Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/bd16b703-96ce-3e0f-92f7-396fa62b8969.roa
File:                     bd16b703-96ce-3e0f-92f7-396fa62b8969.roa (raw, json)
Hash identifier:          qUEspeZcYh4ZZ/TvpU45oI1VNulGkSmBAwx3HOV1q68=
Subject key identifier:   7C:55:2E:90:48:D1:8D:27:4B:C5:DB:50:D9:ED:6D:72:35:1F:18:11
Certificate issuer:       /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Certificate serial:       010D0C9F4328584E6B0A0CA48BA4D01F874F2680
Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/bd16b703-96ce-3e0f-92f7-396fa62b8969.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     396502
IP address blocks:        66.248.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:0c:a4:8b:a4:d0:1f:87:4f:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=e1afd212-881c-43c7-9de1-23b978740693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:db:d2:9a:e1:1a:78:b9:19:bc:bb:bc:5e:
                    02:da:af:44:31:b3:0f:3d:f7:e1:78:93:e6:1d:5d:
                    c4:f0:ea:fa:1f:23:47:f7:e4:da:5d:f2:27:b8:cd:
                    20:cd:15:96:1b:69:9c:3a:82:45:14:c7:80:4b:06:
                    5a:6f:02:98:8c:d5:fb:db:96:19:68:b8:dc:53:0b:
                    39:d1:09:66:c4:d3:d8:10:ee:05:2a:f4:f9:7e:20:
                    a7:92:af:47:b9:b4:67:0a:0b:54:a0:b2:42:97:78:
                    8b:64:43:39:af:2a:58:e3:2c:ec:db:39:7e:26:60:
                    03:4e:7b:28:f3:5d:df:a1:0b:b9:33:4b:2a:ad:04:
                    2b:46:0f:9d:40:c9:65:0e:9e:6d:e8:c5:81:65:9f:
                    92:5c:d4:0c:2a:26:e3:d0:17:7d:cd:57:2b:00:6e:
                    35:20:43:e4:d5:b4:87:c9:96:26:ed:a0:1f:3c:db:
                    2d:0f:c7:e7:99:09:a6:db:a8:00:f8:d4:a3:83:4a:
                    47:b4:8d:e8:37:b5:68:7d:ec:ab:17:96:dc:75:83:
                    92:96:18:8d:18:f8:92:0b:e9:95:4d:df:9a:4f:19:
                    75:61:6b:49:20:8b:45:40:99:e1:f6:52:25:7c:32:
                    11:a6:98:42:31:59:f5:c9:27:a2:32:00:d7:02:aa:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:55:2E:90:48:D1:8D:27:4B:C5:DB:50:D9:ED:6D:72:35:1F:18:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/bd16b703-96ce-3e0f-92f7-396fa62b8969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl

            X509v3 Authority Key Identifier:
                keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:38:42:60:11:17:dd:1c:54:d2:be:41:1e:ac:cc:88:e7:c6:
         26:37:47:4e:96:8d:73:31:4a:cc:5c:d9:cb:4e:36:a7:ab:cb:
         39:5e:48:51:5d:56:01:ff:e9:7d:fe:4a:e5:09:58:bc:ca:e3:
         04:d5:90:8f:04:a8:c6:0b:88:f7:f0:25:bf:4f:c5:16:80:be:
         6a:99:53:e5:59:21:d3:d4:6f:ed:de:1a:a7:04:b7:92:60:9f:
         94:26:87:e5:d6:57:1b:1f:ae:26:d6:3c:ff:ee:c1:85:78:b6:
         1f:75:8b:8b:0c:7d:15:5c:db:e9:16:78:7c:56:e6:9e:b1:fb:
         3e:79:5a:c3:b1:ab:dc:c7:de:17:3f:0d:de:c3:bd:59:95:46:
         c1:be:1f:38:61:b8:4b:d1:5f:92:b0:a3:83:96:35:11:c9:a9:
         d0:80:f9:16:a4:91:01:68:1a:c7:80:e4:57:08:81:37:bd:83:
         bf:1b:fc:f6:41:1b:bf:c4:c4:ab:da:ac:04:74:73:35:29:51:
         54:63:0f:37:0e:2b:e8:3c:5c:9d:54:73:06:41:7e:8e:14:f8:
         3f:90:e8:87:ae:77:47:c4:8c:cc:66:2a:19:d5:0a:9b:45:33:
         8c:46:51:7d:81:9c:c7:8a:e1:b1:66:11:f7:4e:83:5a:9b:3c:
         8c:8e:48:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:12 2026 by rpki-client