Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa
File:                     7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa (raw, json)
Hash identifier:          CipcC0QIuE0gAhPPJu6ha5Ug7GLToi+c6t8fTmexmd8=
Subject key identifier:   27:91:A8:9D:A6:7D:85:0D:71:6F:CE:76:79:C6:ED:06:84:AE:31:B6
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584DAC457DFF51F81D17DD6D50E0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     13576
IP address blocks:        66.115.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:7d:ff:51:f8:1d:17:dd:6d:50:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=752bd8d0-65f3-4506-82e1-af40ffbae6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:0f:cd:46:9c:4b:e2:6f:e1:dc:9c:d9:37:
                    e6:4d:c8:8b:fa:3d:bd:7d:30:42:68:41:e1:11:44:
                    9a:fc:55:be:fe:17:e1:b3:6a:df:48:44:f0:a2:52:
                    8a:b2:47:83:29:c5:62:13:89:41:4c:73:e5:0e:ed:
                    ae:4c:f5:dc:97:ce:fd:4b:41:0e:71:96:40:8f:b8:
                    36:81:d6:81:90:6c:1b:7e:a9:fa:d2:8f:e6:c0:c1:
                    0f:31:ca:e1:8a:54:c6:22:61:8b:b5:77:82:75:4d:
                    62:57:6e:ed:bd:9a:26:d5:35:3f:ff:a2:7d:00:3e:
                    6c:83:f1:77:bd:c7:b6:9a:98:06:65:ec:dd:85:25:
                    b8:e0:bf:53:19:83:a5:8a:e6:ee:71:fa:09:19:7b:
                    c0:54:ad:91:07:82:75:f7:32:00:41:5b:2a:9e:70:
                    1a:fd:08:3b:c2:87:ab:75:25:43:5b:ed:fe:78:ec:
                    cd:bb:93:4b:04:ee:c0:0f:b0:73:65:e0:a6:7a:e4:
                    6c:01:6b:83:d4:f1:53:44:d8:90:fc:7d:a8:0a:c4:
                    3e:2d:b2:eb:e2:e6:6a:65:38:85:e7:8f:e2:cc:cf:
                    bb:a1:91:12:a7:1b:b8:cd:8e:ea:44:2d:1b:f6:41:
                    e8:77:4a:1b:a8:45:e9:3c:b0:ad:67:a7:a9:e7:c5:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:91:A8:9D:A6:7D:85:0D:71:6F:CE:76:79:C6:ED:06:84:AE:31:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:9a:bd:6f:a5:3f:25:34:db:cf:a4:24:ba:94:50:c9:58:de:
         d7:6e:fd:8a:ff:ed:46:1b:b0:84:1b:3e:22:67:38:06:e2:5b:
         f4:da:ce:59:74:41:c6:4d:85:c2:2d:89:71:35:ce:4e:26:ed:
         27:04:e7:70:b6:9c:47:1d:8e:ae:e9:f2:e3:f4:d3:f0:4a:c7:
         dc:43:ab:45:e7:70:ac:18:c8:c2:c8:10:68:7a:80:2c:e0:54:
         e9:ff:1a:9f:d0:69:b8:d4:68:72:6c:63:16:06:08:b7:bd:1e:
         08:bf:80:d0:50:a8:fb:e0:c4:59:cd:fc:24:66:a6:48:70:65:
         66:b9:68:5d:bc:26:0e:2b:fe:7c:c9:60:3a:d5:37:26:e5:72:
         77:08:7d:9b:f1:25:d6:1d:8d:63:e1:a2:94:55:f2:4c:fa:14:
         b5:8e:b8:34:3d:fa:d6:c1:dd:6e:7a:6b:ac:fe:0f:4a:f0:45:
         54:7e:33:d0:ca:b4:5d:47:5e:a1:c3:67:2c:78:73:63:05:d9:
         d8:22:6f:40:d9:6b:46:48:d3:a7:cb:f2:3a:5b:eb:71:d2:23:
         59:55:57:49:46:e5:d6:fb:27:95:e4:b0:31:04:72:32:d6:9e:
         f7:dc:b7:e2:a9:c5:b3:0b:01:2b:d8:a1:e5:cb:b5:ff:b5:40:
         8b:a2:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:31:17 2026 by rpki-client