Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c94c390-9805-33c8-be1f-e38fb76f713f.roa
File:                     9c94c390-9805-33c8-be1f-e38fb76f713f.roa (raw, json)
Hash identifier:          uz6yQVNJO1cFKroI1ZYPjfsoOM1yvIyK2UaVeLPZaMg=
Subject key identifier:   57:94:4F:CE:22:74:6E:95:4F:6C:27:AE:09:AF:F5:3B:1D:13:D5:49
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DE84B5A9FE048E89ECA8B4500
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c94c390-9805-33c8-be1f-e38fb76f713f.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     23473
IP address blocks:        66.253.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5a:9f:e0:48:e8:9e:ca:8b:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=fd2e7359-6df3-4b04-b885-39da2690ea1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:98:bd:8d:e7:72:95:33:25:dd:ce:c0:a4:
                    21:3e:1f:f6:48:43:6c:6f:0d:0c:4a:3f:03:e8:1d:
                    1b:96:95:36:15:ec:34:c8:79:a5:8b:19:77:99:e8:
                    ee:d2:d3:bc:c8:f2:5d:b5:9e:4f:7e:89:81:3b:d7:
                    71:d7:64:2f:6e:01:f9:ca:35:2e:c4:44:8f:53:4c:
                    24:f6:9a:04:2c:c9:61:47:62:58:90:c0:83:db:53:
                    1c:7b:55:74:75:2a:42:fe:ab:b6:4d:d0:f0:6a:a3:
                    f9:f8:a6:30:67:89:a7:57:af:35:41:38:bc:39:36:
                    b2:e1:08:c7:18:87:f3:94:ba:33:65:88:cf:b4:72:
                    47:22:39:52:84:8f:1e:5f:8f:0b:1c:39:18:6b:c0:
                    31:e6:94:d2:d3:3f:5b:79:da:55:f1:19:c5:c3:00:
                    15:ad:af:7e:ea:af:49:f5:cd:03:6f:8d:71:5a:8a:
                    67:b2:f0:0d:a3:e9:10:09:46:1f:6e:95:57:57:fe:
                    d4:cf:c1:7e:03:cf:87:e1:43:a5:ed:1b:f8:68:3b:
                    f1:58:43:1f:ff:43:a3:cc:24:ea:21:28:67:02:19:
                    00:87:13:a2:54:c3:44:f8:67:a1:26:00:7d:51:85:
                    65:df:b9:20:7f:4e:ad:f5:7a:6e:3b:70:60:31:10:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:94:4F:CE:22:74:6E:95:4F:6C:27:AE:09:AF:F5:3B:1D:13:D5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c94c390-9805-33c8-be1f-e38fb76f713f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b3:3f:f4:52:8c:12:8f:ef:e6:de:7f:e2:a0:c5:7a:1a:6f:
         8a:00:b1:d5:51:ac:74:a1:91:c3:46:aa:4d:7b:ae:a7:a4:d2:
         2f:78:5f:f9:b7:36:fd:b3:58:0c:8f:85:49:ed:05:06:66:80:
         bd:f0:d1:d3:ce:8e:63:4d:00:13:12:e8:f0:2e:f1:51:10:71:
         b1:f0:c3:e6:4c:29:f0:4b:4d:2c:b4:56:ff:18:a5:43:67:c4:
         63:9d:a3:18:7e:a3:30:6e:9c:ef:af:da:2b:d8:b6:e5:e5:1f:
         02:89:cb:8d:c2:8d:9a:6b:fb:0f:2b:45:41:25:ae:d2:8f:f6:
         82:6a:22:d2:ce:b1:b2:73:c3:be:f5:1b:1e:da:48:71:27:10:
         94:29:5d:8f:04:72:47:a5:25:27:88:f9:3f:d6:73:7f:7a:68:
         4d:aa:b3:56:86:4c:ba:a1:2a:5d:bd:88:37:5f:1a:3e:55:dd:
         3f:cd:fd:da:e2:21:90:3e:fc:79:f8:ed:b9:12:ed:b5:3c:a6:
         aa:0d:b2:a7:23:b3:74:32:8d:4f:99:41:5a:d5:d0:4d:67:c2:
         05:d3:1a:a0:e1:12:92:83:7f:e6:39:14:98:86:9e:5c:7d:66:
         06:7d:e9:a2:95:15:4b:7a:14:5b:74:73:11:27:8b:11:de:e5:
         34:62:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:07:46 2026 by rpki-client