Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/429b7538-f1f3-3080-97f6-19a7d3546885.roa
File:                     429b7538-f1f3-3080-97f6-19a7d3546885.roa (raw, json)
Hash identifier:          zmF5MrLqPY+6P2/q53UeqKzJA0I8MwyJT5glmpVfkoU=
Subject key identifier:   CB:CD:6C:FA:6C:08:63:E6:12:C3:39:E9:82:BD:AB:E0:6B:B8:24:45
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DBD05C179AD5202D159866900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/429b7538-f1f3-3080-97f6-19a7d3546885.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     397214
IP address blocks:        199.7.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:c1:79:ad:52:02:d1:59:86:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=b3d3c73c-2574-474e-853b-28c16ba9ca38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:21:3f:36:03:ed:df:a9:f3:86:f6:91:63:b0:
                    d5:96:bf:00:2c:6f:75:f6:31:2a:58:c9:21:b9:e3:
                    fd:a6:75:48:65:0d:63:01:42:45:cd:5f:93:72:bf:
                    ae:9c:cc:6c:6e:03:36:bd:01:0d:7f:0a:a2:a0:0d:
                    b5:0c:42:56:71:63:69:c3:52:75:19:08:ab:29:f5:
                    9c:0d:ac:2b:be:7c:87:7e:c0:da:86:40:05:1c:bf:
                    36:96:bd:a9:e4:4f:8d:bb:19:0e:e4:e2:4a:d5:f4:
                    c1:e6:d8:12:c9:54:27:82:58:5d:c4:09:f7:f5:d4:
                    7c:6a:6f:41:8a:a8:4e:38:3f:fe:bb:ad:1e:29:b1:
                    66:5d:91:23:5c:6b:ca:08:25:62:20:ec:6b:9e:a2:
                    23:1f:b8:e9:9d:77:18:3b:43:35:b3:d6:13:4d:78:
                    19:35:fa:9e:3f:8b:a2:1b:76:9f:3f:b1:a0:ba:84:
                    ec:5d:55:9d:84:cd:a4:ac:1f:7b:df:3a:63:2e:fc:
                    72:f8:30:f5:c1:6b:8c:01:a2:ce:2e:8b:d1:a7:96:
                    a6:62:b3:0f:6d:24:c1:ab:e8:0b:e7:4e:94:14:72:
                    59:99:70:e2:3c:5c:d9:9f:6d:bc:0b:1b:5e:63:7a:
                    cd:40:f1:35:3a:38:be:2a:7a:7d:42:b1:27:43:9f:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CD:6C:FA:6C:08:63:E6:12:C3:39:E9:82:BD:AB:E0:6B:B8:24:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/429b7538-f1f3-3080-97f6-19a7d3546885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:01:f2:49:3a:1d:db:a8:4a:02:4a:4a:35:31:19:28:f5:29:
         55:30:09:84:dd:da:f2:14:04:dd:f1:17:67:f1:e2:aa:14:c1:
         58:9a:12:95:b4:e6:77:d9:5b:46:3a:55:7e:31:d4:5b:f2:af:
         8e:45:dc:12:4d:f7:90:c6:85:14:7e:b9:e4:7c:36:f6:3e:21:
         01:fc:1e:a8:53:3d:a2:aa:21:c0:d4:d5:85:f7:53:14:34:b8:
         a6:80:3a:76:6d:93:4d:a3:5d:b8:0f:4d:2b:56:bf:b7:b0:97:
         41:ee:47:a4:05:bc:3a:4d:e0:d7:aa:ad:03:93:f6:7f:96:16:
         4e:26:08:95:33:1f:dc:2d:44:d4:a6:77:10:91:7f:ea:0f:47:
         fa:c0:03:da:5a:d9:5f:c6:62:52:9b:bc:c6:4c:b7:ff:c4:37:
         7b:ed:17:3a:bf:89:a0:d4:5e:35:c0:e8:a6:14:3b:d5:ed:30:
         1d:45:23:c9:48:c5:49:9f:81:b5:0e:69:b5:da:0b:30:d0:66:
         aa:4f:5a:af:15:86:0e:7c:54:59:c1:04:58:6d:67:05:43:50:
         6d:0e:08:1a:a0:de:3a:12:f9:60:eb:76:82:3c:48:18:64:22:
         e1:87:5d:9d:5e:95:4e:ac:95:f8:2f:55:fd:93:cd:ff:be:18:
         f3:43:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:33:28 2026 by rpki-client