Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/a391c252-f605-312a-8113-99fd2578cecf.roa
File:                     a391c252-f605-312a-8113-99fd2578cecf.roa (raw, json)
Hash identifier:          IsEEqtAbgpkrSiQTS0SIG4iC6F5et/eSJsRp4hplVXg=
Subject key identifier:   2E:CA:3E:9D:1D:5F:65:5F:C7:31:4D:7E:33:4E:4F:7F:8E:8B:B7:82
Certificate issuer:       /CN=11111c75-ef67-41bd-b074-4c401bf74ccd
Certificate serial:       010D0C9F4328584D746FBA198BC2D885B702A580
Authority key identifier: 29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/a391c252-f605-312a-8113-99fd2578cecf.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     8047
IP address blocks:        66.58.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ba:19:8b:c2:d8:85:b7:02:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11111c75-ef67-41bd-b074-4c401bf74ccd
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=dd80f418-a8d9-4193-a37e-a8f5517935a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:31:a8:2e:ce:a0:20:19:76:71:70:63:90:
                    29:16:b9:94:35:30:2d:b3:d8:07:88:a6:bf:4b:c7:
                    8a:2d:ac:49:bc:6e:eb:16:01:80:f6:97:d1:df:36:
                    3b:78:45:bd:3f:43:b8:b6:c4:5d:cb:89:37:38:e3:
                    d7:ba:fd:da:6c:13:d4:14:e6:1a:b0:70:dd:ad:fd:
                    69:09:76:ea:d0:b3:04:a9:63:ee:9a:aa:69:70:c8:
                    d9:74:00:8a:92:10:e9:fb:6f:c6:bf:79:fc:0e:11:
                    62:cb:28:50:d4:a6:44:56:f8:6d:c4:78:ed:69:08:
                    f5:5e:0e:18:9e:9a:2a:e9:a0:7c:ac:4f:e7:09:68:
                    c2:9a:79:50:27:3b:2c:92:6f:a1:e0:75:67:3c:eb:
                    e6:2f:8e:85:f7:c8:bf:38:b3:30:98:fa:38:f4:1d:
                    85:1e:d1:27:1f:47:35:20:c0:e8:56:92:8b:9c:1b:
                    a7:38:08:70:4a:72:e8:61:33:ca:bd:df:a9:99:29:
                    0e:4e:2c:f9:e7:34:56:cf:2e:3a:7a:ae:fc:a2:86:
                    12:86:c9:4f:aa:48:aa:67:ee:16:62:d0:ec:91:76:
                    68:1c:9a:26:9d:ae:d4:ab:02:b8:d7:4e:65:65:fb:
                    6e:e7:2c:8d:01:c9:d0:94:73:69:c8:aa:e1:9a:85:
                    09:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CA:3E:9D:1D:5F:65:5F:C7:31:4D:7E:33:4E:4F:7F:8E:8B:B7:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/a391c252-f605-312a-8113-99fd2578cecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl

            X509v3 Authority Key Identifier:
                keyid:29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.58.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:67:23:dd:a0:64:7b:0e:39:3c:85:c4:08:21:3a:c7:7d:
         3f:ba:d4:80:5f:10:eb:79:a1:6a:f1:dc:4c:c4:53:48:47:55:
         1b:35:18:b3:aa:19:21:11:5b:f2:6d:96:7c:1c:c4:0b:a0:4b:
         6b:40:76:97:06:31:ec:09:f6:e7:b2:7e:a6:04:48:d4:bd:38:
         b0:2c:65:3b:9a:b6:68:64:2b:90:2f:80:08:c1:01:e4:08:91:
         2e:a3:b9:83:3d:cc:51:3d:7b:a7:bf:e5:83:7d:2d:85:72:b6:
         ec:61:36:6b:b3:51:34:ea:94:92:4b:e3:6c:b0:e3:45:b2:5c:
         71:ae:b6:12:ef:f6:b6:0d:69:33:8d:8c:64:8f:97:41:f6:19:
         5d:66:8b:bc:98:3c:8e:f4:51:28:5e:83:a0:5c:ea:cc:f8:74:
         b7:18:16:b4:e1:49:fc:82:9a:19:f7:ac:77:7e:40:0b:a3:90:
         9f:92:86:f5:59:e8:6b:e7:22:cf:38:e7:75:33:40:91:70:7c:
         fb:22:af:68:3f:2a:50:ab:1d:fe:56:3b:9c:bd:b5:45:d5:7c:
         a5:4c:2f:29:6d:e8:75:73:af:7e:84:a9:bf:ff:68:84:f5:0a:
         76:81:b8:fd:ab:9e:51:65:8f:7e:26:e7:85:42:0a:2e:47:18:
         51:b7:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:51:24 2026 by rpki-client