13:54:b9:39:da:b3:fe:
         7f:b4:49:98:d7:2f:11:a0:c5:6b:c6:c7:f9:4f:f5:e1:ea:6a:
         ad:70:73:85:18:58:27:14:38:a0:59:f7:5e:73:0d:24:0a:00:
         37:dc:cb:42:8f:68:fb:ae:a4:67:6f:75:b3:f8:21:cf:0e:7f:
         5f:33:01:10:61:78:7f:1d:45:4b:2c:78:6b:86:a2:45:cc:a7:
         19:0d:1f:44:62:0c:b2:46:65:c6:ed:7d:a9:3c:01:ff:d2:22:
         31:b1:2c:f3:69:eb:1f:63:6a:17:5c:99:65:a5:ab:f5:72:eb:
         90:49:86:97:f8:69:b2:2a:d7:96:47:fb:50:6f:b8:4f:9c:76:
         88:d2:cc:7a:aa:a9:1f:5f:2c:db:1d:aa:dd:07:15:7d:b0:84:
         c9:f3:25:35:76:4e:1e:77:4a:f8:7f:21:51:6b:41:28:60:6e:
         b7:fa:39:b3:b0:9f:af:bd:77:31:77:29:d6:f4:3c:7e:37:0c:
         b2:54:7f:80:86:7e:e6:e6:fe:96:2d:90:4f:9f:1a:48:c0:e0:
         d9:a9:8b:af:b9:01:b2:7b:c0:46:ba:63:28:51:76:54:f2:99:
         02:14:af:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:40 2026 by rpki-client