Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa
File:                     c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa (raw, json)
Hash identifier:          I8hcmpn8Pz5h2tlTHzdFCTNDDuJQqHYlX7yyV3Xzf20=
Subject key identifier:   F7:67:40:9B:61:EC:AF:C7:49:FD:B3:86:69:C9:B1:E1:D7:DA:8E:EC
Certificate issuer:       /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
Certificate serial:       010D0C9F4328584E1FA9AADDDD464FFDE9698F80
Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     21723
IP address blocks:        66.163.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:aa:dd:dd:46:4f:fd:e9:69:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=303101af-d78e-4e99-902e-9e98f5998ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:9d:99:b9:fa:4d:9d:6e:da:83:7c:c4:ee:
                    bd:62:38:47:86:11:90:de:71:6e:b7:b8:48:c5:be:
                    80:44:d4:99:7a:6e:b7:74:a8:25:e2:b8:e7:64:46:
                    e0:49:15:01:d2:19:f8:38:f2:35:b2:19:43:34:8a:
                    2b:e3:35:c7:cd:4a:f6:25:eb:df:b0:c1:8d:b1:0c:
                    41:c0:dc:50:52:dd:d5:e9:f6:04:22:f6:5d:27:96:
                    c9:9f:71:3b:36:03:ab:a8:85:08:d7:a6:f3:3c:f2:
                    f9:32:ed:8b:cb:bf:07:f0:5c:eb:16:d7:54:6f:50:
                    56:e9:47:3c:68:b4:2b:01:19:79:e9:ec:5c:28:60:
                    df:2c:d4:48:19:c8:91:95:4e:36:61:f3:c5:49:26:
                    69:e0:43:6a:61:94:00:12:f4:e3:62:9a:2f:34:40:
                    f9:73:2c:1d:fe:79:e7:8b:5a:1a:30:41:e1:9a:57:
                    21:4f:2f:40:0b:84:cb:08:0b:7f:2c:f5:e6:16:81:
                    f4:65:32:dc:97:bb:70:aa:b4:81:a7:42:9e:0c:46:
                    b4:8c:ef:a3:cb:c3:96:72:0e:2f:48:8e:41:c2:33:
                    97:82:65:c4:4c:3f:b7:2f:a6:8f:fc:be:ae:8f:f2:
                    00:7a:b7:6c:b6:1f:41:aa:a8:bf:eb:1c:bb:45:00:
                    15:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:40:9B:61:EC:AF:C7:49:FD:B3:86:69:C9:B1:E1:D7:DA:8E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl

            X509v3 Authority Key Identifier:
                keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f1:51:28:ff:8d:1c:a6:d3:7a:0a:d4:43:f1:b4:28:c7:1d:
         a6:30:58:08:f6:85:a3:ad:c8:61:4b:a1:e6:8d:91:99:3e:46:
         b2:34:34:ff:93:12:70:1d:30:db:c6:cb:0d:f0:ca:02:ee:45:
         04:6c:8f:12:50:f4:61:ca:16:a9:6a:77:48:97:52:79:0e:25:
         56:6b:a5:0f:2d:af:f9:4d:0c:bf:85:77:4d:75:47:28:e7:3a:
         85:c6:c5:5c:c0:5d:87:0f:8b:b8:c4:7c:57:ac:82:ed:4a:d5:
         7f:1a:50:0c:44:3c:4f:10:1b:c0:61:ed:39:5a:8e:a5:ba:88:
         22:06:c5:b4:52:c3:b0:75:dd:74:9b:7f:c0:ca:16:e1:9b:1d:
         ba:62:91:89:27:aa:2f:b6:a6:0e:1e:ab:d9:1a:bb:fc:03:ab:
         df:85:c8:f6:66:5b:09:44:44:be:b7:9a:4f:db:86:1d:f4:fe:
         d9:08:41:55:f7:da:6d:3c:3a:a1:33:bb:40:4e:d6:7c:ce:db:
         75:b2:c4:f2:7a:d4:9e:dc:ce:af:84:a5:89:24:fc:88:86:62:
         6f:6f:a0:74:df:bd:2c:b3:ac:c4:a7:d8:0b:a7:43:7b:f6:be:
         af:c8:9e:9a:ff:50:17:5c:8d:5e:ea:0e:34:18:2b:f3:ae:d1:
         d8:fa:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:01:27 2026 by rpki-client