Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/454f9280-7f73-33b5-8737-a156c7fd2322.roa
File:                     454f9280-7f73-33b5-8737-a156c7fd2322.roa (raw, json)
Hash identifier:          rXCFk1VE/9yq2PWkNxv8q0y7dz211t7OHzjVysM+n2Y=
Subject key identifier:   62:4F:61:D5:B4:6A:C6:D6:39:C6:10:7D:94:38:CA:C5:5E:CA:E3:18
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DBBA06BD32C1F0ADF669E2290
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/454f9280-7f73-33b5-8737-a156c7fd2322.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     834
IP address blocks:        66.93.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:6b:d3:2c:1f:0a:df:66:9e:22:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=6a61f55f-4dd6-4ec3-9e4d-88dbb73f1aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7f:04:b4:1a:f4:fb:05:6c:03:64:64:54:6f:
                    1e:5d:85:08:a9:ee:6c:c5:38:f8:3f:77:b1:27:69:
                    5d:ac:0f:e2:77:ee:89:92:9d:19:ea:52:ba:88:4b:
                    a6:31:5e:81:58:df:dc:d0:9f:61:87:29:a8:00:8d:
                    0b:79:bd:40:55:53:d1:e1:b5:63:eb:e1:c7:52:d0:
                    64:72:f3:56:e6:dc:ec:07:1a:37:73:30:6f:38:db:
                    b5:5b:87:30:74:70:95:14:e6:c6:8c:d8:8d:06:6f:
                    43:04:f2:79:43:e7:87:e7:6b:54:b0:03:a3:5b:cd:
                    d7:0b:5c:c1:11:78:16:5b:90:5a:ac:4b:f2:f5:ed:
                    5d:29:88:10:d4:47:a1:f9:d9:95:c8:ec:22:53:81:
                    56:f3:9c:c0:13:b7:47:4a:55:4e:4a:61:ac:c3:b1:
                    d1:1d:59:f1:22:ec:78:9a:47:9c:ca:64:07:31:4e:
                    7d:ee:dd:cf:60:65:2c:9f:44:96:97:a3:23:cc:36:
                    2b:20:6a:cf:9b:81:82:ee:f5:0f:39:78:d6:85:8a:
                    f3:7f:8b:f0:50:23:c9:5d:0f:eb:c2:ee:be:da:9d:
                    e8:f7:b2:93:70:4a:f3:6e:3d:eb:5d:48:a1:0f:a4:
                    d8:27:54:27:8a:08:a5:bd:91:45:ee:e9:f6:71:1c:
                    9b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4F:61:D5:B4:6A:C6:D6:39:C6:10:7D:94:38:CA:C5:5E:CA:E3:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/454f9280-7f73-33b5-8737-a156c7fd2322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:7c:63:36:e1:0d:86:5b:ef:66:bc:8f:eb:9f:7a:88:32:f7:
         b5:cf:33:4d:c6:39:5c:c3:f6:74:5d:cc:f7:d8:f0:dc:a3:2d:
         b4:45:6a:25:10:6a:85:f6:74:4d:54:9a:6c:5c:b2:71:74:7f:
         9a:e8:94:33:87:6c:99:93:b3:f7:6d:6d:a8:1d:df:74:86:0c:
         71:c0:ae:1b:02:c6:3e:33:2b:42:e9:72:ab:37:b3:39:fe:fb:
         68:8d:9a:b0:1f:bb:c6:69:fc:05:d9:b1:95:38:0f:cd:b8:8c:
         cf:34:d3:fe:1b:9b:cb:87:a5:de:dd:88:38:39:a8:cd:7e:25:
         11:be:f6:9c:1e:7d:ff:1e:b4:82:45:e6:0c:c4:43:83:0b:28:
         a5:3d:50:be:29:61:3c:79:aa:49:2f:97:ec:73:4c:4f:79:f6:
         66:30:f7:45:74:71:4c:ba:04:03:7a:8a:c3:89:04:4e:3f:1c:
         25:75:61:af:f7:7f:35:14:a6:e5:67:85:98:fe:63:11:2e:ac:
         5b:5e:c1:2b:56:08:d4:21:96:7a:c4:5f:48:6a:54:37:1a:ea:
         3b:b6:64:f5:38:c1:ec:c9:7e:55:6c:4f:e0:c2:67:32:12:95:
         ad:a5:a4:e6:2e:ab:86:23:0b:83:59:78:90:24:eb:6d:02:dc:
         0f:27:5a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:09:40 2026 by rpki-client