Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/7f17c134-1fff-335f-97f2-85379d9c8398.roa
File:                     7f17c134-1fff-335f-97f2-85379d9c8398.roa (raw, json)
Hash identifier:          FmyaP2jwgEh4n871CQ3YJKLJVQlpWpZ6g68R09IYu/g=
Subject key identifier:   82:2E:49:48:34:9C:33:92:AD:EF:C0:2A:CC:06:88:FA:A7:34:11:E0
Certificate issuer:       /CN=2c2fd90f-0e05-4f71-b5cb-8a9269f851b3
Certificate serial:       010D0C9F4328584E2408B867EEC87FCB6231BF00
Authority key identifier: B0:C8:F7:D4:D0:7F:E8:C8:D3:44:83:DB:53:38:B2:65:B1:85:48:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/7f17c134-1fff-335f-97f2-85379d9c8398.roa
Signing time:             Thu 11 Jun 2026 22:35:11 +0000
ROA not before:           Thu 11 Jun 2026 22:35:11 +0000
ROA not after:            Wed 09 Sep 2026 22:35:11 +0000
asID:                     10310
IP address blocks:        192.152.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:24:08:b8:67:ee:c8:7f:cb:62:31:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2fd90f-0e05-4f71-b5cb-8a9269f851b3
        Validity
            Not Before: Jun 11 22:35:11 2026 GMT
            Not After : Sep  9 22:35:11 2026 GMT
        Subject: CN=056b4560-6422-419b-8ab9-e61e67f3eb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:7b:91:93:f0:75:f5:d1:87:51:e0:01:a6:
                    62:38:83:ef:d9:56:6a:32:ba:65:8d:4a:f9:3b:70:
                    a0:68:1c:32:a2:af:9a:1b:96:cb:12:93:90:d6:80:
                    89:3d:51:1c:85:10:64:4e:ea:23:db:79:ea:1d:0b:
                    11:66:e0:a0:8c:b8:d5:c3:a1:fe:55:da:7e:99:24:
                    75:9c:c8:0a:52:88:69:d0:12:9b:5f:2c:12:6b:36:
                    33:f0:56:22:c4:cb:2a:0d:e0:7d:46:bb:b9:c9:e2:
                    17:e5:83:c2:7f:ff:1b:4b:b9:fc:64:fc:fd:46:79:
                    66:c5:90:df:7a:b4:1e:03:5d:b0:fd:86:b9:20:03:
                    db:9e:3f:33:d6:49:d6:0d:15:60:03:89:89:7b:3b:
                    7b:af:7f:cd:0d:fe:e2:29:4e:e9:5f:1b:9e:84:67:
                    9d:b6:98:13:14:f3:98:39:53:b6:e8:4b:9a:22:0d:
                    0a:bb:78:0d:14:7f:b5:fb:52:5c:aa:e0:c5:64:c3:
                    c7:74:84:ff:79:cd:3c:88:8f:91:4d:82:29:41:f0:
                    af:75:29:d8:31:08:89:40:20:25:fa:cf:77:38:a1:
                    43:1d:c3:a1:17:f0:9b:3e:65:5a:92:1b:21:14:97:
                    ba:f4:c7:42:d0:48:da:69:ed:aa:1c:73:66:1a:35:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2E:49:48:34:9C:33:92:AD:EF:C0:2A:CC:06:88:FA:A7:34:11:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/7f17c134-1fff-335f-97f2-85379d9c8398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.crl

            X509v3 Authority Key Identifier:
                keyid:B0:C8:F7:D4:D0:7F:E8:C8:D3:44:83:DB:53:38:B2:65:B1:85:48:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:fb:13:84:b5:d9:43:08:9f:73:a3:ab:e2:0f:d5:40:93:e2:
         8c:de:ce:2d:1c:23:5d:1b:6a:f2:03:7a:ff:6d:84:5b:a6:76:
         0b:9a:48:b6:59:e6:9c:49:22:27:e8:aa:c0:3a:a3:a5:f4:71:
         b3:68:b3:00:2a:29:a2:60:46:78:e7:98:c0:0d:56:83:9b:b2:
         a9:f6:3a:64:71:e6:35:ae:76:42:aa:8b:fa:1b:33:29:8c:93:
         3f:0c:d3:b2:78:77:52:9a:b0:c2:c8:12:01:4b:59:d4:a9:61:
         51:1b:ce:c4:e0:7d:85:ff:a7:18:fa:57:5a:5d:ac:39:59:74:
         0b:3e:5a:21:8c:7c:fe:0f:7e:f4:07:90:b9:d0:8f:63:7b:8c:
         9b:11:da:7c:a3:47:d6:ab:a5:65:59:0d:cd:49:3e:8f:a2:04:
         fe:27:76:7c:af:9c:67:55:cd:40:de:44:dc:38:b3:9b:c5:a5:
         dd:72:35:2c:d0:de:20:2f:e6:21:65:10:af:de:47:1b:2c:16:
         47:ca:50:8c:c2:0d:cd:55:fc:f5:65:80:e3:2d:52:c7:d2:3e:
         c8:b5:42:b2:22:ec:c4:c9:f2:28:67:ae:73:40:93:bc:5d:33:
         76:58:ed:e1:60:09:e0:24:b7:f4:8c:79:ee:77:fa:a3:b7:cf:
         d3:e3:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:29:13 2026 by rpki-client