Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/d56b59fc-80de-3c0a-aa9b-61de5109062f.roa
File:                     d56b59fc-80de-3c0a-aa9b-61de5109062f.roa (raw, json)
Hash identifier:          pEpo11DZrATgwyJdwzeuNfrS+M1lRe3qiWBWOJ1t8yM=
Subject key identifier:   E2:19:97:3D:F8:1D:83:00:A7:B9:6C:EF:64:6D:93:AE:85:39:07:EE
Certificate issuer:       /CN=bf23e246-3039-40e8-b878-ea33708da258
Certificate serial:       010D0C9F4328584E0865E796AB952BF2BDD34940
Authority key identifier: 90:2F:04:A5:F9:B8:C4:E2:08:CD:15:55:48:55:39:78:61:8D:D8:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/d56b59fc-80de-3c0a-aa9b-61de5109062f.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     31898
IP address blocks:        66.179.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:e7:96:ab:95:2b:f2:bd:d3:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf23e246-3039-40e8-b878-ea33708da258
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=8e438dac-2e48-4aa4-bcd1-364e3e39b8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b5:85:3f:00:c2:de:ca:bc:32:e3:7a:c4:96:
                    2c:42:54:cd:5f:7d:75:f3:dd:b9:a9:ec:2d:85:9c:
                    9d:ea:b9:11:fb:b5:c5:78:b3:3c:67:71:6c:06:61:
                    8a:d4:9e:ef:77:1c:c0:70:ff:4c:90:b6:59:4b:b4:
                    c5:ed:8c:41:88:98:e9:46:d3:d3:9f:1a:aa:06:cc:
                    52:cb:ec:cf:86:28:1e:9b:85:0a:59:9b:0f:d5:db:
                    14:8d:bc:29:e5:33:99:fb:4a:df:76:b8:c1:28:d4:
                    24:09:f0:ad:be:e7:0c:49:91:ad:fc:e4:77:95:6d:
                    e2:fc:4f:20:54:05:db:36:52:7b:93:b5:f8:fe:f8:
                    22:a2:b4:36:05:5c:6a:05:2d:f6:fb:c1:30:e1:0a:
                    54:6b:7b:6c:d8:67:df:bc:4e:2c:6f:04:77:42:7d:
                    ed:ab:59:ec:ba:d2:99:f1:48:65:5a:fa:44:d1:9a:
                    ac:9c:1f:59:1a:72:b4:4b:4e:52:ff:ca:1d:62:e8:
                    b8:a2:89:47:5e:d2:f4:59:a4:ef:d4:17:ee:9a:a8:
                    80:91:b8:2b:d1:c8:a8:85:4d:c2:f9:d1:be:dc:02:
                    da:97:79:38:95:ba:4e:1d:a3:f6:0e:49:cb:41:fe:
                    0f:96:71:2f:c4:b7:29:ab:8f:eb:97:51:b6:51:77:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:19:97:3D:F8:1D:83:00:A7:B9:6C:EF:64:6D:93:AE:85:39:07:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/d56b59fc-80de-3c0a-aa9b-61de5109062f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.crl

            X509v3 Authority Key Identifier:
                keyid:90:2F:04:A5:F9:B8:C4:E2:08:CD:15:55:48:55:39:78:61:8D:D8:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:86:6a:b2:61:f0:ac:db:6b:b1:7a:ab:59:66:5f:b5:2a:fa:
         67:68:78:61:b4:7f:2a:08:81:bd:9c:43:43:39:50:c7:f9:1d:
         ee:1f:b9:f8:22:01:ec:12:16:51:8a:02:ac:8c:41:3e:e5:a9:
         36:10:aa:07:85:91:47:25:05:49:b2:e5:e6:2a:43:27:cf:bb:
         12:c6:2b:cb:04:14:d0:c0:e9:1a:83:57:86:d9:21:34:6d:44:
         69:c7:97:b9:e4:a3:6c:3c:9a:54:3a:30:33:36:ff:eb:04:5d:
         0e:60:e6:1e:b7:e0:98:26:a0:cf:e4:34:25:7a:a8:78:82:77:
         8f:02:86:97:89:62:90:f2:e0:8c:78:61:fc:4b:bc:ef:9f:98:
         4b:2f:6b:76:fd:67:a9:05:dd:9b:2e:71:b6:cd:a4:d3:5b:12:
         45:2d:b2:db:b9:7e:8e:a4:35:0e:94:3c:1a:8d:79:59:29:43:
         7c:6a:36:bb:d8:39:51:8c:f9:fc:4b:43:b0:75:c2:22:65:94:
         f4:a8:34:9c:37:c1:95:a1:99:f5:bb:d3:6b:68:42:4e:0b:09:
         b1:22:a2:05:c6:f3:cc:66:6d:07:8b:f4:5d:4e:0a:4e:01:c8:
         0b:c5:ea:88:84:db:46:d6:72:f1:de:75:6b:00:b6:83:55:19:
         0e:b5:f5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:47:05 2026 by rpki-client