Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa
File:                     a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa (raw, json)
Hash identifier:          sKr0B6V85h2qLeuQToHLJrE0zLhRMy73sVP1jYJc3fo=
Subject key identifier:   7A:9D:C2:05:02:8A:37:D4:90:B3:A9:59:FB:8D:AF:9E:26:A7:80:BF
Certificate issuer:       /CN=41415190-afe9-4f90-902f-9102f69180fb
Certificate serial:       010D0C9F4328584E5084944291F70C0A464FA280
Authority key identifier: 9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     6556
IP address blocks:        66.248.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:94:42:91:f7:0c:0a:46:4f:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41415190-afe9-4f90-902f-9102f69180fb
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=430f9e1b-e888-4959-a5bc-98269c92dd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:a0:49:ea:a0:b9:0c:a0:73:72:90:9d:45:
                    56:e1:6f:ac:be:16:e5:f3:9c:62:00:8e:0e:ef:23:
                    d3:0f:4b:64:ed:f0:9b:36:b2:d4:a5:2a:2b:d3:24:
                    97:2d:61:bc:80:97:0d:d2:82:ab:25:58:f8:b6:09:
                    4d:2b:1b:e2:67:5e:94:be:42:fc:e0:66:ff:36:63:
                    14:b2:e5:1d:69:1b:a1:10:c8:05:b6:63:54:8f:e5:
                    a0:6c:63:3e:eb:be:81:1e:a5:01:9d:5e:2a:73:59:
                    4d:21:c1:64:ac:be:9c:20:ba:39:ed:ad:4c:80:a1:
                    49:5f:27:ac:5b:cd:f2:0a:69:43:c9:58:03:e5:0a:
                    b0:48:aa:a5:0f:52:ec:b7:4c:c5:cd:2f:87:d9:6e:
                    65:fa:a8:9c:e4:25:72:10:8f:f1:3c:95:85:70:24:
                    cf:86:0b:d5:82:3d:92:27:fa:13:dd:49:88:d8:dd:
                    ce:91:9a:ed:1a:16:40:42:7d:4e:79:6f:6b:68:3c:
                    89:ef:be:d7:51:51:bc:e9:50:df:c0:48:32:29:98:
                    43:89:5f:34:aa:76:2c:75:42:5a:8d:aa:23:9a:16:
                    55:0d:09:39:48:cb:17:12:11:a0:c6:0e:3f:2c:a7:
                    53:48:38:24:93:84:07:c2:55:58:43:48:90:f4:ac:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9D:C2:05:02:8A:37:D4:90:B3:A9:59:FB:8D:AF:9E:26:A7:80:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl

            X509v3 Authority Key Identifier:
                keyid:9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ac:78:40:1f:48:12:a1:85:9b:49:e3:3c:39:53:9f:9d:0a:
         f9:8b:f9:d4:45:7a:7e:ec:25:60:f3:11:e9:27:bf:58:8a:0a:
         ac:45:f7:1b:08:cb:08:64:6d:7c:f7:8c:d4:3c:65:96:63:48:
         64:54:22:fa:2c:87:de:2e:96:2d:f1:a1:ca:ee:76:02:e0:b9:
         58:d1:4e:f6:b8:51:e0:b5:d5:a3:c2:84:55:8e:6c:6f:f9:3b:
         9c:21:79:2c:c9:fb:4d:06:52:ef:09:98:49:75:bc:c0:0f:8b:
         52:02:e9:d4:83:76:e2:9c:6e:7c:72:9f:46:c4:51:17:62:9e:
         c6:a3:d0:99:5c:b1:d5:61:d5:d7:50:c1:61:e3:c2:cf:51:35:
         30:23:e7:14:0c:26:3e:98:8e:91:46:bd:38:8e:ab:52:3c:73:
         55:2d:3c:c5:8c:57:64:18:54:fc:5e:45:50:bf:9b:46:d8:b6:
         0e:76:7b:0a:b2:3c:f4:40:58:11:79:2e:34:56:4e:61:b6:5a:
         37:c0:cb:dc:fc:3c:ec:fe:df:6f:38:1f:c8:2e:05:e4:8c:c9:
         ab:1d:7c:6d:04:49:5b:07:46:20:25:72:08:09:4d:98:95:11:
         d3:d1:bc:9d:8a:96:65:75:fd:50:bc:3c:cc:50:7b:69:31:d0:
         df:23:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:48:26 2026 by rpki-client