Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa
File:                     a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa (raw, json)
Hash identifier:          RxONzgag9wUtkn4bDm3PZkFjUiEShmoJWPo3Mv6NK0U=
Subject key identifier:   FC:9A:30:A4:71:3C:E9:5B:5D:B0:52:9D:B9:81:B0:12:1D:4B:8B:07
Certificate issuer:       /CN=41415190-afe9-4f90-902f-9102f69180fb
Certificate serial:       010D0C9F4328584D703FD7046EE36A93936A6100
Authority key identifier: 9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     6556
IP address blocks:        66.248.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d7:04:6e:e3:6a:93:93:6a:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41415190-afe9-4f90-902f-9102f69180fb
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=288870f3-c8bd-426d-820e-5eed2c2f1d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:62:de:c1:fa:0c:ca:cc:cb:12:5c:25:9b:
                    48:21:4d:61:4f:8b:92:35:fc:5c:12:62:57:ea:a4:
                    9a:bd:ce:b2:ec:39:dd:0f:37:58:b1:de:d7:ba:bc:
                    bb:a5:54:a9:6a:ac:73:43:76:9d:23:89:42:1f:cc:
                    7b:e5:bd:93:0f:84:06:64:2b:0c:6b:95:f1:c5:40:
                    05:e5:96:7b:1f:cd:3a:36:1c:12:29:85:76:96:46:
                    9e:75:8c:41:7e:3d:3e:c2:38:46:a2:aa:47:11:69:
                    ac:a6:30:3f:16:21:03:f0:d6:44:63:c6:82:24:77:
                    23:59:45:d3:ea:c2:fa:be:7d:84:37:5f:95:c6:de:
                    6c:91:d0:b3:82:86:2b:3e:12:b5:e7:9e:13:d2:a9:
                    dd:4a:1f:f7:ac:f5:b7:ce:7d:72:ca:15:a0:b2:c0:
                    9e:f6:33:df:05:7b:fa:d5:ea:a9:ca:cd:ab:b1:1c:
                    e4:0f:03:b9:24:41:e8:27:e6:ac:21:28:4c:26:4f:
                    42:23:19:ac:8d:68:40:5a:f2:73:df:5d:c2:36:ed:
                    f8:0a:b7:a9:31:66:bd:3d:02:3a:f2:ca:d4:b2:e9:
                    17:78:20:2f:2c:31:e4:74:96:f9:7d:fb:9e:88:fa:
                    d6:9d:1c:1f:8e:a8:10:7f:68:b0:e8:51:13:e4:fc:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9A:30:A4:71:3C:E9:5B:5D:B0:52:9D:B9:81:B0:12:1D:4B:8B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl

            X509v3 Authority Key Identifier:
                keyid:9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e1:fa:15:89:d4:d3:c4:81:b4:65:d3:6a:8d:9a:db:9d:e2:
         ef:92:44:2c:04:72:84:d8:3a:fc:d8:77:6d:2e:50:b5:5e:2c:
         d6:65:08:92:e1:be:c7:44:a0:95:55:98:5e:d8:8b:dd:d2:37:
         5d:3d:5c:49:60:46:73:18:49:cd:2b:56:a4:43:29:62:1a:95:
         ec:97:33:a7:12:f9:c2:65:8b:e4:1f:e0:b6:4a:66:26:69:c0:
         17:7d:9e:72:70:7c:7d:94:c1:e6:48:6f:af:08:00:d7:30:1f:
         48:c9:b6:5b:f7:56:18:1e:a8:45:1a:fc:a4:74:2d:c1:d6:1f:
         52:04:e2:81:63:7a:cd:ad:9c:d7:d6:55:60:1d:19:44:6e:07:
         15:be:ec:6c:82:2a:2d:68:08:56:b4:f6:43:9c:86:5b:db:bc:
         af:81:4d:ae:10:fb:7d:50:7c:1d:94:c1:e4:43:74:46:0c:9a:
         a9:35:68:b7:e0:d7:a0:fe:b3:04:33:65:32:f0:9d:44:21:0c:
         04:60:2d:bd:da:2d:5d:0f:02:71:b8:82:ee:91:fe:2d:ae:18:
         c0:6e:62:44:84:40:c5:65:ea:ec:a9:58:4c:c4:50:49:7b:d9:
         a9:7a:65:a4:89:b1:7f:06:cf:5e:9d:67:8c:fd:c9:ea:e1:3c:
         e5:2e:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:44:39 2026 by rpki-client