Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/97d7be3f-44c3-3037-9e33-27813208e6f4.roa
File:                     97d7be3f-44c3-3037-9e33-27813208e6f4.roa (raw, json)
Hash identifier:          6euyrOTMt1FGL40J4GbJIA2Jyy7y0rGVkOnIsS4JhXQ=
Subject key identifier:   9B:5D:38:42:2A:7F:F5:AA:8D:35:65:3A:8E:3F:12:FF:B8:91:23:C8
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584D571FAA0700F4A3C37C93CF50
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/97d7be3f-44c3-3037-9e33-27813208e6f4.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     13768
IP address blocks:        66.199.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:aa:07:00:f4:a3:c3:7c:93:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=8111bbee-4c16-454b-96d8-9d35123ea493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:46:dd:96:7c:95:77:3c:88:82:bc:5c:f9:c9:
                    be:96:5b:45:6d:4b:cc:49:96:67:2d:63:df:30:60:
                    00:49:1b:c3:65:9a:51:c0:28:1a:71:af:26:46:83:
                    bf:1a:d5:fc:c2:a3:d8:01:26:74:ab:d9:5f:28:bb:
                    3f:a9:8b:df:16:24:9a:c8:0d:23:3b:79:21:e2:23:
                    29:3d:c0:66:97:f9:d4:a3:68:a2:ca:51:3f:12:db:
                    a2:56:bb:08:16:7e:0c:ca:71:97:39:9b:83:9a:8b:
                    43:69:11:56:f0:e3:eb:9d:cc:a4:37:0b:9c:1e:ae:
                    dd:8a:a0:6b:18:99:95:42:85:23:6b:17:2a:de:72:
                    54:00:da:3b:54:16:66:7a:40:99:25:4f:1e:73:8b:
                    64:c1:cd:ef:3f:ea:0b:07:1e:10:e3:28:f0:7f:be:
                    a0:26:49:98:d9:ae:d3:a2:60:31:7c:23:9d:0e:2c:
                    4e:2a:15:ee:db:93:fb:87:65:28:5f:78:b7:d3:96:
                    72:81:01:8d:1a:f4:32:41:0f:8b:a6:0e:b2:54:89:
                    7e:79:cd:3f:bc:b7:cb:21:ad:c2:64:64:33:07:50:
                    9c:5e:c5:51:e8:b3:a7:46:21:7c:9e:8b:ab:51:55:
                    63:91:2a:bb:7b:37:16:ba:b1:04:dc:58:75:69:90:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5D:38:42:2A:7F:F5:AA:8D:35:65:3A:8E:3F:12:FF:B8:91:23:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/97d7be3f-44c3-3037-9e33-27813208e6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.199.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:15:2e:e1:ab:59:a1:3d:5e:ad:fe:d6:ba:0d:a9:d8:f2:e3:
         bf:00:63:0a:60:e9:63:2b:d7:00:e4:11:08:bd:70:ca:80:28:
         5c:b1:18:78:f1:7c:94:01:c6:53:22:a8:3b:80:6e:76:ec:8f:
         84:cc:1b:bb:12:ba:c6:5d:06:c4:07:1e:10:d7:1f:d0:e2:4e:
         d3:9c:50:a7:00:83:e9:e9:70:37:00:7d:52:67:41:70:07:b8:
         25:2a:cc:f2:82:64:ca:37:5f:31:d1:94:cd:d1:1a:12:e7:06:
         19:34:05:97:65:45:81:88:c8:b3:d3:97:c5:81:cd:4c:cd:a3:
         a3:2b:4b:3b:e5:d7:92:2a:b4:a6:37:69:d2:08:5c:3b:bf:ee:
         13:1d:64:a8:8b:cb:fe:18:a4:7b:7e:2b:9e:ec:5e:55:c2:d2:
         1e:ff:2b:b2:27:ec:58:16:f5:76:58:3c:17:77:57:3d:ed:81:
         81:b4:d1:c7:c9:a4:40:53:9d:e8:57:6a:04:96:46:79:34:ae:
         1c:b0:7d:05:6c:8d:af:72:17:9d:5c:a3:8d:55:29:96:f1:2a:
         69:f4:9c:a1:7b:32:87:f6:fd:73:a6:af:bc:40:c0:87:09:ca:
         6f:d6:83:00:8e:25:f7:4d:8e:98:cb:59:48:76:48:0c:aa:38:
         2d:3d:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:39:54 2026 by rpki-client