Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01c6981b-e61c-4d46-83d0-6241a51f74c1/23f1739a-e701-37ea-b914-5576b6541e2e.roa
File:                     23f1739a-e701-37ea-b914-5576b6541e2e.roa (raw, json)
Hash identifier:          krjgIJgqn+eMsqmhabfkaeswUeW1NIFfG8KQmkyqmJU=
Subject key identifier:   9B:35:C6:60:90:E1:AF:8A:9E:08:E7:90:C1:C7:5B:CE:45:20:FB:83
Certificate issuer:       /CN=01c6981b-e61c-4d46-83d0-6241a51f74c1
Certificate serial:       010D0C9F4328584E07009B290DB529EBC45A4800
Authority key identifier: 1A:69:ED:7A:E2:97:02:54:D3:1E:4D:24:67:A6:16:1D:55:76:28:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01c6981b-e61c-4d46-83d0-6241a51f74c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01c6981b-e61c-4d46-83d0-6241a51f74c1/23f1739a-e701-37ea-b914-5576b6541e2e.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     14378
IP address blocks:        66.45.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01c6981b-e61c-4d46-83d0-6241a51f74c1/01c6981b-e61c-4d46-83d0-6241a51f74c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01c6981b-e61c-4d46-83d0-6241a51f74c1/01c6981b-e61c-4d46-83d0-6241a51f74c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01c6981b-e61c-4d46-83d0-6241a51f74c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9b:29:0d:b5:29:eb:c4:5a:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c6981b-e61c-4d46-83d0-6241a51f74c1
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=c77d8d7a-3e47-48ab-82f4-73960ddc3a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:ce:28:17:12:20:0f:48:d4:ed:64:19:2f:
                    19:ed:79:06:7b:fe:41:a5:28:3d:84:c1:f1:6f:c6:
                    60:cc:63:bc:71:83:f7:e1:b9:58:a5:05:79:c4:89:
                    02:e4:49:38:ba:07:ce:49:c5:e9:0a:26:6b:d3:ea:
                    8f:6a:e9:e1:a2:34:c8:a8:5f:27:b8:72:ca:1b:f3:
                    bd:2d:4e:9a:96:3f:1f:c7:1b:cf:59:75:b9:10:87:
                    48:ef:06:40:0c:51:27:98:57:de:7f:6a:54:bd:04:
                    a4:80:32:7e:26:a9:9e:62:ff:ee:2f:ff:51:e6:40:
                    02:3e:f6:c6:d1:1a:2e:b7:d8:83:75:ca:9d:c9:ea:
                    57:78:ea:d6:46:e7:dd:4b:4a:a2:c6:45:43:5a:1c:
                    d6:1d:c1:c9:72:37:0a:3f:7f:1d:cf:5a:b0:a0:e9:
                    1f:69:9f:31:b3:19:83:f8:08:60:b3:03:22:f5:2a:
                    9d:06:ac:0d:4a:de:62:2e:f3:d5:d4:e4:a2:2d:60:
                    cb:0e:d9:47:28:77:5b:18:76:d3:d9:73:e3:4e:a6:
                    b4:1b:a0:86:b7:e9:71:01:c6:0b:70:cf:c6:1d:62:
                    2a:e3:4e:8e:c2:13:63:44:9f:33:a0:71:68:37:f2:
                    64:68:50:95:b7:bb:b6:71:55:7d:2c:f0:46:2e:c7:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:35:C6:60:90:E1:AF:8A:9E:08:E7:90:C1:C7:5B:CE:45:20:FB:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01c6981b-e61c-4d46-83d0-6241a51f74c1/23f1739a-e701-37ea-b914-5576b6541e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01c6981b-e61c-4d46-83d0-6241a51f74c1/01c6981b-e61c-4d46-83d0-6241a51f74c1.crl

            X509v3 Authority Key Identifier:
                keyid:1A:69:ED:7A:E2:97:02:54:D3:1E:4D:24:67:A6:16:1D:55:76:28:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01c6981b-e61c-4d46-83d0-6241a51f74c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a3:77:a3:fa:50:9a:03:08:30:68:f7:03:c1:f5:7e:c7:90:
         34:5b:43:ba:3c:7b:9a:7c:34:21:ee:57:c3:19:47:ba:e1:fe:
         ec:8e:9f:aa:1d:a5:60:80:cb:e4:da:9f:71:90:d1:0c:11:ee:
         43:62:8b:c5:f1:6b:97:08:ac:8b:ff:bf:c2:5a:e7:a9:04:58:
         17:6e:6b:f6:54:91:85:3c:23:38:25:af:fa:d5:92:03:92:56:
         d3:a8:e6:f1:e4:78:34:03:6a:8e:67:28:b4:b6:e9:29:7e:25:
         76:f2:2f:2f:e1:c5:51:e5:81:a9:26:a9:1f:f2:29:ec:0f:df:
         c6:39:5f:54:a0:88:fa:9d:5d:00:78:4e:e5:ed:c2:9d:7c:fd:
         26:13:bd:70:8c:20:1a:03:f8:2d:bf:f6:16:ed:47:aa:f1:9d:
         6e:36:ae:23:30:51:81:6a:2c:75:34:ed:d9:59:93:5e:1f:5d:
         01:7b:53:6a:26:03:b6:13:d7:d2:dc:24:ad:ab:c5:1a:26:a4:
         0c:e6:aa:f2:21:ec:67:f1:87:5d:3a:26:7a:bb:44:00:c8:ca:
         37:63:bd:0a:8b:d3:65:7d:b4:0a:63:12:1d:77:8d:5c:f9:93:
         99:3e:f4:91:c2:cc:b9:56:18:a9:df:f8:0c:4d:3d:bb:d5:01:
         30:32:20:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:07:58 2026 by rpki-client