Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/c0dd27c0-be49-30c4-aa1b-c4bc6ba84213.roa
File:                     c0dd27c0-be49-30c4-aa1b-c4bc6ba84213.roa (raw, json)
Hash identifier:          OkINvCxH7fgaxo/w7XDMcFpsOdIZ3lwSlzVdYIhI6aM=
Subject key identifier:   4C:3C:CF:71:EA:C0:26:64:15:20:8D:55:FA:F3:5B:EC:FC:93:00:E5
Certificate issuer:       /CN=d438c823-e424-41a1-9631-aa3b75aea0c7
Certificate serial:       010D0C9F4328584E059B466A8F9B344B3ED43000
Authority key identifier: E3:BC:37:56:85:68:E5:91:F5:8F:9F:FD:DE:D4:16:29:A3:53:D8:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/c0dd27c0-be49-30c4-aa1b-c4bc6ba84213.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     63304
IP address blocks:        66.118.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:46:6a:8f:9b:34:4b:3e:d4:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d438c823-e424-41a1-9631-aa3b75aea0c7
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=d984034b-9510-4a60-98a1-5c5c93784da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:a3:c6:62:7a:f9:ab:a0:fa:55:9f:39:7e:
                    f6:ac:de:20:4d:5e:49:c1:eb:df:4b:04:49:cf:47:
                    12:99:58:a3:77:7f:ef:b6:f3:e1:fb:ed:b3:61:4f:
                    0d:95:b7:5f:42:3b:60:67:7e:c2:15:29:75:0e:fb:
                    6e:77:8c:c1:56:4e:89:0c:07:1b:4f:b0:30:eb:c7:
                    91:25:8c:58:ad:aa:46:f9:33:17:f7:e4:b2:d7:c4:
                    3e:3e:57:90:fc:80:05:a4:2d:2f:ef:4e:ec:2d:a0:
                    f9:cf:52:fd:9a:a0:cc:05:02:1a:c1:d3:cf:0a:65:
                    91:74:e4:c8:f1:ed:3c:e2:43:86:59:f5:7f:96:d7:
                    ed:fb:8f:b6:2f:f0:ba:c9:97:82:b0:46:ea:5a:5b:
                    df:11:22:77:28:10:bc:45:81:50:72:b9:9e:59:be:
                    e4:5c:18:f6:ad:22:d6:54:30:27:93:ef:58:ca:4f:
                    b1:50:35:e0:0e:03:4c:62:a8:cd:d8:a4:23:10:5a:
                    fe:a7:88:ed:90:97:3d:c4:47:f4:de:2f:c1:df:c3:
                    fa:49:64:56:39:b0:cf:02:eb:68:c1:aa:1d:bb:b6:
                    27:8d:73:86:8f:4d:f0:65:ef:62:d5:32:0c:69:68:
                    93:ce:39:cc:84:f7:d8:3e:04:4e:73:b8:8e:d3:fa:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3C:CF:71:EA:C0:26:64:15:20:8D:55:FA:F3:5B:EC:FC:93:00:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/c0dd27c0-be49-30c4-aa1b-c4bc6ba84213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BC:37:56:85:68:E5:91:F5:8F:9F:FD:DE:D4:16:29:A3:53:D8:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:02:1e:81:45:5b:f3:c5:ac:ad:9a:72:6c:93:4f:f6:10:bb:
         6d:fb:76:d3:14:0e:2b:6b:61:6e:f2:74:27:16:d9:af:62:d9:
         c1:1c:5d:6e:35:4a:7c:37:e1:90:f1:f7:04:d5:ea:5f:ae:64:
         93:30:2b:f6:f4:85:bf:67:f5:7a:45:53:ce:f1:b3:35:6d:57:
         d9:26:7b:f8:87:e0:87:d0:5d:d4:15:4a:c0:1b:4e:bf:2f:94:
         44:8e:6b:04:5b:a9:3c:3b:a5:f4:c6:5f:72:db:a2:f6:bb:1c:
         bb:28:63:ac:b8:98:b8:a5:d1:41:01:41:b1:54:77:62:74:2d:
         c7:dd:30:d3:27:14:47:14:91:2b:99:29:51:3a:9f:51:5c:df:
         0d:6d:72:92:a4:86:a2:9c:12:d3:1d:d8:7a:41:16:47:0b:9e:
         8d:f6:be:40:ac:c6:3c:27:d3:66:b7:f0:55:e0:a0:23:d8:e1:
         b0:6b:26:3c:cf:f0:e2:c0:23:1a:fb:f6:d5:fb:01:2b:1d:0f:
         01:7d:40:d0:28:f2:4f:50:f5:53:22:fd:50:2c:c5:6a:fa:db:
         1e:0d:17:3e:8a:46:86:b3:04:a1:c3:4c:bb:de:c8:09:fc:5a:
         bb:1e:10:b2:3e:31:46:a4:b5:ef:53:de:ea:46:fa:f0:43:33:
         a5:4d:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:44:31 2026 by rpki-client