Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/c36929a8-3c26-3a68-9bf7-172634b41cdc.roa
File:                     c36929a8-3c26-3a68-9bf7-172634b41cdc.roa (raw, json)
Hash identifier:          OOUd9Oz1XMajNhAMdxydc0VOoBZ+jkTweHmH5bM/xlw=
Subject key identifier:   CF:83:C0:26:A6:D3:E7:48:F4:41:D8:5A:2E:04:FB:D0:34:6F:C2:7E
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584D80FFF5EDBD5E7EA23DC869C0
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/c36929a8-3c26-3a68-9bf7-172634b41cdc.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     20040
IP address blocks:        66.117.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f5:ed:bd:5e:7e:a2:3d:c8:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=3f110a30-b407-410f-93eb-5466bdabba7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:69:24:06:a0:d7:55:f5:36:4e:96:ae:54:
                    be:13:d0:03:cb:a2:7e:be:46:6f:d9:61:fe:2e:11:
                    fc:0a:75:f5:d1:14:5d:f8:20:af:f7:0e:13:30:1b:
                    c5:5b:a3:ce:80:b6:8d:f2:b3:cf:98:44:bb:6d:fa:
                    c1:8d:03:66:e9:a2:69:8a:b1:24:5b:2a:64:91:71:
                    0e:84:ae:6f:f1:be:57:44:0e:18:d4:33:5e:7c:d7:
                    8d:2e:d7:f9:da:87:f2:68:6d:f7:b5:20:fc:2f:d7:
                    7b:c3:b7:2f:17:53:cd:74:5f:ab:a5:d3:b0:49:e7:
                    d8:cf:80:0b:49:6d:78:d8:66:c5:38:9f:92:b1:23:
                    11:da:f3:e8:d0:9a:2b:3c:fd:bb:78:22:82:ab:2d:
                    60:2d:0a:a9:7a:07:8a:5a:40:9b:99:38:18:cf:1a:
                    b4:d9:84:a3:3c:09:d9:b9:3f:2d:74:2e:e0:97:c0:
                    49:de:5e:5c:d9:19:3e:7c:15:21:85:d0:8c:83:65:
                    c3:63:bb:9e:a7:27:78:78:9d:f5:eb:86:82:68:06:
                    d5:95:da:6e:7e:9e:37:bc:f7:b6:3e:70:be:e0:15:
                    c9:c9:67:ef:e5:34:ff:62:1f:5b:1e:e7:57:7f:0b:
                    2d:f4:ae:90:72:f0:1a:ec:f7:db:ef:54:93:53:9d:
                    b7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:C0:26:A6:D3:E7:48:F4:41:D8:5A:2E:04:FB:D0:34:6F:C2:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/c36929a8-3c26-3a68-9bf7-172634b41cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:68:8c:3e:bc:d4:26:12:a8:6a:b5:8a:83:8e:ca:12:49:98:
         75:7a:b3:6a:76:f2:13:c7:94:27:c2:1d:4d:5a:2a:78:6d:5e:
         de:f4:fd:a7:f5:78:5f:43:c6:da:cd:1c:23:c3:05:2c:38:b7:
         e2:01:99:fa:be:00:48:f9:d0:38:eb:08:1f:30:13:96:d7:ae:
         a3:c2:e6:54:5b:c4:60:ab:c3:9c:cd:bd:0e:3e:d3:ca:3d:37:
         00:b9:f9:15:b3:10:f5:9d:67:18:51:7e:be:2b:a6:15:60:01:
         4c:9a:a3:ec:65:46:3f:d6:b2:29:17:85:b2:16:bb:ca:fa:70:
         66:24:ea:06:a6:b7:e2:fd:2b:e6:1f:73:a9:13:65:37:d0:e2:
         8d:b8:bf:80:74:13:1c:ef:eb:6c:d9:43:22:fe:08:98:74:a3:
         c5:c0:df:8d:95:4a:0d:19:13:e8:5f:f6:b3:ec:96:82:25:74:
         c3:3b:ab:36:b1:ef:57:d6:14:a3:cb:38:2a:2d:e9:1a:d7:3e:
         c5:ae:55:77:14:5a:15:84:c2:f1:34:3d:7b:e5:76:9a:79:d1:
         96:f5:9f:ea:3e:5b:9b:d3:44:1c:fa:bd:95:b3:94:d8:66:71:
         86:8b:9a:79:27:5b:71:00:80:03:25:24:15:33:14:a6:47:84:
         dd:38:ea:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:40 2026 by rpki-client