Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/854f8298-32f1-3ea4-910e-0bed477faff2.roa
File:                     854f8298-32f1-3ea4-910e-0bed477faff2.roa (raw, json)
Hash identifier:          C8saQ/4rJhW+HWZ7Pr/OdVjiyUIHbIKU0oEosDLy3ZU=
Subject key identifier:   1C:9B:A9:84:CF:58:69:FA:E7:94:59:CC:9C:1F:7F:17:02:06:46:6D
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584E1E449F2160061959E8529F40
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/854f8298-32f1-3ea4-910e-0bed477faff2.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     21928
IP address blocks:        66.94.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:9f:21:60:06:19:59:e8:52:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=2947f649-58c3-4174-a90c-72da5c53b5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:04:63:23:b6:07:58:b6:a4:7c:43:5e:59:
                    b9:8c:24:07:ef:72:63:fb:5a:8c:0e:11:3b:5a:7c:
                    a0:cd:26:2f:b1:67:a5:b6:7c:28:51:58:a5:fe:37:
                    31:26:cc:3e:5a:73:ae:04:ef:ca:88:51:48:03:bb:
                    33:02:03:2d:8c:01:10:51:48:8e:b9:c0:5f:78:27:
                    74:f1:84:a2:ed:0c:8f:34:7b:db:05:bb:70:ba:d0:
                    d2:d6:42:2e:36:a0:6c:ae:2b:14:64:ee:42:d5:12:
                    9e:f0:b4:a5:31:a9:1a:7a:19:97:a0:99:16:87:f4:
                    51:c4:8d:dc:65:ed:27:ce:6b:fa:5d:02:3a:58:1e:
                    ef:8b:57:7b:85:ed:a6:04:67:3a:4e:1c:ad:40:82:
                    e8:d7:e2:e9:c1:0f:a7:44:bb:ae:e9:81:18:00:0d:
                    14:2d:d9:92:8b:c3:c4:d8:8d:be:f9:e7:0b:83:db:
                    c1:2f:4f:d9:9a:0f:0e:0a:0a:60:ab:12:5b:05:44:
                    76:51:10:20:8b:92:e7:ca:88:a2:16:3a:04:6f:7f:
                    df:ae:28:99:b1:1f:33:36:c6:bf:34:af:b3:b3:5c:
                    9c:67:39:47:a6:f4:d2:08:5e:d8:96:3c:5e:93:b5:
                    33:b8:0c:b7:38:38:07:2b:53:14:38:a1:e1:26:41:
                    11:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9B:A9:84:CF:58:69:FA:E7:94:59:CC:9C:1F:7F:17:02:06:46:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/854f8298-32f1-3ea4-910e-0bed477faff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.94.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:cf:c0:e3:f8:d5:e0:99:58:9b:9b:79:52:89:7e:cd:c7:57:
         e9:85:bc:fb:7c:37:ca:59:fb:3b:1a:45:ee:37:23:5e:8d:a9:
         79:52:ac:8e:6e:f5:5d:68:f5:2b:a6:d5:d0:b4:97:f6:6e:8f:
         e0:25:68:1d:a9:46:43:bf:36:f2:de:f2:9b:7a:8b:76:26:8b:
         38:9c:ad:fc:34:53:12:33:23:c4:5a:85:2c:c9:78:b3:a3:83:
         3e:24:5b:18:41:a0:e3:b4:b2:6e:09:cf:ff:41:0a:95:b4:b1:
         5e:f7:d1:ce:53:19:6e:94:b1:9c:4d:74:47:49:20:9b:55:0e:
         3d:5d:13:74:0a:87:49:09:fb:b9:d3:f4:27:aa:18:73:dd:00:
         e2:2d:d1:c5:15:6a:a6:72:fd:22:c5:1c:05:c5:78:fa:06:70:
         ae:96:cc:3d:90:55:e7:85:78:e6:4c:b3:1e:cc:c7:36:a5:3d:
         39:c8:2d:68:d1:86:2f:33:17:89:eb:5b:49:db:9f:89:a9:0d:
         b9:4b:a6:de:84:18:78:1f:9f:a8:23:0e:52:26:aa:f3:39:7d:
         7d:85:5f:2a:3b:a7:cd:1e:a0:4f:64:b1:e4:25:00:19:d9:68:
         d8:50:fc:06:16:3b:50:92:33:4d:5c:66:49:9d:3e:0a:06:2c:
         c3:e0:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:47 2026 by rpki-client