Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa
File:                     fbd0f42f-fbef-3f5d-b443-269369b555df.roa (raw, json)
Hash identifier:          K6NanVc8dNLY4FzCkn57qzdk73lQ/+tVg9tmzxu6uLM=
Subject key identifier:   AE:88:15:22:67:BA:35:29:2B:11:A8:FF:60:EF:07:01:CE:58:EC:08
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584EA79417711AF6F826382B3000
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397673
IP address blocks:        66.11.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:17:71:1a:f6:f8:26:38:2b:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d7a30530-9cc4-4e8e-b2cf-308df9ca480e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:f2:fd:72:d8:fc:ae:d4:0a:8b:42:21:d9:
                    c7:7f:65:7a:5e:82:06:ef:4b:43:51:da:2c:c0:53:
                    ed:d7:11:c0:da:86:26:39:01:55:45:3f:1f:5c:1f:
                    cd:8f:97:25:b2:6f:29:64:82:f2:a9:15:36:15:8c:
                    a3:b1:8c:1e:28:53:19:38:d7:9e:e6:c5:da:c1:cb:
                    82:16:15:d5:37:92:c6:4e:ab:7c:6c:a8:c8:87:94:
                    d7:9d:92:45:80:3a:8e:ff:b3:4a:f2:c3:63:7d:bc:
                    35:f0:55:6b:47:b7:35:0c:57:db:7b:19:d5:23:67:
                    3e:e7:54:f2:7a:4c:7f:35:ab:da:cd:67:91:70:3a:
                    60:49:44:cb:ba:79:8c:31:b8:35:c1:b5:85:b6:cd:
                    7f:68:55:9f:87:82:67:f1:05:b2:84:7e:eb:e3:c9:
                    8f:33:8a:3f:6a:39:8f:6a:06:0c:51:b5:96:17:b2:
                    e3:60:fa:e5:d5:21:ed:88:1a:77:b7:ad:56:01:e8:
                    20:38:e8:89:11:90:7f:8d:84:08:e4:31:54:32:17:
                    1c:b5:d3:43:93:ab:0f:86:5e:b0:e3:b7:64:4c:30:
                    2a:20:75:b1:4c:3f:ae:0e:ae:61:7b:ca:40:0f:2b:
                    9a:75:49:c9:e2:55:51:3c:82:cb:f9:d5:6f:01:b6:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:88:15:22:67:BA:35:29:2B:11:A8:FF:60:EF:07:01:CE:58:EC:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.11.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:81:9a:96:54:40:7c:87:65:5d:73:bf:94:55:7d:6a:22:f0:
         47:ee:e8:a8:61:87:2e:6a:5d:17:2f:9b:04:0d:4e:d7:3f:b6:
         57:f8:df:4c:d5:31:88:ce:61:9a:e0:68:72:45:80:0a:dd:d3:
         98:5f:11:b3:90:cb:7b:f0:b9:d5:87:44:e5:9f:ce:49:75:b4:
         ad:12:64:3c:14:69:b6:a1:a7:8b:d1:3a:bf:4f:46:27:a5:e9:
         7f:f3:50:34:91:81:c2:a7:ff:4f:16:33:15:af:f4:ff:b8:20:
         ca:1b:d7:a5:bf:be:14:aa:8c:5b:4f:55:0f:69:86:a6:68:1a:
         76:7c:64:7c:9c:f4:92:74:66:c3:2b:e5:bb:90:a6:a0:8e:78:
         55:0b:90:47:1a:5d:6f:5b:49:80:39:64:75:52:7b:85:0c:7d:
         90:d5:18:97:76:81:20:1e:35:a5:42:cc:ac:68:6a:83:05:74:
         f1:7b:ca:bc:d4:96:bc:f9:0e:be:9a:f2:d7:2e:3a:8e:9f:d9:
         c9:51:56:4a:59:70:d3:3c:ab:d2:c6:cf:a4:71:e6:70:76:3a:
         be:40:5a:43:87:8b:d2:26:8e:a4:ae:52:12:2a:01:ca:f5:76:
         d4:75:b4:24:db:9c:98:40:44:fa:9d:c1:f8:df:b5:cc:2c:23:
         c5:14:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:38:12 2026 by rpki-client