Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/e94d701f-d4f8-34d9-9378-572a7951e7f6.roa
File:                     e94d701f-d4f8-34d9-9378-572a7951e7f6.roa (raw, json)
Hash identifier:          nt2gI3sj9FL7ciy7zDhBFuVTvXeQ9nMtQ9yx4owMbag=
Subject key identifier:   B6:60:88:46:1D:C8:AC:A3:BE:E5:EF:75:6E:DF:F2:76:01:54:06:E3
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F4328584D75D52A93643972951DEC5800
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/e94d701f-d4f8-34d9-9378-572a7951e7f6.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     20299
IP address blocks:        65.182.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:2a:93:64:39:72:95:1d:ec:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=e65c55aa-f068-4158-b23e-bd722c6c001c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0a:3b:5a:10:62:3e:96:32:20:02:a9:e9:28:
                    b9:b0:dc:d4:54:e3:e7:74:32:d4:9b:73:46:2f:1c:
                    44:32:04:0e:ca:82:9e:23:9f:3e:9e:b0:0e:ec:08:
                    23:d0:d3:c0:04:db:33:9e:15:ae:fd:bc:84:2e:8a:
                    d5:27:c2:df:72:c3:8e:4e:37:48:af:6c:c8:31:cc:
                    34:8c:62:ee:b2:4a:c5:1e:98:dd:aa:ad:9f:54:40:
                    56:8b:87:42:52:e5:29:0f:2b:7f:f9:41:7f:2a:47:
                    3a:45:73:be:bf:60:3f:45:fe:c3:5d:74:f2:53:d1:
                    c0:bc:6f:ff:96:9d:bf:ad:8d:ad:a2:a0:ad:b0:3f:
                    3e:70:72:b9:96:0d:94:62:97:27:13:ea:9f:74:9c:
                    33:b3:b1:5c:9b:35:eb:fb:4f:52:c2:54:1a:36:86:
                    8b:59:b7:d4:46:7f:06:10:a4:48:ec:c2:88:40:ad:
                    8e:e0:f4:46:fa:8c:19:1a:85:5b:fb:a0:72:97:85:
                    e5:ba:1d:66:cd:e9:1f:e0:76:cb:dd:8c:aa:22:3a:
                    9b:0b:79:3f:3f:ff:43:8d:ad:6e:77:b9:3b:38:7a:
                    78:1f:7e:87:7a:34:f1:a7:7f:a2:a5:9e:ba:cc:aa:
                    09:51:0c:22:98:a1:85:fc:d8:ff:fe:fa:b3:87:cb:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:60:88:46:1D:C8:AC:A3:BE:E5:EF:75:6E:DF:F2:76:01:54:06:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/e94d701f-d4f8-34d9-9378-572a7951e7f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.182.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:cb:23:af:ac:41:b7:80:9c:5f:cf:7c:db:65:c5:dc:db:58:
         b2:db:29:6c:02:49:b4:bb:8a:9c:be:b6:e2:69:6b:5e:36:1a:
         c8:95:05:9c:de:2c:4b:c1:73:f9:9a:13:6c:3d:fc:18:80:a7:
         5d:1c:e5:2c:18:3a:a1:16:3c:b9:d8:c3:12:14:13:99:6b:9d:
         ed:dd:69:ae:8f:59:31:72:63:21:ea:99:d5:c1:5e:48:5c:1a:
         53:25:c3:01:d3:36:d2:44:83:5e:77:bc:90:91:7d:76:a6:82:
         89:06:58:05:21:d0:b6:49:23:f0:16:c8:6c:0a:5e:03:2f:62:
         e1:27:76:64:83:51:8a:6d:1a:69:66:77:35:35:eb:44:43:d5:
         37:24:7d:35:20:0c:d5:d4:71:4b:21:3c:fc:e9:c0:93:4a:66:
         6b:51:89:70:c6:84:6c:d4:02:a6:10:84:a6:b3:4c:61:71:c1:
         78:3f:07:b7:e3:93:93:20:d6:17:6c:4d:69:5f:9c:8f:ee:53:
         b4:b2:76:f8:6f:d7:77:93:c3:94:ec:a7:f3:2c:5b:bb:b9:8b:
         a3:7e:6e:04:d5:79:b0:65:db:68:0b:17:b6:6d:f2:ae:1e:d2:
         96:25:23:7f:8f:f6:f5:d0:77:d7:41:29:69:72:f1:c9:3a:bc:
         56:32:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:45 2026 by rpki-client