Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/f971c193-df2b-328f-9848-6b635335eb6a.roa
File:                     f971c193-df2b-328f-9848-6b635335eb6a.roa (raw, json)
Hash identifier:          cM6hlMclW/h5u+PBtEKsCW90vauM6gi8Yn/N+IX8rr8=
Subject key identifier:   EB:8F:B3:6A:2B:FE:12:92:13:5F:A4:99:E1:57:0A:C3:77:0B:9A:E1
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584E6F3A271DF04F103B3CC23420
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/f971c193-df2b-328f-9848-6b635335eb6a.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        66.22.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:27:1d:f0:4f:10:3b:3c:c2:34:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8a69a155-9b4a-43db-b2be-5764ee3eccf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:26:1b:c7:26:20:b7:78:f4:80:c2:e2:76:
                    a8:83:a4:b9:a7:52:c6:f9:77:99:1c:d9:10:1d:65:
                    c5:16:2d:0f:b5:21:36:7a:7e:03:5e:aa:f9:fe:4d:
                    76:17:5b:80:b2:57:9b:e2:e1:af:d7:33:f7:37:6c:
                    23:42:cd:71:77:c1:a2:b9:c0:7a:0a:58:a3:46:b2:
                    58:d7:c3:fd:96:78:42:be:31:ec:0c:9c:8d:a9:72:
                    5a:64:48:8c:79:fb:dd:10:67:af:11:66:a6:fb:ce:
                    9b:4b:8a:03:19:6d:19:fc:8a:a4:ad:93:c2:5c:a9:
                    31:7a:da:84:75:85:38:6a:02:c5:51:2b:f2:8c:f8:
                    05:e1:1b:b8:20:90:d2:24:78:93:7e:8a:34:a8:9b:
                    55:f4:c5:23:f2:70:0f:59:96:8d:c2:6f:1c:08:75:
                    90:1d:f8:fc:7b:95:49:47:6b:1f:e4:08:15:b6:c4:
                    96:8b:5d:98:21:10:f7:55:9a:c2:b4:7f:82:9b:3c:
                    e1:e6:f2:cd:a4:75:8b:6f:47:e1:de:1d:9f:5d:4f:
                    f0:04:60:f8:d7:2a:2f:18:0f:59:be:d5:fd:4a:18:
                    06:d1:4a:7e:a2:ad:14:4f:b0:bf:73:1b:b5:c1:7a:
                    cc:f5:4b:3d:e1:a1:76:35:5d:d1:07:ef:3b:91:34:
                    42:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8F:B3:6A:2B:FE:12:92:13:5F:A4:99:E1:57:0A:C3:77:0B:9A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/f971c193-df2b-328f-9848-6b635335eb6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f0:e8:29:1c:89:94:2e:ab:5c:67:99:81:69:99:c6:df:83:
         28:e2:55:89:de:f3:79:3c:6a:6d:62:b8:1b:02:ad:04:a6:63:
         b0:c1:8f:98:96:11:54:4d:f0:cc:c3:95:2c:c5:0a:c3:89:60:
         47:2b:ae:77:59:92:27:ef:bd:25:c3:0d:dc:11:4e:9e:c5:1c:
         e2:24:eb:59:74:ad:61:69:fd:a2:91:98:b9:7d:e9:b3:da:e9:
         64:1b:67:98:bb:33:b5:49:99:da:2e:85:31:b8:ae:ba:d8:59:
         df:43:01:d3:8c:bb:98:e6:8c:b3:91:fd:48:dc:ac:51:d6:c4:
         94:35:4d:b9:a0:5c:e6:92:18:a2:94:aa:16:69:80:d5:f7:7c:
         e6:57:5f:94:c6:df:f1:72:ee:bf:66:b9:8f:30:c7:6a:64:57:
         47:60:f4:e4:c8:4e:a5:c1:ec:18:bc:c5:9b:76:68:fc:df:60:
         2c:f2:c4:cf:d4:c9:b7:03:eb:5c:b5:68:bc:6a:68:82:42:20:
         25:77:6f:f5:a4:13:18:01:2e:81:69:56:b3:65:f7:e7:42:cd:
         85:04:6d:07:37:a1:da:b6:eb:b4:05:8c:df:79:d4:0d:1e:0d:
         f0:0c:e6:e6:72:2f:93:ad:41:87:9b:ff:fb:28:3c:1f:5e:5a:
         45:14:34:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:47:51 2026 by rpki-client