Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa
File:                     8804544c-f9cd-38be-bc33-4778fc22dce7.roa (raw, json)
Hash identifier:          maHwYx/ZcvFlrrHoD27sEDzKU7EBAfg9mdmO85zYDGs=
Subject key identifier:   5D:5B:0C:A4:04:27:A4:48:4B:28:A2:74:EF:E8:27:7B:B1:D2:CE:A3
Certificate issuer:       /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Certificate serial:       010D0C9F4328584DC995BC22B572F24E61347360
Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        66.235.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:bc:22:b5:72:f2:4e:61:34:73:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=1a23c8a2-f377-40cf-bc0a-1f9250fe55fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f7:e6:61:74:3c:11:ec:c6:b5:eb:38:ec:3c:
                    77:8b:28:4f:dc:48:de:43:55:41:10:b1:f0:4a:63:
                    cc:c6:ba:77:e3:8c:be:74:4c:0c:b3:d1:b8:0b:57:
                    3f:cc:d6:d4:91:f6:bc:ea:aa:6f:58:6c:d7:80:4f:
                    aa:08:81:84:aa:cb:18:2d:ad:29:62:c0:93:dd:f5:
                    78:a5:b1:9e:e6:80:5f:99:d5:eb:c0:94:91:99:61:
                    22:93:45:ea:ae:4e:6b:c7:9c:0c:82:dd:8f:48:f0:
                    34:d1:20:0d:5c:f9:98:8d:d7:82:31:8d:e9:22:59:
                    6d:bc:65:08:af:65:31:55:09:48:a5:51:b0:6d:15:
                    1d:70:d2:c7:3a:94:a8:f0:65:52:0b:88:d3:7e:4c:
                    56:2d:ec:0f:69:17:61:3f:02:9c:ee:48:34:fb:11:
                    f5:ad:ca:5e:26:c7:ff:e6:3a:36:7a:2c:ec:53:86:
                    97:58:b1:09:02:7e:92:9e:61:d3:d0:54:0d:76:98:
                    87:57:20:a1:b3:23:1d:69:8c:9e:e7:95:69:5c:df:
                    31:ce:88:21:22:06:b1:f6:84:a3:a2:cc:ee:1c:56:
                    16:6b:47:c9:c3:48:25:ca:48:9d:aa:e6:17:18:7b:
                    a3:00:c1:68:0a:86:60:64:40:75:e4:66:17:d7:15:
                    45:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5B:0C:A4:04:27:A4:48:4B:28:A2:74:EF:E8:27:7B:B1:D2:CE:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl

            X509v3 Authority Key Identifier:
                keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b2:d7:ef:df:9b:92:0d:ec:8c:ae:a6:5b:ae:60:a6:b8:a9:
         a9:7b:73:0f:12:52:ae:6a:84:42:ee:b2:f3:a7:30:1b:68:7a:
         86:86:1c:98:41:a8:ff:f5:be:32:be:90:f8:d9:1f:68:a2:2b:
         ca:00:2d:06:40:fc:2f:1c:5f:8e:7a:61:d9:b8:9f:d0:7b:ee:
         3c:29:70:bc:68:76:47:f5:d4:c8:64:75:94:5e:bb:90:43:ac:
         4b:22:e7:10:e1:6e:0d:ba:06:42:5b:d4:19:e6:b4:21:e4:05:
         90:1d:1e:e3:f3:3e:67:d6:0a:d4:9b:3a:63:2c:da:90:9e:57:
         f4:3d:2f:32:5b:5b:c8:85:5d:88:d6:41:05:4a:83:29:1c:29:
         62:8c:da:75:61:a9:d7:1b:99:34:47:8c:9d:0a:9a:00:43:9a:
         c6:50:06:97:bf:6f:e9:50:5f:32:3c:00:48:09:e3:d1:37:91:
         18:cb:41:15:8a:ca:1c:f5:58:a1:cd:84:3c:3b:e1:a2:45:4b:
         77:b5:a6:05:7b:6a:52:f0:48:b3:1b:2b:d2:40:35:9d:48:16:
         1a:57:2b:7f:ed:17:21:eb:06:9f:36:52:5d:69:22:c5:50:21:
         f7:8a:53:68:b1:60:56:10:a6:23:e8:de:75:9e:d0:9f:0f:1b:
         1d:b3:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:15:42 2026 by rpki-client