Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/83928c54-f7ee-346b-97dd-494c849b0304.roa
File:                     83928c54-f7ee-346b-97dd-494c849b0304.roa (raw, json)
Hash identifier:          iSQ83CcRDju7X/DFrycgTDtQ5LXU2B7HkdnH3gP3JJU=
Subject key identifier:   97:A0:5E:ED:24:F4:46:16:DA:7E:F9:8E:CB:25:3D:A9:42:FD:4D:5E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FCC0323E44F3A991C37C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/83928c54-f7ee-346b-97dd-494c849b0304.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        66.146.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:cc:03:23:e4:4f:3a:99:1c:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=bb9d14e2-7e2e-4fb7-b355-93b3517d4a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:9e:21:69:29:83:d7:30:3d:b8:ed:1a:c1:
                    c6:be:63:d8:25:34:3c:b0:f3:e7:ef:b8:ea:00:48:
                    04:9c:a5:6d:7f:8e:12:f9:b4:36:fb:c4:96:25:18:
                    ac:13:c1:da:55:28:4d:de:1d:07:4d:69:f1:56:5c:
                    67:7d:88:9b:2f:8d:4a:dc:21:12:17:a7:cd:25:a3:
                    47:5b:34:a5:bb:63:b1:55:27:2e:ed:d7:bc:10:31:
                    d2:5f:23:5f:08:3d:d1:81:6a:a3:57:a4:a2:ab:52:
                    43:e7:af:62:8f:b3:50:f9:3b:1d:ba:17:ad:be:7d:
                    c2:48:a1:8c:14:b1:71:b0:94:68:41:73:e5:fe:bf:
                    01:ff:b7:7f:1f:e5:da:e9:55:d1:f8:5d:14:48:60:
                    ad:c2:19:e3:60:6f:2e:8b:3d:b2:8e:1c:29:ed:35:
                    14:de:a7:f0:c5:d4:c7:b3:c4:f8:7e:a4:e6:ca:67:
                    6b:aa:f2:d2:f8:46:ce:7d:29:d9:21:33:63:64:1c:
                    b3:8b:a1:6c:e5:76:5e:86:87:f6:7d:9a:a0:2b:0a:
                    a4:dd:8f:d8:23:a7:d3:e5:f7:28:8b:c5:03:70:6c:
                    0b:c3:40:fd:6d:da:7f:d3:da:dd:ac:78:50:09:21:
                    9e:31:8f:d8:b6:65:bb:be:f5:55:f8:26:11:53:a2:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A0:5E:ED:24:F4:46:16:DA:7E:F9:8E:CB:25:3D:A9:42:FD:4D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/83928c54-f7ee-346b-97dd-494c849b0304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:17:d8:f3:55:da:ba:76:50:47:62:3a:21:19:6e:60:d7:5c:
         d8:09:a5:0b:91:28:d4:8f:73:72:42:2c:f4:e9:38:a8:92:2e:
         e3:83:d3:01:67:55:b9:bc:49:e9:aa:07:4b:63:85:89:f4:a9:
         df:26:6a:c9:d4:dc:67:c8:64:82:43:6d:c3:08:79:0f:cb:ba:
         3e:c3:e0:76:41:d9:9c:58:d3:60:f5:5b:78:8a:b8:9b:45:00:
         eb:4b:87:9d:84:51:37:2f:af:71:74:ac:04:5c:56:08:bf:a2:
         41:c9:d4:22:df:b4:2b:43:59:fe:ea:46:dd:92:6b:d7:90:91:
         2a:d8:d3:74:1e:c3:73:4a:b3:a0:90:60:9f:63:5a:75:c0:d9:
         ab:4d:5b:3c:d8:a7:3b:71:65:25:69:8f:12:f6:b1:6f:4a:2a:
         57:77:d1:5d:41:1e:f7:de:00:8e:26:26:f6:51:20:7e:4a:2d:
         e9:f9:2c:09:69:0e:22:94:46:5e:f8:eb:02:d4:ba:d2:a8:d4:
         c8:17:ca:36:9b:3e:a1:05:4d:ab:b7:9d:3c:a0:49:6c:29:87:
         82:44:3f:e4:38:b1:61:2a:84:27:a4:67:6e:61:8e:6d:5c:08:
         91:5f:d1:3f:69:d3:0c:2d:4c:83:80:3c:2a:d1:97:16:7f:2b:
         21:46:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:44:13 2026 by rpki-client