Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e5f457c6-507e-34b5-b3ce-95dbb947d693.roa
File:                     e5f457c6-507e-34b5-b3ce-95dbb947d693.roa (raw, json)
Hash identifier:          86RkPbyLamLqks+p8J4AQrviCCIm3ZN+mfLeuHQmD9c=
Subject key identifier:   C5:15:D3:AC:86:B4:A5:96:F6:3B:26:32:5A:51:E6:4D:40:16:35:FA
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584D86954DC5EC7A8260397A1300
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e5f457c6-507e-34b5-b3ce-95dbb947d693.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     52129
IP address blocks:        66.159.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4d:c5:ec:7a:82:60:39:7a:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=b6dff77e-6a79-4e27-a895-0f50c3daefb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:1c:47:a4:21:37:6e:8b:ab:bd:4e:dc:d6:
                    6b:fd:9e:0b:aa:a5:4d:77:53:f4:40:46:42:53:e1:
                    75:42:62:bc:cc:3a:e5:ce:a9:b6:f9:a9:0a:91:5b:
                    a1:3e:f4:9e:8f:b4:3a:ca:78:88:0d:67:72:92:e2:
                    26:4b:26:c0:08:25:ba:67:ef:ec:6f:b0:d5:aa:8a:
                    65:3c:0f:61:b3:65:ea:11:97:01:85:fe:28:60:b1:
                    b8:96:fb:f9:22:32:18:d7:e2:c7:f1:e2:ef:78:ec:
                    79:66:3e:78:d8:ce:58:db:2f:8c:a9:da:59:04:e0:
                    e8:c0:b5:4e:54:4a:2f:c9:00:70:57:bb:f5:75:4d:
                    de:58:03:0f:81:f2:25:cc:f5:6c:ec:c0:83:fd:49:
                    87:b5:52:46:e3:8e:d7:84:53:96:af:6b:52:e7:73:
                    f6:bf:6c:2c:d3:d7:ea:14:3b:20:df:fb:1b:5d:e0:
                    fa:c8:f1:d1:05:85:64:f4:ba:69:c7:8f:7f:47:67:
                    dc:41:4c:57:71:84:3f:42:50:cf:2f:e3:56:10:e3:
                    1e:0e:37:a4:27:d1:d2:87:30:e6:de:1c:ec:21:bf:
                    20:0d:32:85:3c:e6:c8:25:a2:19:94:60:d0:56:95:
                    70:6b:1d:40:a5:9b:22:64:6c:99:eb:b0:d4:ca:9a:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:15:D3:AC:86:B4:A5:96:F6:3B:26:32:5A:51:E6:4D:40:16:35:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e5f457c6-507e-34b5-b3ce-95dbb947d693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f2:a9:5d:ac:29:62:45:e1:43:38:c0:8b:f2:d3:2c:ed:b2:
         8a:72:02:6b:ec:2f:f8:cb:43:12:37:9a:5f:d5:f3:5f:46:1c:
         df:62:34:ea:02:56:c9:5d:d5:dd:c1:b4:31:f2:26:ba:69:df:
         26:4c:27:36:97:80:12:b6:58:00:67:66:84:dc:3f:63:9a:e3:
         90:df:98:34:30:c1:dd:3b:ac:fb:04:9c:8e:42:9f:c1:76:26:
         3f:08:67:7f:a0:16:fd:0f:4f:b7:ac:12:ca:c1:fb:3e:de:92:
         b8:3b:90:4d:d6:d1:1b:6b:a2:73:a3:8c:49:e9:9e:01:83:77:
         74:8a:ad:1b:fe:75:6f:ee:6e:20:05:99:c1:fb:a5:f8:6b:17:
         36:5f:d2:0f:9b:d1:ec:79:a7:27:a4:6b:f8:7e:8e:55:05:72:
         f1:3b:c2:a6:72:0c:ca:05:62:c8:d9:8a:b3:91:04:26:aa:34:
         dd:6a:88:b1:c1:60:c7:9e:23:70:af:84:78:71:d9:a9:d2:ec:
         74:df:8f:8f:46:86:02:c5:c6:17:36:de:90:b8:89:4e:bd:f1:
         f8:ec:e7:f0:6f:8e:45:d4:de:5e:9f:bb:46:3c:c4:e9:33:0a:
         2c:5b:b9:a3:be:05:1f:06:c8:a2:54:93:71:d3:1f:34:c8:c5:
         01:47:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:23 2026 by rpki-client