Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa
File:                     8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa (raw, json)
Hash identifier:          l8E31D3H6cxGxn4KOY8wbTJMLYTJRgS4bXARFxWBACw=
Subject key identifier:   9D:13:FB:FF:07:B5:EB:F8:8A:F0:B4:27:25:C4:D7:D6:13:E7:3F:1C
Certificate issuer:       /CN=903ec3cf-858a-457b-844f-8c6283f5e5d9
Certificate serial:       010D0C9F4328584E8B24F61BF89AA96613D0F280
Authority key identifier: 3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     30255
IP address blocks:        66.205.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f6:1b:f8:9a:a9:66:13:d0:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903ec3cf-858a-457b-844f-8c6283f5e5d9
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=47d693df-edd3-4d64-8515-b62a0a156078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:45:66:2d:fe:74:e4:28:06:e6:c6:6c:75:
                    84:e3:5f:cc:55:98:fa:ad:f3:08:69:e8:1e:cd:a3:
                    56:58:9f:6d:d7:db:3a:83:1f:03:66:5a:ea:73:74:
                    3e:8a:ed:8e:2b:95:4b:4d:f3:67:46:1b:98:fa:2d:
                    f0:53:b6:82:d7:2e:05:dd:4a:3c:e8:d7:d4:9e:a4:
                    1a:88:2c:72:9a:a4:58:df:8f:4d:d0:72:ab:6f:fc:
                    29:f4:45:fe:33:8b:c1:d4:bf:25:24:8b:f0:14:ec:
                    40:2b:c1:41:aa:1a:c8:9e:57:3b:f9:8b:bc:83:05:
                    be:ef:2b:08:14:57:96:42:61:f5:a3:0a:c5:72:7e:
                    cb:7a:15:f1:4b:94:01:75:ab:0e:7b:06:78:e1:08:
                    c1:d4:50:6a:3c:75:6d:96:5d:f3:dc:e4:de:e3:c0:
                    7b:63:3c:97:19:23:4f:d7:02:0d:23:75:34:fd:90:
                    73:4c:76:c0:08:d5:6b:3c:c5:76:a4:b3:86:b7:81:
                    68:90:cf:56:6f:c4:a8:dd:4b:aa:a9:c6:1e:59:c6:
                    09:39:b6:70:e8:f1:f7:b0:e2:2d:fd:5f:5f:4f:98:
                    72:df:13:3a:0d:c5:f7:64:0c:32:b7:fb:ad:c1:96:
                    98:3a:6a:0d:99:74:be:59:c8:d3:35:ed:98:bd:b9:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:13:FB:FF:07:B5:EB:F8:8A:F0:B4:27:25:C4:D7:D6:13:E7:3F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl

            X509v3 Authority Key Identifier:
                keyid:3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0c:8f:01:a4:fd:1f:8c:02:5d:91:21:77:bf:f6:d9:21:3a:
         da:30:54:f1:79:f2:e8:fb:56:e0:2c:67:58:bb:9d:06:11:b1:
         31:5e:24:8e:4e:82:83:7c:ca:8e:45:40:23:51:7c:45:63:d8:
         2f:b8:ed:f1:a8:7c:b7:62:ed:bd:79:83:5a:90:c1:ca:eb:66:
         6f:d9:25:d2:8d:90:70:1a:78:5e:91:ed:14:90:dd:75:56:71:
         11:be:ba:cd:17:83:15:0f:17:45:ff:78:05:9c:8a:e1:c2:6a:
         fb:be:5b:84:a7:5d:f4:8d:a1:3c:1d:8a:e5:36:1f:56:5e:6c:
         94:d7:3f:0f:7e:af:e6:c0:2f:ef:ef:31:b3:70:ba:23:f7:5d:
         b6:89:c4:ee:54:20:fb:d6:43:00:60:60:d3:4d:39:8f:32:1b:
         04:33:e3:2b:db:74:a3:99:cd:3f:52:4f:af:20:68:a4:ec:b6:
         c5:a5:9b:ea:18:b8:1c:74:f7:fa:d5:bb:63:ae:d5:e0:32:2b:
         48:31:1d:d6:f9:34:4f:b5:2d:c7:2c:24:09:ab:67:2f:49:74:
         48:d1:68:19:6b:60:5c:04:a0:37:05:14:f8:e3:54:42:44:5c:
         a4:72:17:eb:5c:57:08:be:f2:17:53:40:7f:9e:d8:46:58:84:
         29:3c:8e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:58 2026 by rpki-client