Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa
File:                     5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa (raw, json)
Hash identifier:          WXBajIDEKjkIlyMd7eejr3EOyqLakwNicQUuH7p5Eyg=
Subject key identifier:   4A:30:02:5A:41:0D:52:BA:D1:99:86:53:27:4F:48:CF:2D:61:DD:56
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584D5E1A50B6D9CA00032AB20B00
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        66.22.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:50:b6:d9:ca:00:03:2a:b2:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=21967375-ffaf-436d-ac1c-6cf09809f4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:ff:45:47:3e:0d:4b:b9:61:60:5e:9f:75:
                    e8:2c:d3:de:c1:c0:34:59:93:8a:85:02:2e:95:e3:
                    f1:bf:f8:5e:b5:b0:7f:05:c4:ad:68:91:88:ac:43:
                    ec:98:23:9e:c4:1a:db:3c:6c:2b:8b:a6:6a:3d:84:
                    a3:61:08:37:30:de:13:03:81:46:2e:ed:22:ae:92:
                    f7:c1:b9:5b:68:48:bb:de:dc:b8:fb:1f:4e:d4:ba:
                    a0:39:20:54:50:9f:14:00:ab:85:eb:59:5b:43:c2:
                    af:e6:3c:bf:21:ed:77:5d:be:e0:ab:b7:77:db:47:
                    2a:91:ff:db:bd:d6:b5:09:49:b5:e8:8e:8f:0a:71:
                    04:b4:9d:6b:b2:a5:d5:25:7f:de:03:a7:0e:a5:fe:
                    d3:02:15:4d:11:25:28:2d:e7:f0:d3:dd:ec:76:17:
                    3b:aa:32:b1:0e:21:43:54:4d:dd:79:91:96:75:ff:
                    78:f3:77:6f:75:a0:8c:66:77:0d:fb:1a:ad:93:60:
                    6b:96:36:5c:fc:d1:89:a1:ac:1c:26:40:ad:4c:a0:
                    16:e8:69:67:32:c8:fd:5c:b0:f3:66:a6:09:0a:03:
                    0b:d7:a7:8a:76:bf:64:c7:c9:d7:c9:b4:f7:6d:72:
                    c8:a7:3d:0b:a5:3f:69:9c:fd:02:db:c2:58:bb:7c:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:30:02:5A:41:0D:52:BA:D1:99:86:53:27:4F:48:CF:2D:61:DD:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:66:54:34:3c:3c:60:1a:09:5c:4f:7f:8f:25:a1:44:09:0d:
         2a:88:9e:4c:e1:56:d0:b3:f6:3d:0c:5d:34:6b:3f:56:91:e0:
         15:1d:88:ef:7b:af:69:43:b4:c6:d6:05:8e:0e:d8:be:c5:2c:
         c1:b7:4d:33:9d:9a:21:2c:03:56:7a:b0:95:31:74:4c:e9:00:
         e6:05:97:1e:6c:59:b0:d8:66:1d:b4:ab:a2:04:11:fb:49:39:
         82:01:d4:1c:28:08:95:68:1b:e7:51:d6:86:dd:6f:8a:f3:cc:
         46:c4:60:f1:db:d8:66:9c:49:b3:6c:1c:df:f0:6c:3e:70:38:
         db:43:ca:f8:23:62:29:67:ba:fb:f1:cc:0a:78:61:22:0e:01:
         4f:95:b8:3d:62:4e:8b:3b:ff:a3:96:07:e9:8d:7b:dc:e8:8b:
         0b:bf:54:62:4b:03:5a:33:f9:0c:ce:5b:5f:6a:5d:da:b9:e1:
         63:26:af:fc:73:ac:9c:eb:30:42:6a:4d:e3:46:9a:76:0d:8a:
         23:e3:fe:62:d0:34:46:1b:58:c6:ac:7f:79:aa:80:f0:49:c8:
         2e:b6:15:85:6f:7a:5e:2a:c8:3b:82:d8:a3:bd:a9:04:41:5b:
         28:79:59:38:bd:4b:61:1d:a5:f8:cc:d1:0a:50:d6:a5:1f:c7:
         90:c9:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:08 2026 by rpki-client