Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/ac66fede-583e-3c4b-ba2c-a7d4f6b8ddaf.roa
File:                     ac66fede-583e-3c4b-ba2c-a7d4f6b8ddaf.roa (raw, json)
Hash identifier:          enEc/3M2wyEIbaH++cHVqG+bFuue/n9qOWFSdYUnabI=
Subject key identifier:   E7:32:37:62:6E:0B:6B:BB:B2:7B:77:86:F3:B5:C4:8D:62:89:49:E9
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584E561A1357ECCA58915DB9C480
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/ac66fede-583e-3c4b-ba2c-a7d4f6b8ddaf.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     1403
IP address blocks:        66.158.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:13:57:ec:ca:58:91:5d:b9:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=645c7880-dcf8-4611-9dc1-91efbcd93c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:30:fa:44:d9:9c:d9:18:bb:eb:58:09:2d:
                    db:ed:97:26:21:d1:5d:07:5c:87:22:d0:4c:16:09:
                    6c:51:c4:3f:f8:38:fe:8d:37:7f:70:ef:c4:d6:62:
                    ce:15:2a:22:f6:20:c6:6a:57:45:a7:1d:05:d1:04:
                    8f:88:32:12:e7:74:0f:52:67:0e:89:ef:03:18:67:
                    03:2c:58:ed:2a:cf:87:c3:f9:b5:41:2e:d9:fc:27:
                    6c:c1:69:3d:44:03:60:c0:a1:68:ca:6a:47:e2:ca:
                    59:bd:a8:b7:af:cf:d9:11:6b:2b:b2:5c:b5:d2:12:
                    cc:a9:58:fc:9f:b4:27:a3:f7:4a:15:ab:95:92:86:
                    30:6c:2c:4d:b4:a1:5b:0e:72:70:46:ae:0a:1c:7f:
                    32:69:41:95:70:4a:98:62:d7:da:5c:d2:fe:c6:43:
                    ed:30:f4:88:4d:80:19:e3:3f:da:14:7c:21:ca:c6:
                    e1:53:c5:06:df:59:aa:09:a2:98:be:29:3b:3b:af:
                    b3:d5:30:b4:03:6d:7d:a5:f9:fa:dd:d1:b1:d1:86:
                    21:46:20:e2:6c:c1:2d:13:48:b9:7c:27:2b:62:38:
                    7c:69:c6:99:ab:f5:c6:6d:5a:dc:fb:a2:34:65:24:
                    be:20:df:66:c6:de:17:78:be:18:a3:2c:dd:93:8b:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:32:37:62:6E:0B:6B:BB:B2:7B:77:86:F3:B5:C4:8D:62:89:49:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/ac66fede-583e-3c4b-ba2c-a7d4f6b8ddaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.158.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:30:f6:18:93:86:13:af:f0:4b:f5:e4:23:3c:97:69:ad:e5:
         0e:32:de:b4:25:5e:94:5c:fa:0b:10:c4:1d:87:15:4c:28:f7:
         03:48:32:0a:21:49:d5:7d:23:aa:32:24:48:e4:34:dc:0c:25:
         a7:16:44:2c:f9:1b:9d:28:ca:a5:15:37:fe:13:86:2e:1a:0c:
         7a:bb:93:10:02:22:a8:ba:31:10:e5:ef:69:01:09:e0:4e:42:
         70:8c:c5:58:14:fc:bc:2c:af:8b:7a:25:23:34:77:b9:cd:a6:
         db:62:35:07:8b:b2:69:da:ed:f6:d5:1f:9d:4f:7c:b6:2b:08:
         4c:ed:91:a6:81:54:d8:1d:87:a0:c1:c2:ce:8c:25:fd:b3:f6:
         9f:dc:b8:7c:da:e8:83:e8:7f:54:09:13:e9:53:1d:87:8d:30:
         46:70:66:b9:28:7e:b4:f5:0b:0f:9f:1f:4f:e1:bb:c3:4b:a2:
         83:61:80:be:47:0c:f3:8b:71:39:3c:b4:ec:c9:e4:b1:57:0d:
         3a:da:22:dc:88:05:42:41:8e:9a:8b:67:3a:41:be:20:24:64:
         9a:95:a4:59:bd:cf:a1:e9:2c:34:12:30:9a:b2:80:38:d3:f0:
         c3:4e:e2:4f:5d:cf:b6:fb:c7:71:96:0c:e9:4d:43:91:bb:4a:
         6b:23:d7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:06:04 2026 by rpki-client