Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa
File:                     066b4f4e-c861-3946-a26e-9e25c56e7451.roa (raw, json)
Hash identifier:          O+mltr47EZtslDHdwRUO5ptLed0922Uporp9XRkZxGg=
Subject key identifier:   DE:79:3B:FB:2F:9C:95:B5:4C:9B:32:6F:AD:7E:FF:B1:89:84:F1:53
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584E0005E7F5F682B5989418DB00
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     30041
IP address blocks:        67.211.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e7:f5:f6:82:b5:98:94:18:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=df5c3bbc-9b64-4ab8-ada1-040e3cc943d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f3:9b:10:a0:d5:83:40:f3:a5:aa:3a:21:73:
                    40:77:d4:fa:00:bb:55:9f:21:99:c1:0f:6d:da:f5:
                    98:59:17:67:2e:64:42:81:e4:98:b1:9f:b0:bf:f0:
                    06:d0:58:54:ca:28:d9:48:0e:86:6b:3f:23:df:07:
                    6f:90:6d:6b:fb:e0:8f:07:6f:4a:d6:13:97:d0:7e:
                    1c:1d:2b:f0:c1:62:6a:62:9c:7a:ec:a7:87:2d:ea:
                    8e:62:a7:0f:93:17:aa:93:26:83:cc:3f:98:01:8f:
                    7c:94:25:38:2f:b7:7a:10:78:64:c9:4d:58:73:e1:
                    c0:fc:4e:43:af:ea:3c:7e:42:1d:b1:6d:53:7e:db:
                    2c:e2:c5:35:41:20:51:5b:b6:ca:2b:bc:f0:7a:1f:
                    c9:32:38:e9:9f:2b:e2:b8:77:9e:f9:79:b8:a7:d4:
                    83:4e:63:02:6b:d5:e2:7e:99:52:66:ab:9c:6c:d2:
                    71:e2:61:0c:55:da:b6:f0:2e:1a:9a:34:3e:77:e8:
                    62:fe:31:f3:be:e9:af:4c:cd:64:0b:5f:80:04:3c:
                    55:95:f3:97:d8:47:3d:dd:c5:52:65:86:e2:06:e3:
                    97:f5:ed:85:f7:51:db:a4:2a:a9:f8:f1:3e:7d:8a:
                    dc:b9:48:e7:6b:4d:17:88:e7:a8:f6:5b:f2:d1:85:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:79:3B:FB:2F:9C:95:B5:4C:9B:32:6F:AD:7E:FF:B1:89:84:F1:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.211.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:dc:68:69:19:2f:eb:b8:a8:56:64:7c:9b:ae:00:8c:8b:fe:
         08:c1:6d:1a:00:ea:5f:ab:c4:c9:11:e6:87:8a:cd:aa:94:76:
         a4:11:2a:7b:1c:bf:ef:1f:53:84:18:25:c6:c6:2d:bf:bf:a4:
         01:47:d8:50:85:90:9f:cc:aa:e5:62:11:bb:11:a0:36:9d:5b:
         95:5c:a6:a7:ea:50:e8:b4:c9:b6:38:6f:85:83:8c:f6:e5:97:
         f3:57:d7:63:f9:68:44:8f:ba:9b:ca:ce:12:9a:f9:e2:42:3a:
         ac:89:f3:d3:9a:9b:48:c5:88:d2:bd:7a:91:da:9d:29:ee:eb:
         98:4b:d4:ba:00:31:ec:fd:89:73:6f:ea:34:eb:7e:c4:33:c7:
         3c:2a:fc:26:fb:24:93:a2:5a:bc:2e:e2:bc:6e:79:cd:a6:b7:
         27:d8:23:5f:7f:3d:6d:c7:af:c6:5a:ef:ea:be:0c:34:2a:30:
         7d:f2:58:d1:a8:cc:e9:73:5b:27:20:8f:6d:3e:47:93:ba:6d:
         9b:10:90:96:07:27:f4:1e:eb:b9:f9:27:d3:b6:3f:99:66:48:
         0f:f7:5d:83:3b:21:53:9b:df:0b:89:53:66:78:f2:0a:3d:a7:
         ef:f9:ca:8b:e6:17:0b:40:2c:84:07:65:1a:89:1c:fb:e8:7d:
         4e:1d:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:04:18 2026 by rpki-client