Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/616d736b-e697-39bb-91a3-e0d4710e8ade.roa
File:                     616d736b-e697-39bb-91a3-e0d4710e8ade.roa (raw, json)
Hash identifier:          +T7B21sWvNGBUO8pLDBbijbgWM+bXl1xi7vjmHVD9ek=
Subject key identifier:   87:A1:D4:F4:0C:B1:E6:6A:26:DB:3D:79:8E:52:8D:4B:5C:08:68:94
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F487B84359090A3178D30
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/616d736b-e697-39bb-91a3-e0d4710e8ade.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     54288
IP address blocks:        66.160.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:48:7b:84:35:90:90:a3:17:8d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=afb678a7-843d-464d-8548-bcbb6e262182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:94:59:be:54:57:c3:6c:13:12:d5:2c:c9:
                    51:86:e5:ba:d0:ab:7c:08:ec:9d:8c:0a:67:9c:5b:
                    e5:f9:5a:c7:74:3f:2b:b9:15:9a:aa:d2:16:c5:da:
                    87:14:a3:c2:72:3a:23:ff:78:d1:c7:4e:5e:a9:e0:
                    a4:d2:36:91:2c:4a:7d:d9:85:c8:53:e7:14:62:d8:
                    ba:7f:7b:98:10:c6:00:d4:a9:99:8f:c8:35:82:4a:
                    fe:1a:2a:fe:b6:2b:56:05:7d:7c:bb:57:38:b6:c8:
                    d1:97:91:c5:b6:a2:1f:da:fa:97:12:ad:2f:78:ce:
                    6a:c2:77:3c:7c:6f:66:7b:70:b4:df:30:db:b6:36:
                    78:56:81:89:3c:69:50:f9:07:41:c1:eb:e0:de:77:
                    09:19:e2:53:f0:59:8b:09:d1:5d:d0:1d:a0:e4:4b:
                    5b:0c:7d:00:55:ef:41:c9:16:ad:04:ef:1d:ad:c4:
                    fe:74:94:13:ca:b7:9c:cc:4e:2f:d9:13:57:59:e9:
                    dc:22:c1:53:a9:44:7f:4b:30:67:25:2b:46:dd:c2:
                    e6:f7:1c:e2:bd:b3:31:c5:ad:6f:1c:bb:5f:df:ad:
                    cb:72:7a:e1:1e:71:29:a3:7e:de:9d:7b:5e:f2:5e:
                    ec:2e:66:69:80:5b:a4:4c:ce:96:03:21:1f:7f:95:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A1:D4:F4:0C:B1:E6:6A:26:DB:3D:79:8E:52:8D:4B:5C:08:68:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/616d736b-e697-39bb-91a3-e0d4710e8ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:49:68:e4:4c:c4:80:9e:b3:fc:84:95:18:df:74:68:34:27:
         0e:75:e1:b3:96:f4:81:ab:fd:4c:f0:f1:a7:8f:b4:30:72:06:
         0b:94:a7:6d:af:53:5b:23:40:96:b3:f2:77:52:ae:ff:e9:69:
         ff:5c:98:bd:83:45:ab:30:5d:4c:42:43:01:61:0a:56:dd:c4:
         1f:f1:62:fc:84:95:79:9f:1a:2e:18:29:77:31:19:9b:ec:84:
         76:8c:58:f8:a6:94:65:56:00:81:d1:fc:fe:f1:8b:82:be:eb:
         99:e2:87:a7:f4:14:e1:42:b9:99:69:f3:37:98:2a:9c:a0:92:
         e3:8d:ba:5e:3d:c2:61:d2:26:43:d7:3d:91:12:ca:aa:f6:ab:
         97:36:dc:2e:52:3d:60:80:78:dd:ed:92:7f:4a:1e:2f:c4:77:
         5f:17:c7:eb:e4:f4:a2:0e:7b:04:a7:26:ae:d1:0a:1b:3a:36:
         44:df:4b:6a:09:c8:24:e3:de:1c:92:1e:c8:e8:a1:d8:e0:7e:
         7a:7b:92:c0:2d:24:cf:d5:a0:5e:fd:60:ed:a1:d4:34:14:f6:
         b7:2b:03:38:44:a1:2d:71:52:f8:3e:65:82:74:76:04:ee:73:
         84:74:19:5e:8e:1a:bb:c6:a2:72:12:21:04:1e:b7:7c:3e:ac:
         db:f4:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:45 2026 by rpki-client