Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa
File:                     ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa (raw, json)
Hash identifier:          y/ToVjfOtG0Y3IczbYBL3JY4T52gkxvx4z8vngEispA=
Subject key identifier:   F7:8F:5E:19:4F:2C:87:8E:15:E3:3C:7A:5D:E4:F4:C0:50:06:FD:0D
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584E2AD45656E7E739E72692AE80
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     36678
IP address blocks:        66.102.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:56:56:e7:e7:39:e7:26:92:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=24648021-806d-432a-83b7-3398eeec05b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:06:41:cd:08:3f:49:e2:b3:9b:09:d9:14:da:
                    88:f4:4d:66:bb:82:1b:9b:fa:1e:3a:61:43:ff:60:
                    2a:d4:ce:c8:85:cb:57:c8:16:ff:87:e9:f7:4a:e6:
                    26:ec:8b:7d:72:ba:9e:1d:04:97:a4:07:24:c1:f0:
                    f0:c2:69:12:ad:9a:02:be:95:a6:bd:6e:61:cc:f4:
                    af:53:22:5a:fc:6b:eb:c2:ae:ba:54:51:8f:3c:0a:
                    2c:27:bb:59:96:e0:d4:5f:d7:b3:e7:1f:b2:8f:0e:
                    92:69:2c:96:10:8a:d8:34:26:4e:93:a3:2b:1d:f7:
                    1b:bd:55:43:53:7f:4e:50:f4:8e:1f:67:8b:0c:43:
                    24:7f:3d:da:c4:a9:3d:c9:39:5a:4d:be:66:cf:e4:
                    fd:30:60:c6:94:90:e0:c4:a7:b5:be:d7:a1:fb:5b:
                    0a:48:50:f1:ff:d4:2c:b3:a3:84:27:38:09:53:7a:
                    94:af:07:c8:1c:80:65:65:c2:47:9e:94:49:40:c1:
                    95:47:cd:df:a6:3c:f6:48:52:64:34:1d:f2:17:3c:
                    64:d2:2c:70:80:95:a6:fa:5a:33:12:5a:64:c7:e0:
                    af:7e:0e:d8:82:06:64:dd:50:e6:d8:ec:72:90:e1:
                    02:12:2d:d5:73:53:5b:f0:4b:c1:7d:4f:23:8e:75:
                    a3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8F:5E:19:4F:2C:87:8E:15:E3:3C:7A:5D:E4:F4:C0:50:06:FD:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b4:28:63:aa:92:c3:fd:39:89:c0:ae:59:93:92:8d:5b:f3:
         ab:2c:d9:3c:a6:7e:a2:4b:b5:a7:07:9a:b4:a0:af:20:70:1d:
         b0:fa:48:85:f5:87:bd:15:f3:a2:41:89:a7:e4:cd:36:51:f7:
         30:6d:d0:c7:f3:b2:91:0a:a6:8a:17:78:8e:b1:1b:de:76:0a:
         93:b3:ec:42:39:bc:d4:b2:5a:58:0f:c3:35:c6:a4:8b:9c:3c:
         84:6a:b9:44:b6:c6:fd:38:b1:93:f9:d7:37:04:b9:e4:88:ba:
         fd:39:a9:e1:d6:9f:77:35:24:30:52:c0:9b:74:36:0d:89:3d:
         cb:99:fa:6b:3e:3e:cf:3e:8c:45:3f:1a:e8:80:ce:3a:51:0e:
         68:c9:ed:36:ab:63:7e:73:98:07:b1:f2:a9:0b:f7:78:67:97:
         aa:24:dc:af:b0:2b:75:3b:32:e4:af:88:54:98:af:1c:fd:70:
         91:3c:99:de:a4:28:73:a9:54:09:60:3a:be:89:22:2c:a0:f2:
         e0:26:b8:32:58:7a:b9:c8:7a:31:0b:29:83:26:a9:52:43:c2:
         68:a3:f5:be:aa:a4:84:ae:11:97:27:49:75:55:64:04:d5:45:
         a3:ce:df:5e:cf:ef:4a:6b:48:01:ae:04:42:82:3a:3f:d9:41:
         1a:24:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:10:35 2026 by rpki-client