Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/57c8f983-3a0b-311f-b7ad-7eb71e018afc.roa
File:                     57c8f983-3a0b-311f-b7ad-7eb71e018afc.roa (raw, json)
Hash identifier:          RX2ZS9uimOlV37HAxnHbY3C9SqSVcyRKrHk6pbHI7hg=
Subject key identifier:   65:68:86:66:98:B0:40:16:7C:58:FF:06:37:B4:85:10:ED:8D:99:80
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DC09BD6FC3623E390434F2980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/57c8f983-3a0b-311f-b7ad-7eb71e018afc.roa
Signing time:             Thu 07 May 2026 07:50:47 +0000
ROA not before:           Thu 07 May 2026 07:50:47 +0000
ROA not after:            Wed 05 Aug 2026 07:50:47 +0000
asID:                     834
IP address blocks:        66.253.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c0:9b:d6:fc:36:23:e3:90:43:4f:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  7 07:50:47 2026 GMT
            Not After : Aug  5 07:50:47 2026 GMT
        Subject: CN=377c5bea-9965-4168-8a7a-e8bdb5eb620b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:00:6d:26:6e:22:f8:c2:00:d6:2f:c2:a2:
                    8a:8a:49:5e:e5:37:2f:f0:9a:33:f8:01:8d:6e:13:
                    13:14:dc:47:89:f9:29:63:aa:82:47:f6:d0:a6:57:
                    a8:3a:52:cc:a9:dc:bf:9c:ba:62:c6:0c:b8:84:e9:
                    0d:10:e1:e9:f1:a5:45:58:bb:b0:17:7c:09:81:3b:
                    11:52:ab:26:fa:ff:e5:f3:2e:07:95:3c:e3:1d:b8:
                    12:a9:d1:1d:d3:bb:76:40:2d:f1:2b:03:ad:40:a9:
                    ad:dd:52:db:f1:e5:d5:3b:e9:58:95:bf:8c:54:36:
                    c7:b2:1d:38:80:59:64:d3:56:a6:cf:82:36:7e:f4:
                    c6:42:0b:7b:4f:8f:3e:29:3f:c1:4c:0a:40:48:6c:
                    7a:1f:76:3e:cd:e9:d1:83:81:35:42:e5:2e:ff:89:
                    fd:bd:bc:46:e9:91:4b:95:85:9e:c6:e9:8d:98:f6:
                    af:67:ad:37:47:cb:9d:6f:4b:58:73:b0:59:28:d7:
                    a6:aa:91:1e:11:a3:bf:ca:87:f0:d6:9e:ab:17:55:
                    59:86:93:03:4c:fa:49:9f:ea:c1:10:d5:97:cb:d2:
                    5a:df:89:a7:36:1b:ba:4d:14:98:19:7e:91:af:84:
                    55:37:c1:1a:3b:45:80:20:fa:d8:2c:aa:a9:07:1f:
                    df:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:68:86:66:98:B0:40:16:7C:58:FF:06:37:B4:85:10:ED:8D:99:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/57c8f983-3a0b-311f-b7ad-7eb71e018afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f6:10:cf:71:d5:63:fa:c3:68:24:80:54:f1:97:bd:3a:9e:
         36:61:5b:68:96:26:b4:26:22:6b:33:68:8a:91:df:07:dc:2c:
         4a:21:84:5c:43:b2:2b:86:b7:7d:51:93:26:f7:f2:23:02:ec:
         d4:aa:c9:8f:af:6b:1e:3f:7d:9a:5a:4d:0f:4f:28:d9:43:d0:
         78:82:cb:6e:77:b4:31:9c:4c:58:5e:e4:04:d0:a8:69:bd:49:
         8a:54:c4:bd:be:fb:70:5e:d5:ad:91:7e:df:1b:69:cf:a7:96:
         79:a0:65:51:bb:3c:17:39:56:5b:d5:de:5b:b6:a4:1c:67:4f:
         4d:b4:8f:55:0e:bc:f5:97:32:09:05:be:4a:36:89:00:37:02:
         a2:84:5f:79:85:68:88:d6:01:90:a3:92:04:a7:4c:7f:09:96:
         c4:44:68:30:e0:39:3e:44:8d:00:08:0d:43:ba:87:f6:fd:67:
         81:b0:61:5e:57:8f:4d:e9:75:68:33:9d:3d:e8:ab:d2:0e:fa:
         09:ef:df:f7:ed:77:9e:42:ee:7d:79:65:2e:36:a8:f0:54:c2:
         73:f3:d4:99:f0:ff:80:ff:bc:a7:e5:78:b2:b9:79:63:b0:cd:
         4f:ca:73:23:78:4f:e6:9f:83:b0:dc:60:e9:30:19:d6:1c:86:
         1a:c8:5e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:41:50 2026 by rpki-client