Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/886f1941-e079-3dd4-9f75-a6c501fe172b.roa
File:                     886f1941-e079-3dd4-9f75-a6c501fe172b.roa (raw, json)
Hash identifier:          YyNmJkFQbRPC18u1ZGxICgIHbo134jk0AOgQvGOuyOw=
Subject key identifier:   DF:20:1A:E3:EC:7B:78:4B:9E:CA:B4:FF:D1:04:5B:2A:37:45:B9:60
Certificate issuer:       /CN=d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb
Certificate serial:       010D0C9F4328584D9B8558A00FFD1928CE975680
Authority key identifier: D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/886f1941-e079-3dd4-9f75-a6c501fe172b.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     54262
IP address blocks:        66.51.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:58:a0:0f:fd:19:28:ce:97:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=1a56bade-5a53-4800-8265-e1de6321a429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:fa:95:ec:2c:eb:c9:e3:ef:a2:b4:64:71:
                    c7:6a:a1:d9:ff:87:95:d5:a3:98:0d:fa:eb:a6:f2:
                    b1:b8:09:16:13:89:e1:69:bf:43:9d:71:81:35:70:
                    f0:e2:61:09:2d:6e:bd:da:8d:25:d3:22:d4:e0:9f:
                    ec:1e:5d:13:f1:e8:ae:88:9f:3d:0a:25:17:db:2e:
                    02:cd:23:07:5a:2f:67:e6:ce:ac:94:ad:58:2d:af:
                    e2:23:7d:e3:03:86:0f:b2:f5:47:97:05:b2:a7:f4:
                    f5:03:b3:63:50:4e:2b:d0:5c:13:ae:76:21:49:bb:
                    70:b3:94:d2:1b:e5:e2:a6:02:03:9f:a5:f0:c1:7e:
                    7c:a9:b1:1c:d0:2a:fc:cb:0a:2f:fb:af:72:57:9b:
                    3e:7d:36:eb:8c:72:5a:6b:dd:bb:48:aa:dc:89:1f:
                    8f:48:f9:74:82:3f:b3:a8:91:55:cc:fe:99:06:e2:
                    10:29:47:5d:40:49:2b:27:2e:99:c7:ee:19:18:65:
                    8c:75:c2:54:78:f3:32:59:f8:1e:54:8c:ad:f1:38:
                    e2:1e:0b:db:dd:9b:1b:5d:99:93:24:b1:71:ca:2a:
                    57:a3:73:99:89:d3:02:d5:2e:c7:b0:e9:4c:aa:15:
                    ae:74:c0:40:5e:b5:e7:1a:51:ad:07:b6:de:40:c1:
                    0a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:20:1A:E3:EC:7B:78:4B:9E:CA:B4:FF:D1:04:5B:2A:37:45:B9:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/886f1941-e079-3dd4-9f75-a6c501fe172b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.crl

            X509v3 Authority Key Identifier:
                keyid:D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:bf:c8:12:02:73:f5:74:ce:67:68:a0:23:d3:0a:fa:5f:1b:
         4c:3f:1f:cc:b4:4b:56:0a:d9:fc:78:06:95:dc:f5:04:38:c6:
         65:c8:48:ff:97:8d:59:fb:93:67:ab:05:f2:66:c9:d0:21:84:
         5f:1f:c9:93:bf:40:42:ee:95:ab:95:09:03:0d:81:fe:ee:ca:
         8e:db:37:b2:ae:88:45:ea:17:9e:bc:18:ac:c6:32:22:ca:ec:
         66:76:a8:26:eb:9e:36:fb:1e:2b:4c:ba:32:e1:b9:77:3c:d5:
         95:e7:d7:93:ab:76:5e:cf:e7:f7:04:73:5e:b5:ff:a2:5e:05:
         fb:cb:47:41:0d:42:ac:dd:ab:17:92:bd:e8:c4:dd:70:83:79:
         98:f7:4d:04:1d:23:68:0b:ce:a4:87:25:45:15:07:cd:6d:fe:
         8a:48:89:9f:88:3f:28:48:f7:da:f1:5e:5e:d2:ce:45:b0:22:
         54:fb:8b:ad:fe:30:03:37:a3:6e:cc:42:b4:7e:0d:56:d2:5a:
         b5:d9:91:b2:3e:68:47:b7:e6:bf:ca:b1:5e:a7:8c:1e:7e:d9:
         23:2b:ae:9f:7f:fa:32:d5:29:dc:f8:dd:05:d1:6b:f5:80:4a:
         07:d7:03:8f:e7:64:88:5c:12:38:a0:41:7f:a4:1b:0d:6e:6c:
         42:af:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:12 2026 by rpki-client