Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa
File:                     1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa (raw, json)
Hash identifier:          xnN0ORClFQtA1XkMlYX0+eVEk7Tk4Dj91b5Oj8XhyC8=
Subject key identifier:   3E:D5:2D:AA:2F:83:3B:AE:CC:9C:A1:B6:B9:19:78:7B:69:BA:23:70
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F4328584E94EA4D8259F4851761730B60
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     209242
IP address blocks:        66.81.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:4d:82:59:f4:85:17:61:73:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=bf2b1fcb-28db-43db-b508-ca881e20a330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:d0:bb:30:6f:66:79:50:91:e4:94:19:04:
                    15:24:9b:d0:db:db:81:46:15:59:02:c3:17:5c:14:
                    d3:7c:81:10:bf:82:94:67:48:d0:5e:a4:8a:bf:eb:
                    40:30:fa:6a:40:8e:e5:c4:71:e9:a2:70:ca:fc:17:
                    64:4d:93:b1:ad:3a:8f:95:31:12:5e:56:b9:84:b6:
                    92:14:22:f9:d4:e9:6a:b5:44:ea:bb:0e:60:1c:b8:
                    c4:3b:94:7e:8c:0f:bd:74:ea:67:e7:ed:d8:a1:80:
                    11:30:8b:45:ae:1f:91:1e:52:5f:5b:b9:6b:7b:f4:
                    57:0e:d4:ef:b2:88:30:d2:bf:c7:dd:07:4f:1d:c4:
                    cb:de:df:6b:80:31:cb:4e:dc:60:90:43:3c:ba:ae:
                    12:85:21:8f:eb:be:76:0b:7b:94:25:fd:f4:38:fd:
                    1e:76:7c:3f:06:73:e7:0e:8c:9b:26:df:55:63:2d:
                    54:80:29:05:19:7d:1e:be:0a:0a:03:35:ca:40:60:
                    d4:71:6b:50:8f:ce:1d:6a:b4:cf:b9:b1:76:40:02:
                    b1:3a:5a:c0:58:8b:36:2c:25:d9:2e:81:ea:f8:49:
                    c9:e1:ca:2c:df:47:3d:02:38:e9:39:fc:f2:3c:dd:
                    ee:98:e7:3f:a3:fb:9d:8c:1f:e2:80:d2:f9:f1:2f:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D5:2D:AA:2F:83:3B:AE:CC:9C:A1:B6:B9:19:78:7B:69:BA:23:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0a:8b:14:29:63:a4:57:3b:63:06:e0:07:2a:0b:02:b1:50:
         e2:2f:da:d8:52:0d:82:dc:83:53:f9:80:e8:07:b2:72:d3:fd:
         72:f4:5e:9d:5d:27:08:0c:23:25:5a:63:f5:58:00:da:c2:bb:
         ec:50:79:7b:09:dd:01:e1:14:cf:88:6a:a6:98:0d:97:0b:dd:
         3d:c1:bd:80:c3:cb:20:7c:34:6a:20:d7:98:1c:80:4e:45:e6:
         96:6b:64:3a:57:87:12:96:60:33:23:71:f2:d7:d7:1a:a4:3c:
         da:b1:2e:84:47:60:ee:4c:54:27:eb:06:68:26:d0:ff:21:58:
         7e:cb:6c:8c:a7:0a:59:0b:14:75:b3:d4:cd:12:19:6b:a3:ed:
         97:b4:cf:70:99:d0:2f:71:8b:64:e4:3c:cb:0d:fb:1f:d0:66:
         62:41:a2:96:09:65:ff:23:6b:01:c3:f1:5a:1d:df:8c:be:87:
         57:1d:a8:d7:b7:8a:a0:ff:33:aa:6b:96:fd:00:f4:64:10:da:
         58:ab:fe:18:02:ab:38:e6:bf:ce:95:c9:e3:96:19:70:45:9e:
         ef:1a:14:5b:1d:24:1f:0b:35:a7:10:9e:cf:79:b2:45:ac:14:
         63:68:8b:03:c7:67:d6:1a:b9:c8:5b:b8:92:fd:52:e7:97:ea:
         54:4b:22:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:00:22 2026 by rpki-client