Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5264549-ea2d-30df-aff3-ecf594e4f63a.roa
File:                     c5264549-ea2d-30df-aff3-ecf594e4f63a.roa (raw, json)
Hash identifier:          b+zcJfN+2i0XrxD7uBIVVKIFY1vQposyxahl5jI+RSU=
Subject key identifier:   D8:15:E9:2F:E1:6A:E7:3E:59:55:26:79:52:FC:AD:15:BC:AD:33:F4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DC400603CF390664A52F160A0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5264549-ea2d-30df-aff3-ecf594e4f63a.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     399073
IP address blocks:        66.93.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:60:3c:f3:90:66:4a:52:f1:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=16f445f7-376c-43ae-9b36-656eef73d443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:e8:df:9d:a7:9e:c6:d9:be:47:c7:b0:14:
                    1d:2c:91:01:ec:54:5d:4e:2a:09:33:91:14:c0:a7:
                    18:d4:a5:4e:74:3b:6c:17:be:c6:e4:67:ea:a2:d2:
                    96:a0:c0:15:49:b6:f6:9c:83:3a:7b:6b:b2:28:78:
                    42:81:a6:ea:80:b9:fa:33:5f:cf:ec:81:2f:95:78:
                    93:cf:0e:28:a9:44:ec:e9:6b:bc:7d:71:0a:75:c3:
                    af:cd:80:43:dc:26:41:c1:2e:89:4d:5f:83:c3:9b:
                    d8:e2:07:39:70:94:aa:cd:03:57:83:36:1c:74:5e:
                    b4:55:1a:60:d1:19:24:f9:9f:f9:20:b6:d9:77:91:
                    85:d1:31:53:4d:95:aa:9a:12:aa:c6:d7:9b:f0:68:
                    ce:22:9f:de:0a:9e:8c:1a:eb:0e:b8:cf:37:5e:87:
                    12:6f:f2:6c:3d:16:55:36:6c:ba:19:55:31:34:44:
                    1a:c7:c7:6a:51:4f:f4:b0:cc:3e:97:5e:c5:12:39:
                    60:0b:4b:48:7d:8b:9c:9d:23:25:37:ec:ec:8a:c0:
                    87:b1:71:8e:bb:93:e3:c3:3f:73:5e:60:8e:47:48:
                    c0:b6:5d:33:72:60:7c:84:15:99:54:f9:fc:66:e9:
                    1b:9a:05:08:c2:b2:8c:51:4a:94:44:a2:62:73:de:
                    67:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:15:E9:2F:E1:6A:E7:3E:59:55:26:79:52:FC:AD:15:BC:AD:33:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5264549-ea2d-30df-aff3-ecf594e4f63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3d:2a:dc:4c:bf:c8:e9:fa:f5:91:d1:42:3e:fb:6f:85:06:
         b9:cc:09:b3:1a:36:3a:3b:ed:e2:38:46:65:87:26:7c:b1:7c:
         a7:43:8d:70:d4:d2:8a:28:fb:a9:b3:db:33:5f:8a:df:cb:b4:
         04:1d:08:da:20:58:24:4c:b8:61:16:1a:3d:cb:bb:7b:a9:cd:
         b6:75:5f:a0:7f:a1:5b:ea:31:7b:5b:b1:48:d9:ba:6e:1e:52:
         cf:96:d3:b8:a9:f6:0d:35:e1:72:73:9c:4e:65:64:38:c6:f8:
         60:b4:14:90:73:3e:57:35:af:ed:60:e5:b0:a7:fc:24:59:86:
         8d:e9:36:03:e3:8b:b7:6a:8c:a6:9b:25:6b:a8:8c:aa:ce:9e:
         e7:2d:32:ac:02:17:fd:6b:ae:b8:d0:b4:26:4a:37:df:ea:99:
         49:3a:32:26:e9:6c:ce:6a:07:f1:6a:e3:49:5c:78:e9:63:fd:
         2f:8b:7d:3e:14:44:53:0b:93:e6:a1:79:11:0f:73:45:72:64:
         32:51:9a:d2:3f:1c:36:64:56:a8:f9:4c:fb:24:49:68:85:f6:
         35:d0:59:ce:89:59:dc:70:6d:cc:2d:72:98:6f:24:d9:d9:fd:
         47:33:91:5d:e7:f2:15:1f:9e:93:d5:90:26:6b:29:f6:20:8d:
         1d:2b:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:12:49 2026 by rpki-client