Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/042a3471-a69a-33d8-9566-1dff1b836b8e.roa
File:                     042a3471-a69a-33d8-9566-1dff1b836b8e.roa (raw, json)
Hash identifier:          X4ehHirp4HKr4oc1RjF4ELRcAMYkQRHBH1Sbq5BDO7s=
Subject key identifier:   2D:00:2A:03:90:3E:8D:B4:9D:CF:0A:1A:D1:A6:C4:83:32:F1:E7:A3
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584E561A059A382D8FFE7199EB00
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/042a3471-a69a-33d8-9566-1dff1b836b8e.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     33182
IP address blocks:        66.7.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:05:9a:38:2d:8f:fe:71:99:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=fe3707cf-60ae-4484-9e01-dd8cdd13e41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:2c:a0:83:ab:f4:71:2a:7a:46:7d:14:9a:
                    fe:50:85:d3:c0:f9:6e:16:dc:6f:35:ea:46:8d:c3:
                    b9:58:83:e3:2b:6b:5a:d3:48:16:06:32:f6:bd:09:
                    b7:4f:a0:3f:bc:68:1f:f4:64:7b:ab:5b:20:67:c2:
                    71:90:61:cd:0b:5f:12:c8:b9:27:87:a2:b2:ae:b2:
                    3f:39:07:87:c4:9f:f1:a5:88:62:39:55:54:39:85:
                    c8:d1:e7:98:1e:6a:1b:a4:1c:63:ac:ef:0f:a5:78:
                    7f:db:7b:ff:42:83:88:03:1c:eb:c8:e4:af:9c:4e:
                    0f:34:e6:24:7a:48:53:81:64:17:9d:49:17:15:6b:
                    ce:57:f3:3b:42:cc:4a:f7:7d:5b:b4:2e:8b:a8:b9:
                    0d:42:a8:b8:cb:4e:64:3d:d9:26:fb:b8:12:a6:aa:
                    e7:bb:2e:a5:2b:8c:63:58:c4:65:75:81:05:ef:8a:
                    e1:e6:d3:b1:f9:4e:cb:67:86:7d:07:b1:1b:e9:82:
                    2b:d7:f6:37:f7:64:19:f1:67:1f:98:45:cf:ac:17:
                    1a:f7:45:ce:e4:17:b0:30:1c:22:f1:57:5e:9a:bc:
                    c3:e9:6d:cb:13:b8:bf:ad:41:58:a4:b9:b7:3f:71:
                    2c:89:98:70:ff:1f:f0:42:cf:c1:60:4d:eb:b9:02:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:00:2A:03:90:3E:8D:B4:9D:CF:0A:1A:D1:A6:C4:83:32:F1:E7:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/042a3471-a69a-33d8-9566-1dff1b836b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.7.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4b:cf:7f:3d:8d:ef:e2:ff:2c:cf:60:b0:28:f1:f2:fe:bc:
         db:52:d4:15:3f:6c:99:14:60:f9:9a:61:ce:2e:cd:83:bf:f5:
         6c:28:c9:ab:56:20:7c:62:90:9a:f5:80:04:ce:d5:a6:84:8b:
         41:f7:d0:da:8b:c3:43:b2:b9:fd:35:4e:dd:33:75:e5:41:f9:
         39:3b:e1:c2:2a:ca:ee:1c:ba:e5:ef:56:65:7e:cd:a3:da:e7:
         3a:a3:82:44:93:08:e4:ec:e8:ff:72:d6:cc:73:2a:f5:ef:21:
         dd:f7:78:8d:f1:ee:7d:c6:3a:9f:fb:fb:3c:8e:84:84:ad:8e:
         bd:6a:db:e2:20:bb:aa:41:8b:c0:b9:a8:d2:e7:a5:5a:3d:d8:
         4a:e7:5d:f1:bc:44:71:37:31:ee:09:11:4b:4a:d0:9e:98:a0:
         33:84:82:f6:bc:17:47:29:42:df:71:f0:72:73:0b:e3:7d:8f:
         95:1a:b8:1d:63:0d:68:54:0b:5f:51:0f:cc:fd:a1:2d:70:8e:
         a3:b2:fe:e8:8b:a6:b4:04:95:d5:6c:0a:b9:74:e5:6d:c1:1d:
         7c:9b:ac:4f:0f:79:86:8a:78:d6:bc:7b:21:da:7a:43:d0:e1:
         e5:29:6f:85:59:0d:5c:e2:1d:92:2b:d1:bc:34:ee:38:97:05:
         15:d3:2c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:23 2026 by rpki-client