Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/b54f4809-2dff-3704-8197-22477f1dc5c7.roa
File:                     b54f4809-2dff-3704-8197-22477f1dc5c7.roa (raw, json)
Hash identifier:          SkbsEdoJvsnIfol6NpkQ6XeLXOZuQBGP6iMas9syKrA=
Subject key identifier:   2D:42:D9:3E:20:B9:80:A9:99:FA:3E:0F:FC:3D:5E:5A:EC:38:DB:01
Certificate issuer:       /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
Certificate serial:       010D0C9F4328584D6AAAA9CE59C21490344D39C0
Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/b54f4809-2dff-3704-8197-22477f1dc5c7.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     11070
IP address blocks:        66.128.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:a9:ce:59:c2:14:90:34:4d:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=f7f42905-2d40-4998-9c51-287111c2dde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:50:91:36:f8:cf:f4:20:9e:db:c9:fd:c9:9d:
                    e4:27:b5:8f:92:93:63:25:fb:88:a2:99:53:bb:25:
                    7f:aa:c3:1c:9d:e7:22:ac:fa:38:12:fd:2d:e2:ac:
                    1e:c9:48:48:bd:48:29:40:b1:43:61:06:fe:71:7c:
                    e8:59:c2:5c:28:09:b8:b0:82:dc:28:3a:44:d3:12:
                    13:37:19:01:3a:dc:1d:c5:bc:dc:5e:5a:ea:77:82:
                    10:9a:91:d7:01:02:2d:fa:23:40:6f:97:ea:77:09:
                    9c:44:dd:21:39:8e:7a:cf:82:82:d8:fd:5d:a3:6f:
                    38:b5:42:1f:23:e7:1c:f3:2f:d7:06:eb:71:a3:29:
                    b7:16:a2:03:b5:d6:0a:ea:ed:8f:04:e5:ad:00:82:
                    a3:8b:25:f7:77:ec:c3:9e:cf:f7:0a:1b:55:f7:f4:
                    3d:fc:84:ce:c4:c2:ba:e1:9a:e6:a6:e2:e7:73:81:
                    63:99:cc:0f:ed:dd:19:1e:b0:f4:91:93:21:58:a7:
                    d8:1a:ae:59:54:a8:54:3d:27:64:e5:95:07:90:e1:
                    96:98:c8:9a:2a:52:34:e8:91:e8:eb:4a:c7:0d:49:
                    d1:63:f8:ba:de:79:5d:15:7a:8f:65:e6:a2:8d:d7:
                    4d:70:99:26:90:b5:85:5e:43:f4:e2:cf:9d:ae:15:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:D9:3E:20:B9:80:A9:99:FA:3E:0F:FC:3D:5E:5A:EC:38:DB:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/b54f4809-2dff-3704-8197-22477f1dc5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl

            X509v3 Authority Key Identifier:
                keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b8:15:b9:87:8a:8b:40:47:6b:25:89:f1:40:97:41:0c:54:
         62:31:82:7a:d1:28:07:a2:7a:6b:ae:5f:51:fc:d7:62:a4:a1:
         b0:68:1a:43:9e:15:ce:26:a8:cc:01:af:83:8b:5d:c3:64:d6:
         0a:d2:88:be:ad:75:d8:f8:51:39:7d:30:42:d6:cc:0a:52:ad:
         77:c0:fb:80:a8:1e:3d:5f:52:ef:e1:d5:74:62:5d:05:87:62:
         a5:c1:8d:ee:10:0d:54:fb:d3:48:41:a8:66:df:3a:de:03:22:
         0b:7f:94:4e:0f:06:37:ff:f3:fd:a9:dd:33:1e:a9:95:5b:b0:
         8e:56:0a:3d:8e:8d:d7:bf:6e:50:2e:6a:3c:2d:98:dc:66:dc:
         7f:ab:a3:9f:70:19:fb:f0:3f:4c:3f:fa:9d:4e:b6:bd:89:b8:
         d6:1a:a2:df:64:f5:10:e7:01:a1:da:2a:fd:27:31:49:f8:ab:
         c0:fe:c3:f1:a3:c0:ab:0b:3c:c7:da:b1:fa:9c:5b:98:e0:44:
         d3:7f:ff:45:54:b9:af:0d:c0:e5:80:25:fd:d4:e2:fc:b9:fc:
         d8:61:8f:28:a3:f4:b1:1c:a4:ea:f4:73:6c:98:29:fb:16:8c:
         51:35:f9:02:26:e5:7e:48:75:d5:e5:89:be:76:21:48:89:66:
         f1:82:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:13 2026 by rpki-client