Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/515299a4-3a29-3230-818f-c23d8c08d7b2.roa
File:                     515299a4-3a29-3230-818f-c23d8c08d7b2.roa (raw, json)
Hash identifier:          vOWXuK2jsxAhDlg8O8wgp56MidCgQh39Ssp4cWC9iFE=
Subject key identifier:   62:3B:33:F1:15:49:11:89:A1:0F:B6:A2:86:9B:15:09:96:76:B5:CE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D7E353C384F8D8F18E3007700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/515299a4-3a29-3230-818f-c23d8c08d7b2.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     20001
IP address blocks:        66.146.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:3c:38:4f:8d:8f:18:e3:00:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=65a18df6-78ee-4d33-81cd-0a1a817d7f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:0b:f5:c9:f6:de:a3:75:a9:10:1c:fd:43:
                    f0:f9:8a:f6:84:c0:68:c8:96:47:31:8b:72:b4:a1:
                    e7:24:b5:98:5d:3d:62:eb:b3:07:f3:c7:21:4d:4f:
                    1e:7c:2b:b7:d0:a8:f8:74:96:64:4a:8a:a0:6c:9a:
                    0c:0e:7d:95:fc:59:7a:2e:37:db:22:4b:88:bd:62:
                    0c:3d:f8:8b:25:d6:36:0e:78:66:de:b1:7f:ad:58:
                    49:f2:b6:e4:21:b2:97:ef:60:c3:4b:15:77:be:05:
                    0e:9f:6e:71:be:10:e7:83:74:2a:19:66:d2:11:ed:
                    a1:55:1d:d5:53:04:4b:b6:8c:fd:ee:cb:36:d7:97:
                    3d:7f:a9:b3:22:9b:35:df:5d:ee:8d:03:dc:34:83:
                    4e:0d:85:33:8b:26:31:4e:53:6e:24:63:ff:8b:3a:
                    1c:d7:52:38:f0:b0:38:b4:cb:d7:b0:b7:76:c2:b7:
                    97:9a:c9:3e:fc:da:3a:0a:fe:99:87:00:24:84:42:
                    2c:a3:29:22:63:42:34:23:59:9e:e4:98:e4:ac:e0:
                    bb:60:10:bd:7e:b8:11:18:e4:54:a5:6a:a7:72:98:
                    81:83:08:57:a5:36:2b:7b:af:9f:33:ac:65:6e:43:
                    3f:a9:00:51:49:95:cc:fa:e8:47:15:4e:62:dd:72:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3B:33:F1:15:49:11:89:A1:0F:B6:A2:86:9B:15:09:96:76:B5:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/515299a4-3a29-3230-818f-c23d8c08d7b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:06:ca:db:bd:48:e2:ae:8a:42:26:29:26:29:47:d1:40:73:
         c2:3b:35:dd:89:6a:95:3c:a8:b0:4b:3b:d8:8d:c3:e4:70:aa:
         2d:06:1d:f9:c9:38:78:1d:7c:b6:ee:46:ae:b6:b6:ad:f7:bc:
         ef:60:85:4a:50:e8:34:c1:c1:c8:cb:0f:66:5a:77:63:1a:a9:
         4e:c9:37:50:17:46:72:c1:00:e2:b0:dd:fa:83:8b:3a:79:82:
         1a:62:f4:dc:a5:69:f5:b8:a8:d1:2c:cd:15:e9:07:28:ae:25:
         ea:3e:75:53:21:9a:31:c9:5f:65:53:4a:9a:c4:7a:d8:88:95:
         35:c9:dc:4f:fb:c9:8c:eb:be:89:ec:e0:1d:f5:d9:3e:e6:96:
         3c:f5:8b:f0:eb:f6:18:dd:4d:c2:80:53:2a:a1:fd:af:82:6c:
         ab:cf:cc:aa:88:61:95:a4:2f:e8:f1:c9:d6:04:60:29:c5:75:
         b9:a3:85:ba:27:34:91:ed:0c:c6:27:c9:4a:e1:aa:1b:5d:b4:
         1e:7a:44:da:89:8c:97:74:29:d1:79:d7:f2:26:6c:c7:b4:cd:
         81:3d:bd:6f:ef:2c:35:26:79:4c:6c:4d:68:ae:2c:e3:43:df:
         4f:bc:6f:b3:ae:fa:3c:bb:c0:f8:d2:bc:79:02:e6:25:8c:08:
         f9:01:35:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:11 2026 by rpki-client