Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa
File:                     25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa (raw, json)
Hash identifier:          A5kr5u+CMG1LqNf9tFoXzG7KNNnuBqX6dSg02Q8iB4g=
Subject key identifier:   87:D8:9A:DB:B6:CC:7B:A5:28:23:BB:7F:2A:25:21:50:5F:A4:A4:AC
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584EA798F044D19BEE95F5F71E20
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     394437
IP address blocks:        66.60.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:f0:44:d1:9b:ee:95:f5:f7:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4755751f-5a94-4e99-980a-0bc566d2d4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:da:28:b6:b8:26:ad:f9:62:7e:07:7e:df:
                    f9:56:1f:43:28:a0:b4:cc:0f:d6:ea:34:9e:e9:12:
                    48:85:0e:bd:d7:c2:d2:f2:5a:6f:4e:f0:eb:b0:00:
                    73:89:9a:ee:74:5b:4c:f3:a7:27:b5:ce:94:14:fb:
                    cb:27:0a:a1:4b:46:57:9a:e4:ed:a5:67:03:97:2b:
                    d8:f2:98:28:87:0b:7c:96:1b:e2:c2:86:e1:60:54:
                    67:04:63:51:0e:98:ca:3a:29:18:c5:30:f0:fb:8c:
                    0f:28:1b:c9:b4:95:af:28:f2:c9:ee:6d:77:d8:89:
                    7e:3d:16:da:36:4b:06:ef:ce:4c:e8:c1:66:e2:a4:
                    be:53:bc:a5:d5:95:4e:c8:28:3e:4d:f4:82:24:dd:
                    32:67:2b:6b:40:88:bf:40:8d:f7:7e:46:e1:20:49:
                    68:5b:08:d4:60:0e:63:ba:0e:f2:b2:60:48:bc:0e:
                    40:63:4f:bb:6c:0c:c1:0e:36:11:18:00:b9:44:98:
                    a0:44:fa:e4:12:d6:42:5f:a7:ef:9f:2c:9d:6c:ed:
                    11:cd:86:8f:f3:dd:7f:56:a4:c0:60:30:f9:4c:77:
                    f6:ad:5f:2d:a4:9f:35:81:05:fa:a4:85:9c:74:92:
                    9a:e5:f0:a5:48:b0:2c:db:86:5d:50:6d:e6:c9:71:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D8:9A:DB:B6:CC:7B:A5:28:23:BB:7F:2A:25:21:50:5F:A4:A4:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.60.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:de:b4:5a:22:2c:0b:47:20:bc:27:a6:68:6c:e4:71:47:f2:
         5e:79:58:6f:c4:54:fe:88:45:0d:23:8d:21:91:c3:e3:44:3a:
         5c:78:d9:3c:82:13:fc:98:e9:06:84:f1:b7:97:a8:3b:86:01:
         de:a0:26:04:d8:2a:7f:3f:cc:bb:11:47:c9:9a:1a:41:18:99:
         69:27:c8:bc:76:3b:5c:4f:7d:2a:bc:a9:d3:5b:b2:99:fc:51:
         59:23:3f:30:c5:f5:6e:3e:24:47:77:3c:dc:f6:5a:a2:69:d3:
         9e:41:67:ad:43:d9:a4:a0:70:93:95:8e:79:6a:f9:b0:86:55:
         5f:c1:3b:1b:c9:64:f7:42:2c:b7:40:1e:17:1b:7b:e9:0e:34:
         fc:c7:f6:e1:b5:89:26:e6:00:49:e3:ae:46:90:35:59:0a:de:
         79:1a:4a:a6:15:7d:0b:98:dd:91:0a:57:87:69:33:41:14:b9:
         d3:cf:14:10:16:ad:b0:a6:59:91:b2:02:d1:b5:87:ee:5b:66:
         e6:e9:00:be:57:e1:7a:d1:78:a5:ea:55:96:ea:e7:38:f5:06:
         bf:45:85:1b:1f:61:5a:20:7c:2f:de:0c:cf:e9:1a:64:fd:54:
         5d:bb:b3:b1:06:5d:6e:d1:0b:be:d3:5c:81:1b:60:cf:04:b3:
         a2:71:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:45:16 2026 by rpki-client