Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa
File:                     a3e28558-5307-3ceb-a172-8724d830db67.roa (raw, json)
Hash identifier:          tKOk5BU6QJ4ymt6hx7AxXaapyci09CSrQgLqhq2d8eM=
Subject key identifier:   B7:A2:93:56:97:10:5E:5F:64:79:3B:76:84:33:BE:00:68:2B:64:21
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E0435DB2E71EA49B212FA1A80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     9009
IP address blocks:        66.95.198.0/23 maxlen: 24
                          68.165.98.0/23 maxlen: 24
                          68.166.178.0/23 maxlen: 24
                          68.167.74.0/23 maxlen: 24
                          68.167.78.0/23 maxlen: 24
                          68.167.130.0/23 maxlen: 24
                          68.167.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:db:2e:71:ea:49:b2:12:fa:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=9e0d913f-7b2d-4c23-b57e-a3c2517c62a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:76:3c:86:58:53:9a:bd:4f:b7:73:97:54:
                    39:86:59:f1:de:fb:bf:ea:5a:41:6c:f3:92:49:68:
                    2c:91:04:fe:7e:a4:f6:93:9c:04:a1:1d:46:f6:ae:
                    74:0c:12:78:ac:bd:98:91:d4:c9:af:ee:c8:fb:6f:
                    b5:e0:13:21:f8:45:9a:ad:f8:36:b1:2c:6a:f5:75:
                    9d:02:9b:05:62:9e:45:26:d7:ca:fd:0f:9d:de:1b:
                    ef:e7:99:8c:4f:1a:37:93:d1:7f:8f:d9:98:35:60:
                    de:6f:ad:22:2f:03:4a:12:66:69:18:a3:9e:73:d8:
                    1e:c3:22:12:f7:34:07:cf:e1:4d:ca:c4:f6:11:8b:
                    c5:6f:60:f1:a8:fd:28:58:24:31:e3:cb:e9:5e:0f:
                    fb:e4:5a:7e:4f:5f:8c:20:27:99:c6:39:d0:15:e9:
                    52:7e:fd:e6:d2:99:57:26:0c:f5:74:28:6a:a2:a9:
                    89:cd:e9:ba:f6:0a:b6:13:6f:8d:f8:aa:b6:24:64:
                    75:7e:64:e3:2a:e1:ca:f0:5b:a8:a9:1a:ac:2b:c5:
                    d7:ef:84:e3:7b:06:30:bc:5c:24:0c:d0:b2:af:a9:
                    82:45:c6:0f:95:04:35:30:48:7e:cd:12:4a:e7:3e:
                    73:ec:99:db:54:9b:8e:4c:c6:7a:82:99:19:02:d6:
                    32:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A2:93:56:97:10:5E:5F:64:79:3B:76:84:33:BE:00:68:2B:64:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.95.198.0/23
                  68.165.98.0/23
                  68.166.178.0/23
                  68.167.74.0/23
                  68.167.78.0/23
                  68.167.130.0/23
                  68.167.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:8b:a4:a7:c1:d8:7e:c5:ff:40:49:3c:72:63:d2:54:90:ec:
         df:07:23:8a:80:3d:a4:1e:71:57:db:09:cc:ad:c5:13:20:4a:
         9f:8f:c2:90:6b:de:ba:f8:04:29:dc:21:c9:ed:11:4c:40:b7:
         22:87:13:e2:23:36:78:52:17:6a:cb:d8:4b:95:ce:cc:d8:7b:
         0f:f9:a5:9f:6a:1c:40:55:ec:15:fe:a3:ee:fc:8e:a6:e6:a2:
         2c:e4:09:84:a7:83:4a:a5:2d:0e:4a:87:fa:d1:c7:47:74:b6:
         81:da:bb:52:c6:bf:40:bf:93:38:39:b2:36:6f:e7:ff:e9:d3:
         e0:6a:51:db:b8:09:7a:9b:58:56:9f:e6:e8:60:be:fb:d3:b5:
         ff:00:9d:c3:fe:a2:04:16:ff:eb:5f:b1:33:76:30:7a:cd:01:
         c6:02:cf:8c:28:3b:37:a9:ae:32:cd:6f:e7:0d:b5:24:93:1b:
         3c:14:f6:50:d1:41:f7:d9:a6:7b:09:b4:eb:63:7c:5b:5c:35:
         94:c1:ee:bf:e9:f5:d7:a6:a3:58:55:5d:b2:14:fd:92:9e:c0:
         71:df:e5:55:c4:1a:c7:e8:b2:66:a6:76:ca:12:b3:77:d0:dd:
         fb:80:74:a9:df:38:53:5c:91:29:dd:1c:d8:3f:28:d6:2f:0d:
         0d:7c:12:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:56 2026 by rpki-client