Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa
File:                     8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa (raw, json)
Hash identifier:          LtKlB/JqFh/PaSfBZG5iZkSX50teH1hT8468hLFifPU=
Subject key identifier:   D1:2B:44:B1:90:30:88:85:55:9E:0B:48:F0:30:E0:9C:F3:7F:94:A7
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F4328584DAF10191C7BE74075F696CF20
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     36175
IP address blocks:        66.43.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:19:1c:7b:e7:40:75:f6:96:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=6d420ace-8c90-4e56-9e81-2484440bc901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:17:91:b3:6f:e4:ff:82:6a:99:98:73:90:
                    9e:d7:a2:2e:d1:75:7b:00:f9:d5:d5:d3:e3:48:5b:
                    1f:d2:8e:f6:c9:47:63:b6:87:98:2e:d3:98:9a:84:
                    d2:5f:9b:ce:38:c5:63:c9:98:16:4d:a4:46:61:9d:
                    91:c2:1b:51:d5:ac:3f:f5:73:d3:bb:23:7d:05:04:
                    30:00:8c:e3:ad:a7:3e:be:5f:a9:66:f1:8b:8e:8e:
                    4d:46:ff:4a:ac:e5:62:28:a1:ad:1b:88:ee:9f:50:
                    fd:66:eb:f6:fe:2e:35:50:19:8a:f3:a1:ee:0a:fc:
                    05:d7:91:10:24:f3:fc:60:3e:ef:11:8c:e5:fe:38:
                    c4:00:fd:27:5d:ec:e7:6c:6c:af:77:74:9a:b9:7c:
                    b1:98:2a:bd:c1:d2:e4:b5:60:16:79:4a:e0:5a:77:
                    3d:b6:50:25:0a:4e:2b:0a:54:c3:ba:64:11:43:9a:
                    64:8d:e0:50:b5:27:c9:ec:89:50:4d:15:76:1a:4c:
                    af:99:e5:e4:f7:f8:87:92:ad:a1:6f:84:c3:3a:c1:
                    c7:25:b1:33:2e:b4:7e:5a:8a:9c:d3:28:71:aa:f2:
                    10:69:53:0e:11:2f:56:67:b4:b1:5f:d8:e3:3c:22:
                    21:78:2c:75:8e:5b:97:51:a7:84:bd:a4:08:61:1d:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2B:44:B1:90:30:88:85:55:9E:0B:48:F0:30:E0:9C:F3:7F:94:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:16:f5:f1:a8:b9:d9:70:a8:fc:6e:f2:d7:2b:8a:65:bf:
         89:3d:8f:d5:8b:d9:98:68:60:81:c6:99:2d:68:7a:28:7c:aa:
         69:ad:f0:35:0e:f3:63:e8:8f:b5:17:54:4a:5b:8f:bf:87:fe:
         10:c2:c9:cb:8b:a2:eb:f2:be:95:ff:83:4e:38:b5:fb:c0:f1:
         3e:87:ea:71:59:f7:e0:45:d4:1d:c1:db:ee:65:76:76:62:8d:
         15:aa:5f:68:d4:8d:e7:0e:2e:f4:60:87:54:df:88:fb:63:b5:
         56:5c:fb:82:a1:4f:82:09:18:e9:61:7d:ec:bf:3c:39:08:f1:
         de:cc:58:3e:51:5f:d6:9c:84:d2:c1:48:08:58:fb:09:30:c4:
         e4:7d:9b:a0:4c:9a:6d:33:d8:cb:4e:21:27:4e:37:f8:04:3c:
         72:18:28:d0:a5:7e:df:e7:5f:ea:23:00:ce:6a:2c:23:3a:bc:
         8a:92:34:c4:d8:29:52:2f:06:a6:a6:0f:15:02:05:e5:93:6e:
         cb:14:0e:7d:67:e7:a7:2a:23:58:18:25:f7:6f:d1:50:98:d7:
         b6:8b:4c:e5:8f:ed:ef:6b:14:c7:c8:98:02:5c:71:c6:43:8b:
         f5:a6:b4:14:37:05:af:62:3b:09:6c:8d:a1:0c:52:69:19:b7:
         48:9d:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:23:29 2026 by rpki-client