Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48df91b1-d488-36fe-86f3-ded1a266cf0b.roa
File:                     48df91b1-d488-36fe-86f3-ded1a266cf0b.roa (raw, json)
Hash identifier:          yXBX+yTmbkybYrEodKN6N0Xtm5Xm9zlBvH0jaRrKIDU=
Subject key identifier:   DD:CB:7D:24:30:2E:A1:AB:3F:DA:4A:35:00:72:AF:C5:6D:C7:44:A4
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584DAC45831B733DEAD13C95BE00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48df91b1-d488-36fe-86f3-ded1a266cf0b.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     11404
IP address blocks:        66.234.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:83:1b:73:3d:ea:d1:3c:95:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=0b336b15-e470-4b7a-95dc-94997fcdfc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:ec:98:60:87:c6:67:c6:69:5a:cc:2c:ee:
                    24:1a:33:3c:93:8e:44:87:00:b1:6e:21:a8:1b:a6:
                    d4:0e:e3:fb:07:31:89:19:d9:48:40:79:6b:70:76:
                    82:95:7a:d9:df:f2:81:ae:ac:21:41:45:98:5e:2a:
                    1a:1f:cf:70:9a:e9:77:b4:6a:a5:2c:d5:c6:ba:60:
                    94:3c:37:3a:fa:6c:bc:fe:d8:e4:1b:5b:51:20:ee:
                    c4:63:d4:2f:66:fd:e9:00:98:72:7f:c8:cb:ab:2c:
                    1f:a9:36:7b:76:06:de:01:2d:a8:e8:73:0c:8e:ed:
                    fc:63:fc:b6:89:69:d2:99:6b:73:e7:7a:98:e3:df:
                    67:fe:d1:fa:84:f2:c2:6a:8d:7a:79:2d:cb:f5:3a:
                    fa:1a:c9:85:76:1d:9c:67:14:e3:5d:72:fd:47:8b:
                    71:fd:65:44:12:4d:05:ce:f9:03:eb:00:c3:40:ab:
                    3e:44:03:0b:7e:23:fc:8a:2c:f0:a1:26:a0:5b:1c:
                    af:0b:94:5e:85:c0:4d:6c:86:5f:8c:fb:b4:b0:4f:
                    1a:4a:1b:da:e8:f8:bf:5a:54:38:99:8d:5a:c0:2e:
                    77:6f:e1:b9:93:3c:d5:47:0e:10:60:05:04:fd:8b:
                    80:79:97:96:4d:12:1e:37:d3:c5:a0:46:1f:01:eb:
                    15:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CB:7D:24:30:2E:A1:AB:3F:DA:4A:35:00:72:AF:C5:6D:C7:44:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48df91b1-d488-36fe-86f3-ded1a266cf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.234.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:95:59:9f:50:68:99:b4:37:71:cf:1b:23:e9:3e:43:e8:40:
         73:cb:37:c3:d5:98:55:4d:1e:1b:8f:21:48:61:0c:b8:67:19:
         d0:b6:ae:5e:e4:8e:7f:4f:a2:da:1d:61:fc:9c:2d:8d:a5:61:
         4b:a0:5d:a7:a9:ae:6d:66:72:9a:a5:e3:c2:5d:d7:ca:69:c0:
         80:1e:de:89:25:3c:85:6f:9e:4f:53:38:33:c7:14:de:95:ea:
         ad:b8:cc:52:9b:37:4f:8c:57:38:3b:df:1d:d9:4a:1c:cc:6f:
         28:57:6a:34:0d:18:bb:e0:be:b5:f1:08:e3:bb:48:f7:05:27:
         8c:e2:c5:be:f7:20:f3:64:96:59:0a:d1:3f:80:a4:16:5c:da:
         b6:52:48:b0:ab:0e:dd:bf:ad:1f:3a:0b:ea:ae:e7:ce:f0:2d:
         d0:74:20:ea:ce:1a:81:02:46:ec:00:ab:49:2a:44:b5:85:42:
         7c:94:bc:4f:ee:50:b3:08:9d:e5:9c:4b:9c:e7:18:cb:98:ad:
         6b:a7:4c:4e:4b:44:1b:b7:e0:9d:42:6f:7c:90:13:55:1c:c3:
         ff:e7:3a:80:e3:5a:fe:82:e5:76:06:62:74:24:41:07:f4:7a:
         1f:0e:32:a9:1a:3e:b5:74:d0:10:76:7d:82:6c:a7:14:ae:df:
         35:91:c4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:11 2026 by rpki-client