Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/9059b46b-72e7-3362-a9b8-d28bbe7bdf51.roa
File:                     9059b46b-72e7-3362-a9b8-d28bbe7bdf51.roa (raw, json)
Hash identifier:          rmLb6NOyGvgMXNI8C++Cb+EtAHlXQ+yYvSqSgGn6fyQ=
Subject key identifier:   E0:A4:8D:31:AE:2C:CF:88:57:73:93:D0:66:D1:F2:F8:21:7A:E7:F8
Certificate issuer:       /CN=5eb9af5e-8450-4404-b673-e166c036c6a6
Certificate serial:       010D0C9F4328584D94EF4BC6273657382C140F00
Authority key identifier: C0:8E:21:FE:76:2E:26:16:57:10:BB:C0:9A:69:68:74:58:50:6B:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/9059b46b-72e7-3362-a9b8-d28bbe7bdf51.roa
Signing time:             Tue 21 Apr 2026 16:23:22 +0000
ROA not before:           Tue 21 Apr 2026 16:23:22 +0000
ROA not after:            Mon 20 Jul 2026 16:23:22 +0000
asID:                     33669
IP address blocks:        192.136.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5eb9af5e-8450-4404-b673-e166c036c6a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5eb9af5e-8450-4404-b673-e166c036c6a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:ef:4b:c6:27:36:57:38:2c:14:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9af5e-8450-4404-b673-e166c036c6a6
        Validity
            Not Before: Apr 21 16:23:22 2026 GMT
            Not After : Jul 20 16:23:22 2026 GMT
        Subject: CN=66bd72be-4a8b-4093-8700-ad64a604af52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:43:44:fd:54:3e:62:f4:e6:e2:b6:57:28:5b:
                    59:6e:eb:48:e5:fa:2d:3b:4f:5a:f4:51:9a:33:f0:
                    61:0f:d0:10:f3:78:23:20:d3:b7:fb:d6:24:a8:fb:
                    a3:af:10:5e:91:6e:ac:65:5d:75:99:52:5f:3a:c0:
                    5a:1b:c7:bd:a2:84:c6:d4:ec:26:79:1d:f7:8f:3a:
                    4f:cd:ed:bf:5d:d2:61:98:ab:ce:27:89:b4:26:7d:
                    fa:58:54:3d:0a:75:55:c5:c6:6c:f7:19:f1:aa:bd:
                    e0:01:a3:a5:e9:71:86:d9:a4:16:c8:54:38:4c:e4:
                    0f:83:54:4f:c5:0d:62:65:05:54:f7:61:9a:b1:ec:
                    24:9e:49:e1:60:f6:46:74:5e:3b:54:c0:fd:c2:10:
                    ba:89:b7:58:c1:60:1f:82:75:66:62:9a:4c:b3:01:
                    d9:0f:29:fb:d2:76:d8:15:8a:93:33:e5:d6:47:6e:
                    5e:49:c7:39:d0:3d:75:bf:fc:69:09:48:aa:09:0f:
                    43:ff:dd:6c:c3:29:7c:c8:75:a6:80:25:48:7a:1f:
                    4c:7b:4b:c8:97:03:62:f1:c3:60:b0:74:db:75:27:
                    e5:20:55:80:c3:1b:d0:09:68:1d:03:53:e9:5a:6b:
                    1e:84:47:67:fb:05:df:58:6c:b2:8c:b5:b5:0d:b3:
                    9f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A4:8D:31:AE:2C:CF:88:57:73:93:D0:66:D1:F2:F8:21:7A:E7:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/9059b46b-72e7-3362-a9b8-d28bbe7bdf51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5eb9af5e-8450-4404-b673-e166c036c6a6.crl

            X509v3 Authority Key Identifier:
                keyid:C0:8E:21:FE:76:2E:26:16:57:10:BB:C0:9A:69:68:74:58:50:6B:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:23:62:dc:d5:43:e5:88:f8:5a:46:ba:60:83:ec:ca:15:b7:
         09:f5:51:08:35:47:2a:98:f4:8d:53:60:eb:43:05:5a:2a:0f:
         fa:a4:c7:1f:a4:90:07:c8:21:74:21:07:51:75:18:cf:d6:36:
         eb:77:96:80:7a:09:64:7a:43:1e:c1:08:00:44:60:df:44:a8:
         0d:87:53:d8:c7:e8:2f:9b:9c:6e:6b:3d:a8:91:f7:68:65:85:
         b6:bb:81:fd:10:d5:06:93:72:7a:c5:e8:5c:9b:cd:ad:5b:7b:
         7d:93:ee:ab:f2:ba:2d:3e:05:5f:03:a7:cd:1c:53:bf:a7:08:
         07:bd:b8:84:ff:47:79:fe:ac:6b:3a:7e:f3:9b:3d:2d:02:28:
         a1:db:9e:73:54:bf:dd:1e:5e:3a:72:89:2b:4b:d0:44:16:a1:
         80:76:c3:b7:be:81:cb:f4:23:ef:3d:f3:da:c9:50:a1:1d:0f:
         cb:36:01:b2:26:71:75:7e:65:97:8e:41:9e:cb:4b:5c:72:a2:
         1c:05:eb:68:b8:a6:52:f7:61:d2:40:97:f0:21:a0:24:71:c4:
         3a:85:fb:2e:37:3c:6e:5a:b0:f7:1c:08:ba:cc:d6:3f:d0:7d:
         5f:28:63:81:69:1c:6b:d3:05:6d:e9:23:40:e1:42:08:f5:ff:
         90:9f:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:17 2026 by rpki-client