Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1d2d21a6-ed1a-45ae-a365-0f21758d53a0/0e66580c-798f-3199-94dd-354b1757b964.roa
File:                     0e66580c-798f-3199-94dd-354b1757b964.roa (raw, json)
Hash identifier:          RDT3PJJwEUDk28mw3Jtk0kLp/TcJqYAnZ0fpYuAmoQk=
Subject key identifier:   DD:0F:73:7F:9B:4E:80:70:BC:EE:C3:57:B7:F9:34:D0:88:91:7E:7C
Certificate issuer:       /CN=1d2d21a6-ed1a-45ae-a365-0f21758d53a0
Certificate serial:       010D0C9F4328584D7E3527C768B3EE6D34A53840
Authority key identifier: A0:0E:22:5C:E9:B7:C3:09:88:A2:39:A3:22:09:2A:F8:90:97:67:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1d2d21a6-ed1a-45ae-a365-0f21758d53a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1d2d21a6-ed1a-45ae-a365-0f21758d53a0/0e66580c-798f-3199-94dd-354b1757b964.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     63094
IP address blocks:        206.41.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1d2d21a6-ed1a-45ae-a365-0f21758d53a0/1d2d21a6-ed1a-45ae-a365-0f21758d53a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1d2d21a6-ed1a-45ae-a365-0f21758d53a0/1d2d21a6-ed1a-45ae-a365-0f21758d53a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1d2d21a6-ed1a-45ae-a365-0f21758d53a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:27:c7:68:b3:ee:6d:34:a5:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d21a6-ed1a-45ae-a365-0f21758d53a0
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=79eed17c-6020-41fd-a3c5-12965b6ff837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:c1:6b:77:85:0c:49:81:0a:39:6d:d6:92:
                    ab:8f:c5:3d:2c:43:e7:5a:5e:04:3c:c7:b8:38:77:
                    a5:c2:37:10:ff:94:0b:dc:72:a7:88:a5:73:0f:f4:
                    18:96:2d:3a:be:9b:7a:6a:33:56:36:50:fa:cf:c9:
                    da:bc:21:6a:87:a9:79:a8:70:f2:d5:6f:07:80:b0:
                    3b:6e:19:ca:83:fa:34:86:db:46:79:06:8d:88:a9:
                    23:41:2d:97:fd:71:0a:9f:9d:02:a3:d7:e0:c3:06:
                    0e:1e:18:57:1b:15:1e:16:1d:74:4d:87:05:fe:01:
                    39:6a:04:d8:4e:74:af:1a:8b:ac:a2:f2:be:83:e1:
                    92:1d:b9:bc:7f:19:88:ba:ba:c8:d0:f3:a0:d8:ea:
                    a1:13:90:57:7b:15:fe:00:f1:24:16:7c:e7:29:b2:
                    26:41:33:02:d4:4d:23:5a:ea:5a:5a:d8:7f:3e:a1:
                    54:cf:3c:6b:fd:37:a3:f2:3e:d5:67:c2:c2:0b:1c:
                    ef:bb:34:d3:76:56:ae:40:7d:c0:f6:7d:7c:4d:f5:
                    70:e6:49:c5:bc:ba:e0:c1:39:c1:7f:24:9d:cd:0e:
                    4d:7a:c8:00:59:8d:38:17:dc:56:4f:a1:7d:d9:2a:
                    63:72:c8:12:b0:21:c0:b0:f7:c6:77:8b:fe:59:64:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0F:73:7F:9B:4E:80:70:BC:EE:C3:57:B7:F9:34:D0:88:91:7E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1d2d21a6-ed1a-45ae-a365-0f21758d53a0/0e66580c-798f-3199-94dd-354b1757b964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1d2d21a6-ed1a-45ae-a365-0f21758d53a0/1d2d21a6-ed1a-45ae-a365-0f21758d53a0.crl

            X509v3 Authority Key Identifier:
                keyid:A0:0E:22:5C:E9:B7:C3:09:88:A2:39:A3:22:09:2A:F8:90:97:67:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1d2d21a6-ed1a-45ae-a365-0f21758d53a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:43:2a:ad:7f:cb:bc:c4:2e:23:79:e1:b1:73:44:cb:8b:
         bb:ba:06:30:57:7e:7f:10:33:75:cb:5e:69:43:d0:93:f5:a7:
         e9:8d:0d:15:99:33:07:87:52:91:b8:79:0f:74:92:fb:31:8a:
         72:a6:5d:c6:fd:73:4d:cb:f9:76:31:b9:d3:70:21:1b:d9:14:
         a4:ff:11:78:43:3a:b0:e4:1b:fa:fd:3f:a6:11:f8:ad:cb:18:
         ec:3e:00:77:ac:be:33:a7:44:4d:70:57:55:8a:62:f4:94:6d:
         3d:8e:7e:4e:38:6a:84:cf:34:88:ae:d9:35:53:e2:32:87:e9:
         2f:1b:40:ef:a9:4a:41:e9:11:5e:1d:83:ba:ac:42:a2:5f:3a:
         97:58:ff:64:03:fb:6e:28:99:e1:25:65:4d:52:b4:6f:35:2e:
         3e:85:a8:30:d5:be:79:7a:c6:22:a3:17:39:64:7a:e6:46:fe:
         37:e0:c7:8f:88:68:d6:d0:7b:bf:59:a4:cf:31:92:f1:8b:e0:
         30:bc:e6:16:3b:0f:cb:79:17:14:bf:7d:8f:85:a3:0a:ba:08:
         fa:53:40:95:03:d2:dd:7c:24:2f:6c:ae:9a:ba:4f:11:ad:94:
         a7:40:a3:b5:7c:84:1b:71:e8:28:51:00:f6:3b:83:eb:25:93:
         27:50:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:08:17 2026 by rpki-client