Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/4e7a23d6-84a8-3e21-a4cd-a9ab5bf7c58d.roa
File:                     4e7a23d6-84a8-3e21-a4cd-a9ab5bf7c58d.roa (raw, json)
Hash identifier:          CFHNeA6tRzbFl5sC4C0btnFNN9BSg3P5fWmT6+14Jjw=
Subject key identifier:   90:30:63:05:2A:67:8E:1E:5A:8E:71:13:08:B9:9E:FB:2B:D2:91:84
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584DF210894DA8877E9167865080
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/4e7a23d6-84a8-3e21-a4cd-a9ab5bf7c58d.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     3738
IP address blocks:        192.250.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:89:4d:a8:87:7e:91:67:86:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=eb8174cb-8d84-47d6-93d1-6bc99f01563e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:52:11:32:13:a3:93:2a:3a:e5:1f:51:d7:
                    16:f7:0e:d6:2d:ea:26:de:83:23:dd:d4:14:da:c4:
                    61:83:52:dc:2a:45:5f:ea:14:09:8e:2f:b2:ff:a7:
                    e2:2e:4f:57:1e:cf:52:8f:e5:4b:ea:25:9b:1d:04:
                    aa:e2:b6:9a:7b:57:b2:77:98:bc:8a:39:7e:dd:2c:
                    e7:98:25:f9:b9:d0:9b:23:40:b3:b2:d4:3f:02:31:
                    56:e0:86:52:0b:7e:36:8d:bc:f7:fc:31:5b:9b:43:
                    f4:2f:e6:be:56:8e:49:3c:5e:f5:6e:6a:ad:41:a3:
                    a8:de:4e:b6:2c:bc:c1:1a:62:01:ba:b8:2e:5c:86:
                    f9:81:3a:79:97:b5:fd:c2:a1:fb:9f:7d:04:16:25:
                    cd:6a:67:88:da:4e:01:5a:e4:78:d7:82:33:74:c9:
                    9b:17:86:24:5c:0a:b4:e7:dd:d3:d8:90:c8:0b:b8:
                    54:79:d0:9f:de:0e:b0:35:ba:1d:63:e7:dc:83:bd:
                    a9:e8:7a:e1:e5:79:ad:26:b5:4e:2d:66:38:1e:68:
                    a0:53:6f:a4:3b:f2:c4:c0:fd:eb:d4:31:3d:fb:b8:
                    6a:43:61:00:2d:3f:d8:0b:22:f5:80:69:80:6f:c2:
                    84:b9:d9:c8:07:97:3e:b8:d6:f7:59:a0:38:7f:ef:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:30:63:05:2A:67:8E:1E:5A:8E:71:13:08:B9:9E:FB:2B:D2:91:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/4e7a23d6-84a8-3e21-a4cd-a9ab5bf7c58d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:01:23:05:37:f7:b2:97:3b:34:eb:1b:46:cb:af:3c:be:ff:
         17:a1:dc:71:05:b2:c3:dd:47:3a:02:af:38:ed:b1:2d:71:2b:
         ce:50:ff:04:8e:a4:5e:04:28:23:f7:7f:01:d7:5b:a2:b2:66:
         73:2d:eb:d9:bc:62:96:1b:e0:b6:82:ba:3f:8d:9b:77:dc:ed:
         34:b3:c1:ec:f7:b0:a5:b3:e5:80:b9:87:e7:c6:bf:59:02:cd:
         83:83:ca:c4:d4:c0:b0:7f:61:c5:33:78:41:e7:d0:fb:2d:7f:
         a8:ac:61:44:a8:83:bf:1c:b7:7d:04:9d:d8:e7:3f:02:71:ba:
         cb:37:75:af:a6:ad:2f:7c:d9:8d:4d:f8:c3:b2:3f:e5:13:6b:
         d7:2b:29:d6:1d:32:82:68:91:2a:71:39:11:c5:d9:7b:81:52:
         f1:27:a9:02:55:4f:95:8c:97:94:9a:b6:91:0a:1a:f3:10:44:
         17:dd:c7:c5:1c:88:a7:2d:e6:1e:a2:44:38:60:9a:42:98:d3:
         02:cd:0a:c9:1d:18:b5:8b:46:81:e0:b9:78:60:76:48:c7:19:
         8b:f5:3c:66:1a:5d:b0:8d:a3:90:82:e0:18:4a:4d:32:88:94:
         81:e4:57:78:63:93:30:c9:ec:cf:ee:35:cc:8c:4a:14:c0:4e:
         c9:af:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:02:01 2026 by rpki-client