Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa
File:                     0d50241c-e841-3989-8c88-37d5a93ca144.roa (raw, json)
Hash identifier:          Kt1tEtvLxzXqG1X2w6fSn4fVEAAZGbChLBNamhZgy7g=
Subject key identifier:   D4:77:78:CA:39:52:3C:64:73:16:CA:BF:18:BB:40:6B:F0:71:49:B2
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F4328584E8B24ED71B267A0EA9884EF80
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     52347
IP address blocks:        162.217.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:ed:71:b2:67:a0:ea:98:84:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=1d152c4e-63bd-4e9c-83b3-aec4cc09de9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f4:3a:e4:59:8e:4b:3a:65:7f:a9:07:ae:31:
                    15:8d:df:5b:e8:70:ea:fc:93:8b:54:6f:1d:30:df:
                    1d:7d:16:06:2a:fb:66:c0:7d:9f:c7:48:1e:27:22:
                    76:9e:de:e3:1e:21:4a:32:56:f5:3e:22:19:15:34:
                    02:95:1f:b5:ba:09:ae:d5:6e:66:60:42:22:46:6a:
                    c3:6d:9d:22:7c:8e:64:c0:67:fe:84:e9:2c:65:8b:
                    cc:e1:8a:d8:3c:8a:af:70:ca:41:9a:79:15:e9:e2:
                    cb:0a:ca:bc:28:70:d5:84:01:90:91:84:2e:cc:a8:
                    76:d2:bd:40:9c:47:a2:63:79:2b:44:d7:35:ef:21:
                    8b:19:11:f7:7a:53:88:1a:36:ef:34:36:08:90:84:
                    4d:25:61:e0:31:6e:1e:3b:71:0f:90:b7:be:bb:ca:
                    0b:4f:ba:16:61:9d:23:94:5a:30:95:bb:40:d6:f6:
                    e3:d3:30:fc:45:75:a3:e4:eb:21:e3:7f:ea:4c:ea:
                    59:b6:53:5b:66:62:8b:f1:75:3b:18:ff:6a:d1:88:
                    e9:3e:c6:5b:67:50:7b:c1:9b:45:3f:22:48:2e:2e:
                    54:61:db:7a:f0:0f:7f:d3:92:f3:d2:a3:e3:3d:a2:
                    bc:30:43:13:ed:7c:c6:bb:61:f7:e4:bd:c0:df:ac:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:77:78:CA:39:52:3C:64:73:16:CA:BF:18:BB:40:6B:F0:71:49:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:59:37:e3:23:ef:b7:01:3b:a9:4a:24:c1:43:85:e8:4c:22:
         7c:84:6f:1a:0c:f5:8e:4e:9f:78:60:cb:0a:b5:c8:d9:58:ab:
         b5:08:5a:85:e4:96:91:73:46:88:9a:d7:97:1b:6c:fc:b9:ae:
         71:18:61:1e:67:e3:6f:5b:f9:1f:40:a7:5b:f6:81:34:ce:ed:
         61:aa:86:6a:fa:ca:59:b3:64:28:5f:02:ef:1f:70:3b:33:80:
         0a:88:c1:24:43:23:da:b9:f9:28:7f:1c:1a:e7:2a:fa:76:51:
         c5:00:f9:2e:0a:49:bc:a3:e7:ad:e4:84:71:23:dc:37:f1:ca:
         6a:ac:46:1b:e4:73:f1:02:69:2d:c9:9d:6f:20:e3:f6:2f:d6:
         6a:1c:af:1c:95:e3:15:88:e6:6d:f4:60:48:9d:ec:a3:fc:52:
         49:29:fc:b6:ef:bc:9c:f6:2c:7b:74:e8:e0:6e:92:9e:b5:b0:
         40:d5:55:97:ab:65:91:fd:bc:7a:3a:f1:6b:33:12:81:9e:61:
         f3:f4:51:43:1a:b5:96:dc:1b:33:d3:c5:ad:18:72:7c:c5:f8:
         01:58:cc:0d:72:1f:cb:57:1a:98:0f:9d:36:5e:b8:1f:79:2e:
         2d:c2:3d:c3:3f:bd:0d:98:78:0a:ed:07:ce:20:48:81:4c:43:
         b0:2b:25:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:53:12 2026 by rpki-client