Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa
File:                     4e206120-21a0-3b6c-80db-62308ac9e02c.roa (raw, json)
Hash identifier:          9XAnEcklTSVbRdASNIA+d9sQlJa530U6TTM4BlG12VM=
Subject key identifier:   89:19:EF:DC:A8:82:ED:62:A4:6D:31:75:5C:89:62:67:A0:2F:DC:D0
Certificate issuer:       /CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
Certificate serial:       010D0C9F4328584DD4C072D08E11FA8A573D6E60
Authority key identifier: FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     394456
IP address blocks:        66.223.49.0/24 maxlen: 24
                          209.196.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:72:d0:8e:11:fa:8a:57:3d:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=19d985ac-52f9-485b-914d-a576d7de8be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b1:0c:60:62:46:21:2c:82:8d:b2:6f:65:70:
                    d8:86:25:36:69:87:b7:41:6b:48:30:50:e7:cd:24:
                    33:e2:e2:1a:fc:de:ca:be:75:76:da:76:dd:27:f4:
                    d3:53:66:a8:04:e3:be:1f:11:06:c3:7b:7a:70:26:
                    81:1a:6d:56:ed:0a:fe:48:97:f4:79:2a:7d:ce:5a:
                    1b:ef:5a:2b:8c:9b:39:94:8e:fb:87:bc:60:f9:68:
                    ea:8b:39:18:7c:b2:37:16:4f:5d:c1:60:84:63:ab:
                    b5:74:2d:cc:47:9b:c4:47:5d:cd:b7:a0:bf:ac:26:
                    e1:a7:5d:9f:41:86:83:fa:f2:c7:27:b3:44:07:19:
                    be:54:39:a6:4f:a7:ed:dc:2b:64:01:36:76:33:0a:
                    54:a4:cc:f5:15:7f:04:cb:e7:56:36:31:aa:8b:e7:
                    0a:d0:8f:8e:34:4d:6e:35:60:b8:8e:5b:17:9f:3a:
                    b7:d3:e3:b8:ef:36:ad:87:3d:c7:71:5c:c4:0b:ed:
                    23:de:48:12:bc:f1:01:8a:c4:9a:01:c0:23:46:38:
                    0a:83:2a:1d:45:f3:ca:e4:55:c7:33:d5:ff:7f:11:
                    c6:c4:43:0e:7f:32:46:f9:34:3d:64:2b:e5:29:b3:
                    04:bb:dc:2f:e2:3b:86:14:ef:aa:0f:92:49:02:3e:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:19:EF:DC:A8:82:ED:62:A4:6D:31:75:5C:89:62:67:A0:2F:DC:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl

            X509v3 Authority Key Identifier:
                keyid:FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.49.0/24
                  209.196.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:e3:e7:ad:9b:d0:73:98:be:07:8e:f2:db:4a:d6:8e:d4:
         44:b6:2f:c4:1a:d7:e2:f2:72:02:a6:1f:bc:03:37:19:83:0d:
         b4:be:f4:07:a7:cc:fa:01:63:05:52:58:9d:1a:ba:f4:b3:dc:
         e1:b0:6f:ce:c9:e9:55:60:32:a3:75:9c:9e:76:ad:1c:a7:df:
         c0:d8:96:a2:72:de:62:c2:81:73:b1:a5:b2:57:d1:29:17:95:
         40:ed:9b:62:21:2e:d4:a0:7b:2f:72:74:b7:cf:8f:e2:13:f4:
         b5:4b:58:22:d9:3e:9b:6c:77:bf:e4:cb:d9:17:0a:61:55:32:
         22:2a:c5:bc:71:74:5b:a0:c3:66:ae:fe:76:74:db:f8:ee:0c:
         46:c9:bb:e8:e0:c2:0d:8a:b0:dc:51:2f:39:33:2a:33:c0:11:
         6d:41:2e:5c:71:57:8c:af:84:f6:a0:fd:96:1c:a1:f2:c4:70:
         b0:35:c4:42:66:91:98:1f:88:2a:30:f2:37:3e:f1:06:6f:96:
         73:05:fb:12:b8:e0:33:75:c0:18:40:51:d6:06:93:0b:36:bc:
         a0:ab:bc:d5:4d:6e:86:52:3c:58:61:a8:92:05:35:5c:20:a3:
         3b:57:37:d2:d9:7c:11:14:50:45:98:c6:d4:62:7d:ab:d3:ca:
         12:12:3a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:10 2026 by rpki-client