Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa
File:                     86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa (raw, json)
Hash identifier:          MZKRnyrw1v+LbeYu0uJAPUt6KbHGpNJvx7R7MkgnWDQ=
Subject key identifier:   B4:07:28:5B:8F:D5:0C:38:A2:B6:57:92:80:31:9D:F4:D9:15:C7:72
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F4328584D3F64D3D10EF2872AFCE65180
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     62945
IP address blocks:        66.244.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:d3:d1:0e:f2:87:2a:fc:e6:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=78ebd7a1-3d38-44f0-8e57-d0379d01801f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:d9:ec:1b:95:db:b9:bc:24:82:df:ad:10:
                    0a:90:10:9d:9c:8f:31:e4:a9:34:ae:ad:40:98:df:
                    9d:41:76:5e:b9:c5:3d:97:c5:fd:97:c3:e3:75:8d:
                    d1:51:de:28:cc:33:46:b6:7d:c4:ce:55:f0:ae:76:
                    ef:94:aa:2e:2c:ad:a3:9b:c0:f9:16:6e:78:af:de:
                    6c:2f:ad:76:be:d7:08:7b:66:d5:7f:7d:ad:7d:97:
                    22:dc:44:18:b8:15:05:fe:52:b8:ad:56:ef:0c:1e:
                    3a:85:27:5e:a3:6b:8b:5f:08:78:bd:c6:74:59:9a:
                    6a:d1:be:18:79:55:02:41:73:c3:00:db:30:cb:4d:
                    22:91:7a:53:48:52:fd:20:b0:23:36:28:14:14:e7:
                    49:3e:5a:7d:07:26:c2:d0:70:f3:11:a8:88:1e:22:
                    f8:53:23:80:40:8f:81:43:9c:34:ed:c9:83:14:bc:
                    fd:f5:ca:a8:8d:e6:e8:d4:02:19:6b:05:9f:b7:e4:
                    bf:9f:c0:33:9d:31:6b:b9:09:c2:e0:a4:2b:de:c4:
                    01:be:a5:16:fc:8a:8e:fb:ab:1c:9f:62:b9:9c:d4:
                    b6:b0:70:97:1a:2d:32:f2:3a:6d:5e:49:18:c1:21:
                    3f:9b:ae:4a:c5:57:f1:29:05:19:8c:ed:73:6e:7b:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:07:28:5B:8F:D5:0C:38:A2:B6:57:92:80:31:9D:F4:D9:15:C7:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.244.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:80:07:2b:07:26:38:a5:b1:ff:c5:93:de:23:8b:d6:18:ce:
         e1:80:ab:e7:07:62:39:1d:cc:be:1f:b4:ac:29:f4:d9:f0:5a:
         7c:b4:d4:f8:f2:67:fd:42:d1:91:ad:c0:5d:ee:ae:50:32:42:
         09:f7:4e:0c:fb:19:26:03:64:7d:4e:b0:96:a2:ff:a6:d3:01:
         4b:cd:fa:f3:02:c4:55:4c:a2:30:ff:7d:34:9f:fa:10:b4:a4:
         db:01:9a:e2:95:f7:e5:5c:9c:13:a2:82:c5:28:36:36:ee:d9:
         32:3a:71:c1:b4:82:72:eb:68:c4:1d:5d:1a:f0:88:12:9c:81:
         ce:02:d8:b7:b5:2f:07:f0:77:db:f0:d1:23:01:75:12:2e:db:
         34:42:63:fe:e8:13:22:99:fd:27:9d:31:34:90:91:1d:27:2f:
         ef:b3:d1:84:6b:fc:80:49:1a:45:b5:85:64:d8:d9:7a:76:b2:
         7a:98:b7:1c:5e:30:55:30:2d:73:a4:a6:be:4c:f5:b4:48:9c:
         e8:cb:e5:18:2a:25:6a:61:db:bd:7e:65:03:f3:59:ac:ec:24:
         93:97:0f:a3:d9:bd:b9:8e:05:86:1e:76:b3:dc:21:89:aa:58:
         3b:89:58:58:f7:f2:94:5a:de:bf:d8:89:44:39:c4:64:0b:14:
         bc:2f:f7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:22:50 2026 by rpki-client