Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/66ed49e8-297e-3781-9811-5952a3eb5564.roa
File:                     66ed49e8-297e-3781-9811-5952a3eb5564.roa (raw, json)
Hash identifier:          jqaRgnOBYMt0OM1NeT2PAur0FL6JrV6tpHmstmpi+ic=
Subject key identifier:   6C:6C:2F:9B:DB:62:30:C9:A8:02:E4:D6:4B:9E:CE:60:1C:C5:A5:0A
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584DF64091AD30D15B412F5633C0
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/66ed49e8-297e-3781-9811-5952a3eb5564.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     63201
IP address blocks:        204.225.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:91:ad:30:d1:5b:41:2f:56:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=82822cde-708f-4717-8643-e8a0171903fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:fc:a8:2e:18:a2:74:65:0d:20:9b:f1:e9:
                    20:2a:78:2f:96:04:bc:e8:89:44:97:b2:be:4d:b5:
                    ec:71:5e:26:3a:d6:5a:ac:91:50:0c:fa:ae:6b:64:
                    50:87:2c:11:ff:0b:1c:1f:91:c5:5c:ef:50:d1:96:
                    09:7b:a0:86:82:7b:3e:06:ea:02:3d:5c:7c:6c:69:
                    7e:a9:ce:58:ec:52:de:03:b0:b6:ba:dd:f0:6d:5a:
                    2d:86:54:f3:f2:f1:7d:96:c9:c3:e4:4c:1a:4f:5f:
                    52:de:58:58:e5:ba:23:b4:4b:5f:87:ee:00:cc:4b:
                    6d:9e:cb:47:55:a1:8e:01:92:5b:ec:58:11:74:ba:
                    2c:e6:ba:81:e1:b1:46:a3:5c:17:e8:b5:0d:47:f0:
                    04:ba:45:49:46:00:4b:ec:d4:dc:4b:1f:9b:92:d3:
                    5f:4c:a5:a9:50:85:26:e4:4d:ae:52:b1:f0:4d:fa:
                    c1:88:f0:59:c1:09:5e:7e:54:9a:a8:f3:2f:b9:ce:
                    2f:17:f7:31:af:14:5b:36:65:4f:e0:30:54:94:f4:
                    ac:88:b4:85:2d:6d:bf:c7:05:0e:de:51:99:2f:7e:
                    d1:22:05:d7:87:52:14:d4:90:9d:23:3e:4f:dd:f4:
                    41:39:34:ce:fd:33:fa:b7:8e:92:2d:99:70:28:d6:
                    aa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6C:2F:9B:DB:62:30:C9:A8:02:E4:D6:4B:9E:CE:60:1C:C5:A5:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/66ed49e8-297e-3781-9811-5952a3eb5564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:87:7d:0f:70:88:a4:26:7b:f6:f0:f6:cb:54:0f:60:8c:e7:
         fe:bc:cc:06:6e:fd:e9:fc:02:f0:8f:3c:e3:7a:78:cb:f7:5d:
         79:ab:9b:5d:2a:39:f6:97:1a:1c:de:0e:6c:fb:b0:ff:38:49:
         0b:95:69:0c:92:6d:c3:8f:32:7a:0b:f4:1b:5a:bd:a0:40:3e:
         8c:c5:db:70:38:06:ec:04:26:d9:47:bf:25:5f:3e:21:a0:0d:
         a1:cf:79:c8:01:4a:8c:68:ea:4e:0c:34:76:76:1c:e2:ea:17:
         37:c1:52:5c:c4:dd:2a:e8:b6:32:30:0a:fb:81:e5:13:97:06:
         67:a5:11:b5:3a:b5:20:29:73:6e:fc:5c:59:9f:30:f8:d4:04:
         8a:df:94:c3:7f:c6:fc:9e:e0:e5:33:0a:4f:98:2a:d4:c8:da:
         5c:5d:7c:17:f9:cd:57:b2:ea:0b:d9:72:a2:6f:f5:b1:85:ba:
         83:38:84:bd:f6:40:a1:9d:63:69:74:d1:1a:15:ce:8f:77:ae:
         a3:ac:c1:0c:83:ec:2d:03:7f:bd:b9:4b:29:48:ab:09:22:c9:
         ee:f5:28:6d:75:6e:24:68:2e:92:e0:77:d6:8e:9e:22:c5:8d:
         f6:c4:ab:ac:3d:7c:ea:7b:ea:c8:63:47:b0:ec:b9:4a:5d:74:
         56:f8:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:29:45 2026 by rpki-client