Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
File:                     cca54213-030a-3b3d-90f9-2b547482f0e0.roa (raw, json)
Hash identifier:          HXEGDm7PdI1OGHN65Kr2QF40j9cZFOZPYbOCSsN0Yck=
Subject key identifier:   C7:66:69:53:45:E9:CC:0C:4A:65:28:36:A5:23:A3:9F:D4:25:C2:E2
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F4328584DAF1017586A1F8704B7415F00
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        66.43.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:17:58:6a:1f:87:04:b7:41:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=4a41b411-5516-45a5-8f59-80cdb17fee71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:ff:3e:da:6f:0c:c7:d3:49:f2:1d:f7:69:
                    80:3b:43:1a:8c:d4:3b:c2:f8:70:69:e5:e8:a5:f4:
                    5c:84:b3:ae:c9:b7:08:5e:71:7c:21:65:53:0d:9d:
                    8b:c8:88:26:63:57:a2:bb:29:43:1a:cd:c8:44:11:
                    ea:57:80:44:f7:74:df:8c:5f:25:ab:1e:bc:6b:ff:
                    be:56:d6:3a:5e:e5:a0:99:3a:7a:9c:e0:04:15:74:
                    1c:7b:d1:3b:bb:ca:6a:b3:d0:72:5f:99:de:c7:08:
                    7d:2e:66:31:08:77:e5:08:fe:ab:f7:52:78:c6:48:
                    24:b2:5a:b2:91:19:d5:e4:23:bb:c4:9e:d4:13:53:
                    1f:2e:28:49:ed:d4:6a:ed:19:0a:5b:c6:fd:2b:6a:
                    e2:e6:ae:83:48:91:92:2d:e4:a6:ef:98:bd:a0:1c:
                    09:16:64:c5:bd:db:8a:aa:94:ba:29:10:06:14:c9:
                    d6:85:89:ba:f3:f5:d1:22:1b:09:15:6a:30:33:c2:
                    fc:b9:7b:21:75:05:b5:d3:91:93:2a:dc:3a:a6:5e:
                    78:c7:b2:b5:4e:14:e9:30:a9:be:0a:fa:37:fe:70:
                    7d:3a:5f:96:5d:fd:59:06:b2:21:ac:8b:e3:13:65:
                    13:b9:e6:ed:a7:7a:c0:61:4a:66:f4:90:fd:89:13:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:66:69:53:45:E9:CC:0C:4A:65:28:36:A5:23:A3:9F:D4:25:C2:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b2:24:8c:78:32:bb:02:a7:3f:64:8c:8c:e8:6a:5a:c4:24:
         fa:19:5d:d9:14:80:c5:d6:b3:71:c7:91:75:e5:63:84:c1:12:
         a1:81:60:62:70:0e:e7:3c:f5:ac:95:dd:97:12:f3:e2:41:4a:
         a4:36:ba:9a:a7:47:60:9a:48:85:52:71:5b:04:0f:af:2d:80:
         77:38:e2:e8:77:c6:3c:d9:b9:d2:b2:cf:f3:c3:e0:b2:63:8e:
         ad:5f:9b:6a:55:4a:35:11:e9:76:c5:d9:62:44:31:b2:5a:60:
         ce:a5:9a:ce:d8:23:2d:db:6b:24:17:bc:59:cc:a2:f8:a2:15:
         cd:8b:6b:28:4e:5c:dd:e7:7b:38:ba:92:e5:0c:e9:03:b6:31:
         b7:11:21:33:a4:ea:cd:86:d5:0b:64:00:16:23:db:0b:b8:22:
         44:e9:32:36:1b:43:0a:ed:c5:e2:61:d8:29:96:f7:8d:06:3e:
         4f:a5:c5:06:fc:d6:56:e0:a1:8e:43:a7:39:63:5e:40:0a:df:
         0a:98:bd:bb:a3:4b:cb:59:47:fc:a1:9f:16:28:9b:14:4a:21:
         11:7e:99:de:c4:88:89:ba:04:50:15:fa:de:d3:8d:32:29:bd:
         71:cb:45:e8:fe:d7:9b:cc:15:3d:21:60:35:47:c8:db:c2:87:
         0a:76:d0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:48:51 2026 by rpki-client