Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/46108493-9a9c-359f-b7cd-c7d783433bf6.roa
File:                     46108493-9a9c-359f-b7cd-c7d783433bf6.roa (raw, json)
Hash identifier:          6Xwe4QqR3cq3yBz1nIcqtH4qvGsH/kila9XmKrTLA0E=
Subject key identifier:   C6:24:85:B1:B7:6D:E4:DB:2A:44:CC:A0:F1:BA:39:6B:0B:3A:B2:BE
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584D7E352A8828BC3FAD2D924C00
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/46108493-9a9c-359f-b7cd-c7d783433bf6.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     812
IP address blocks:        66.146.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:2a:88:28:bc:3f:ad:2d:92:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=8e27f93c-a0ab-41a4-8263-eac2f41e76ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7a:8c:fc:53:5d:61:7d:31:f6:a3:e1:1a:96:
                    33:eb:cb:4a:f4:19:65:be:e5:e9:cd:ee:0a:69:0a:
                    a0:a8:5b:8b:c1:dc:c2:a4:19:32:b0:3a:4a:2a:ba:
                    cd:f2:60:c3:35:21:d2:80:e7:91:e7:76:34:5f:aa:
                    d2:8a:da:4c:55:60:9a:0c:e5:42:0b:28:87:49:de:
                    f1:1e:68:a5:e4:8c:f9:1a:90:54:6d:8f:e1:21:b5:
                    70:c4:91:7f:f3:80:8e:cb:03:c6:4e:ec:4d:ba:f0:
                    b9:89:51:d6:52:d7:23:ec:b8:20:e0:11:5d:1d:31:
                    5d:79:a6:13:03:13:3a:b3:20:f0:4d:5b:a7:20:73:
                    10:c0:4b:2e:65:ce:0e:ed:61:9c:30:64:06:c4:6a:
                    90:06:4b:32:24:64:a7:45:a4:58:b9:50:c6:09:f9:
                    e1:1e:81:5e:f5:8e:94:26:6f:3b:47:8c:13:88:7f:
                    b4:62:d7:83:82:e0:e6:f1:63:c7:90:ca:88:15:80:
                    5f:bf:4b:d8:fe:46:53:70:97:53:29:9f:26:00:c3:
                    f4:6d:66:dc:0b:48:c5:ac:cc:9a:99:f6:ab:9b:5f:
                    42:fb:da:db:1d:ee:58:d2:ac:75:d3:ce:d1:3b:e7:
                    1a:01:e3:61:c0:c7:1d:de:3c:09:15:87:13:32:b3:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:24:85:B1:B7:6D:E4:DB:2A:44:CC:A0:F1:BA:39:6B:0B:3A:B2:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/46108493-9a9c-359f-b7cd-c7d783433bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:53:2c:ca:3d:78:c2:df:0d:42:ff:5d:a4:17:39:85:b9:cb:
         fd:d7:b0:5d:26:dc:ae:34:fd:cb:4f:61:eb:7b:4d:c2:9e:c0:
         1a:f0:d6:ee:f8:94:0e:e9:46:a0:53:53:74:66:a2:69:99:3f:
         2f:2f:87:5c:df:e5:2c:ce:31:1c:c2:43:2c:38:a3:fb:40:41:
         1a:95:13:2a:0d:96:68:ff:02:9b:67:d7:f8:59:f1:b2:96:e5:
         5c:6d:92:b9:46:7b:44:54:36:bb:74:0c:54:55:67:f7:d3:c7:
         8f:e7:f5:72:79:fb:bb:b6:8b:fc:0b:17:51:f2:58:20:b5:66:
         d5:38:eb:f2:41:1a:e5:67:82:7b:93:29:53:42:ca:83:90:06:
         95:77:40:d9:9a:63:d1:8a:94:c0:cb:3f:b1:b1:62:dc:0c:70:
         5a:c0:1d:b3:14:9c:e4:79:f6:5c:28:ab:4a:61:64:2d:d7:08:
         80:e7:a7:36:08:43:93:79:65:3f:b5:d7:0d:de:7b:69:b4:8a:
         56:55:62:df:5b:4e:73:ab:18:1a:97:b0:04:e1:34:e6:8b:23:
         8d:db:1c:84:df:4d:11:a3:57:63:2e:bb:b3:c5:6d:63:3e:e1:
         a9:10:85:d4:1d:15:44:71:31:1c:9e:2d:8d:7e:55:52:6d:1b:
         c1:82:70:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:26 2026 by rpki-client