Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa
File:                     9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa (raw, json)
Hash identifier:          Yhl0hTyYZMpxQ6zzsYsHjIZiPmAMTZYhbqYqsJOxG18=
Subject key identifier:   38:57:40:F1:B1:8E:40:00:35:EB:C8:54:FA:D7:1F:EF:56:D0:80:12
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F4328584E1B798EE49ADC9D707F18C500
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     400610
IP address blocks:        66.219.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8e:e4:9a:dc:9d:70:7f:18:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=c807233d-1e19-42bb-8742-f0293c53525d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8f:8f:db:96:d8:2a:fb:ed:3f:6c:36:ac:f0:
                    7b:41:7e:6d:ef:97:c3:81:3e:a7:f0:f8:cd:21:9c:
                    35:42:b6:75:e0:57:e9:65:a2:ec:b2:9b:a6:dd:3e:
                    22:23:fc:f7:3b:59:06:fc:84:18:a2:2c:37:ce:70:
                    a0:4c:c1:61:8c:3c:f4:b7:77:14:3e:43:72:b4:fd:
                    aa:08:66:49:2a:88:15:ba:4b:60:2a:d4:b5:ed:b6:
                    ae:dc:06:46:9b:b7:8b:79:20:63:1a:e1:ba:8c:33:
                    8e:67:93:8b:ea:9b:73:9e:c2:08:72:52:97:63:90:
                    7d:4b:c5:6c:33:7d:a5:33:63:a5:f7:ad:da:6f:1a:
                    bb:f3:70:d6:c7:f8:1f:7f:fe:63:de:52:c9:88:37:
                    5d:87:ec:5e:7a:34:cd:67:2f:2f:94:22:e2:0d:66:
                    38:cc:ab:d4:4a:1c:1c:81:c6:00:54:39:1f:32:39:
                    72:f9:ac:86:63:6b:0d:4c:52:5a:0b:17:94:b2:c3:
                    39:86:e8:ca:69:82:d6:9d:8c:a7:85:2a:e6:96:81:
                    3e:3a:f4:43:3a:46:83:43:80:b0:f3:01:3e:e2:16:
                    3e:66:5d:bd:15:3a:2a:16:b3:3a:dc:51:07:7e:3f:
                    5d:5c:7f:ac:ef:81:ea:1a:61:3f:d0:bb:f4:63:d3:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:57:40:F1:B1:8E:40:00:35:EB:C8:54:FA:D7:1F:EF:56:D0:80:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c8:a3:0a:14:85:d3:eb:d4:a2:ff:7c:a2:7d:7d:df:a7:10:
         b2:17:2f:b0:e4:6c:53:a3:9b:52:ce:37:02:4b:05:73:f6:0d:
         5d:29:f3:1e:06:c0:55:78:4a:88:4f:2c:75:8f:97:e8:6b:a5:
         e7:cf:17:7b:ef:9e:30:4c:08:55:5a:be:64:bc:51:d0:4a:2f:
         11:fc:19:d4:9f:86:be:30:1b:3b:00:61:ac:b9:31:70:4c:c2:
         1b:0a:c1:77:aa:0a:bc:7d:b9:c1:b7:a8:cd:b9:2e:12:43:85:
         84:64:77:10:e1:c2:e9:f3:a3:cc:c8:06:f2:d4:05:c1:dd:bb:
         b5:20:53:b8:a0:e7:f3:7d:da:14:c2:10:b9:61:b6:d9:70:58:
         79:3a:84:f2:e5:f8:d3:e8:f4:71:01:fb:f4:f8:d4:03:65:3f:
         d5:34:2b:06:7e:87:7b:0a:f8:a9:5d:50:d6:b3:5c:04:6c:47:
         39:e1:21:ea:70:d1:71:fe:2d:fa:46:92:19:e9:af:f0:97:fb:
         7a:10:c9:16:3b:7b:10:44:a7:64:52:ac:4c:5a:d6:ae:c7:86:
         2c:5e:c8:aa:7b:86:ea:5a:d0:04:dd:ba:db:06:57:52:ce:d0:
         9e:aa:5a:3f:6b:99:e7:0a:62:c2:1c:73:5d:66:97:1c:cf:33:
         96:03:00:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:32:29 2026 by rpki-client