Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/de9589c2-2421-3d27-9a45-9977945ef310.roa
File:                     de9589c2-2421-3d27-9a45-9977945ef310.roa (raw, json)
Hash identifier:          Y62CXTWLZZgH8FqMfSBTlYF/gazNelpr0ASc1cBfBv4=
Subject key identifier:   90:24:0A:39:1B:10:EF:84:59:ED:2D:9F:7D:E9:7F:D2:EF:2A:7F:03
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584E87A68B36D7B221E0EC5451C0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/de9589c2-2421-3d27-9a45-9977945ef310.roa
Signing time:             Fri 17 Jul 2026 14:58:12 +0000
ROA not before:           Fri 17 Jul 2026 14:58:12 +0000
ROA not after:            Thu 15 Oct 2026 14:58:12 +0000
asID:                     16740
IP address blocks:        66.39.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:a6:8b:36:d7:b2:21:e0:ec:54:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jul 17 14:58:12 2026 GMT
            Not After : Oct 15 14:58:12 2026 GMT
        Subject: CN=51d57651-02b2-4f71-9505-dc287b6f1c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:fa:6f:e2:8c:d1:9c:ce:75:31:cf:96:d4:
                    c9:3b:27:9e:97:d0:5d:9c:97:bb:e8:01:1c:52:3b:
                    a1:83:cb:e0:d8:59:a0:d9:9d:14:36:17:1b:9e:b3:
                    6c:99:3e:fb:e9:f5:2b:80:51:a0:c5:77:f8:8e:d8:
                    b8:ee:0b:2c:77:40:b3:54:cb:ad:db:65:d4:87:06:
                    01:6a:45:d1:cd:e5:4d:86:e4:30:52:af:fd:05:8d:
                    db:1a:b7:31:3c:97:ed:d8:20:9f:08:35:ad:27:f0:
                    a2:b0:1a:fa:69:c3:d6:52:db:e3:6f:f6:5c:07:09:
                    cc:ae:fc:1a:9c:97:ae:e0:bb:d1:31:ad:88:f0:31:
                    6b:80:4b:6f:40:ca:73:ae:75:9a:a9:6f:51:34:34:
                    76:00:0c:c3:3c:ac:df:2f:68:3a:92:97:8e:9f:ec:
                    33:05:16:0d:e8:c0:8f:93:e6:95:67:1e:9a:2a:a3:
                    b8:11:8a:41:b1:68:a4:00:3a:b5:6f:2c:f8:1c:a6:
                    b3:44:13:6c:a6:7e:d1:48:1d:e9:ff:b2:1c:1f:de:
                    4c:70:08:e6:47:cc:7f:a5:82:1b:4e:68:cc:55:3e:
                    a6:0d:25:c9:ea:87:cc:01:60:5f:2d:ec:2d:9d:4e:
                    2e:a3:d3:26:e5:2d:12:f5:99:86:bd:98:92:ff:14:
                    47:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:24:0A:39:1B:10:EF:84:59:ED:2D:9F:7D:E9:7F:D2:EF:2A:7F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/de9589c2-2421-3d27-9a45-9977945ef310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:d9:42:2a:4a:8d:3b:1a:62:25:de:99:a9:13:34:87:a4:e8:
         07:bb:3d:9e:7f:d9:a5:50:87:53:0b:64:14:b4:29:ca:03:96:
         1b:40:da:6e:da:76:a0:aa:67:53:7b:db:f8:39:44:40:2d:a0:
         7f:9f:51:92:28:79:a3:96:a0:9b:af:bb:b4:2d:51:b6:cf:92:
         43:27:22:a1:b9:92:f0:71:44:77:da:3c:ce:0a:6c:e9:65:fc:
         e6:85:c0:e8:af:38:b6:1b:b5:9e:94:87:38:19:b5:34:bf:2d:
         9e:7d:a1:de:ee:e5:d1:2a:f1:0d:26:e6:90:54:cb:b8:aa:db:
         a6:21:8f:fc:57:af:72:aa:02:87:09:91:54:45:c0:33:de:e8:
         bd:2c:2f:c3:71:c9:02:e4:41:f2:1f:7e:39:fb:0f:b6:59:eb:
         da:06:72:d1:92:62:8e:c3:3e:e2:48:07:40:6d:c4:51:47:c1:
         de:9a:77:fd:8f:e9:2a:55:7c:16:c0:53:1b:20:b3:ab:d6:14:
         8d:c1:19:52:d6:4a:3f:9b:21:d9:dd:cf:c1:a5:b2:6b:6d:44:
         3b:93:a2:0c:9f:2e:13:c2:b4:11:b3:fa:d8:a0:cf:43:59:9e:
         f9:75:c4:4c:94:d6:3b:16:d0:8c:ee:e4:a1:de:d8:3a:4d:c9:
         b8:85:2f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:23 2026 by rpki-client