Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/1368bb6b-3400-3d97-82aa-95a2be1848c6.roa
File:                     1368bb6b-3400-3d97-82aa-95a2be1848c6.roa (raw, json)
Hash identifier:          +W8W+hptp/9aGrfIIqW0h2UnpU4KoUQo+wjvLsph+3U=
Subject key identifier:   67:B8:4F:03:B3:84:A1:FD:D6:37:92:73:6E:AF:B7:99:9B:F1:01:ED
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584E25AE9DBC5ADB3A68108521B0
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/1368bb6b-3400-3d97-82aa-95a2be1848c6.roa
Signing time:             Fri 12 Jun 2026 12:45:15 +0000
ROA not before:           Fri 12 Jun 2026 12:45:15 +0000
ROA not after:            Thu 10 Sep 2026 12:45:15 +0000
asID:                     14618
IP address blocks:        23.154.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:ae:9d:bc:5a:db:3a:68:10:85:21:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Jun 12 12:45:15 2026 GMT
            Not After : Sep 10 12:45:15 2026 GMT
        Subject: CN=36c6c59f-a22f-4716-ae95-c02c8eb5d6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8f:eb:eb:79:cc:eb:6b:b4:6a:f6:2a:76:3a:
                    15:0a:53:0c:bd:33:a2:f2:7a:a5:aa:77:a0:77:fe:
                    c4:2b:03:b3:a7:95:85:1b:d8:04:a8:4b:cf:a6:b9:
                    a3:35:39:94:18:11:b3:d7:05:86:07:c4:1d:dd:b6:
                    57:d4:29:e3:70:f1:d9:6c:05:c8:02:19:b1:ce:39:
                    5b:2c:11:19:37:c6:1f:19:e8:76:44:c5:81:ec:6f:
                    16:61:42:52:65:86:02:2c:c0:74:61:fc:e8:d8:6a:
                    4e:dd:d5:ef:02:8e:19:f9:e3:f3:e0:19:e0:2e:80:
                    f6:2c:ea:98:f9:b1:be:60:07:42:27:63:aa:d4:73:
                    6d:73:00:22:d7:a9:53:8a:81:1b:f7:5d:85:18:8c:
                    0f:d9:74:77:e5:8a:c6:5b:d4:7b:0c:80:d7:21:7d:
                    81:0b:4d:0c:7d:e1:b5:8a:86:e3:3e:8b:ed:73:4b:
                    82:b8:d6:43:f3:70:eb:6c:f2:b2:8a:11:e6:7c:1b:
                    bd:86:06:cc:fa:a6:39:88:e4:b4:2a:87:25:ec:ee:
                    55:b2:4f:48:b2:6c:7c:5f:a3:a2:4e:fd:86:24:6c:
                    70:b0:f5:2e:f4:5e:5b:0c:7d:c4:1f:d2:5f:b7:9d:
                    1c:30:66:da:79:df:c3:18:6b:7b:ac:87:a4:3c:c4:
                    ee:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B8:4F:03:B3:84:A1:FD:D6:37:92:73:6E:AF:B7:99:9B:F1:01:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/1368bb6b-3400-3d97-82aa-95a2be1848c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f3:45:65:6c:09:2c:77:be:8b:cb:a4:0b:be:2d:f9:19:70:
         c7:52:ab:69:0d:52:61:0d:a1:58:2a:83:6b:56:08:3a:82:6b:
         4d:20:de:96:49:1c:79:dd:64:51:00:5f:18:3a:94:7c:4e:07:
         11:4f:8d:e3:87:3f:52:e0:da:e0:b9:31:c7:c0:a3:66:f0:d4:
         9d:66:82:68:f2:10:6c:0d:90:25:25:a2:b1:24:13:07:19:75:
         a4:1b:7c:67:c4:52:8b:0e:d2:94:87:1b:4d:0f:60:ca:62:f1:
         4e:28:9a:34:64:cb:71:88:cf:0b:3a:a2:d2:7d:f5:22:cb:02:
         08:f8:73:fa:39:ca:eb:52:91:e7:99:ca:07:a1:b2:ad:da:85:
         da:a0:84:43:04:98:8c:ed:ee:5e:ec:df:ef:7b:1e:51:a2:8f:
         63:a6:ef:18:42:86:c6:13:60:65:5a:dc:b1:e5:38:be:9f:2c:
         1e:7c:81:a8:9b:2c:2d:f6:f8:7a:62:26:db:62:db:ca:f0:10:
         06:73:40:f1:94:44:c6:c2:e2:a0:57:01:38:14:36:7b:37:4b:
         80:94:18:b7:aa:6d:2f:53:9a:aa:11:c5:ce:da:92:23:32:24:
         57:ad:97:3e:30:b3:11:3a:53:8c:94:c8:05:79:25:b8:8c:f4:
         43:d6:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:35 2026 by rpki-client