Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/de8b16a4-1180-3790-aecc-422b8f072639.roa
File:                     de8b16a4-1180-3790-aecc-422b8f072639.roa (raw, json)
Hash identifier:          w8fhDjq8NR7a3FITA2Ognd/CltbO9lwMGMka8Q8kbTs=
Subject key identifier:   3C:70:89:7E:4E:CD:70:6B:29:65:FD:0E:C7:FD:CC:C7:60:15:9D:DE
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584D7E775E9C5798EC5BAF6D92E0
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/de8b16a4-1180-3790-aecc-422b8f072639.roa
Signing time:             Mon 13 Apr 2026 15:13:57 +0000
ROA not before:           Mon 13 Apr 2026 15:13:57 +0000
ROA not after:            Sun 12 Jul 2026 15:13:57 +0000
asID:                     14955
IP address blocks:        66.35.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:77:5e:9c:57:98:ec:5b:af:6d:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Apr 13 15:13:57 2026 GMT
            Not After : Jul 12 15:13:57 2026 GMT
        Subject: CN=ebe4ee1c-c9e8-4c90-ab71-8ca9a819aaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f2:13:92:bb:fa:d3:c9:06:5d:e0:f8:00:6e:
                    fb:c3:f5:0a:1a:a3:7b:e7:fb:61:de:aa:70:b9:54:
                    95:29:db:e7:e6:7e:0d:7e:b5:f6:7f:9f:ee:db:8e:
                    33:9c:70:c1:37:3a:87:63:61:9b:0f:26:fc:d1:b8:
                    58:a3:89:96:fe:d5:9f:1c:b7:90:b8:f8:b0:26:b8:
                    63:e8:a8:fd:7d:b8:1d:32:79:74:a6:7e:15:13:c3:
                    e8:54:63:79:f3:61:d7:02:64:f4:5f:86:be:db:26:
                    4f:2b:e1:cd:81:97:ad:d5:17:a6:fb:e8:71:b4:5c:
                    19:aa:74:d5:d9:5e:66:40:65:71:df:bd:04:29:82:
                    b1:f9:0d:59:9f:5b:29:03:eb:9e:42:9a:86:25:96:
                    7a:1c:d9:f3:ce:ad:0a:b6:30:02:e9:93:51:a5:9a:
                    46:63:55:4d:c0:e8:8f:93:8d:17:42:d1:09:c8:fb:
                    9b:cc:7d:03:7f:e6:72:8a:0f:83:db:68:d9:cf:4a:
                    de:57:2a:9a:03:77:61:24:ec:13:6a:3b:f6:f5:94:
                    48:31:f3:59:91:2b:89:dd:87:e6:38:1e:2f:32:db:
                    1c:ab:69:26:b5:46:cd:f9:58:85:ab:e9:de:08:dc:
                    59:5a:71:a5:c7:ff:5b:90:9e:1f:e3:06:ff:65:47:
                    19:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:70:89:7E:4E:CD:70:6B:29:65:FD:0E:C7:FD:CC:C7:60:15:9D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/de8b16a4-1180-3790-aecc-422b8f072639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:ab:9a:6c:fd:c0:d1:24:a7:c2:2a:1d:03:11:50:e3:07:
         27:2a:d5:ef:c3:66:6a:9d:27:35:a5:c4:1f:85:9a:35:43:01:
         b0:2d:a0:de:ff:f8:5a:98:d6:ec:a7:9d:46:26:a2:bd:35:ce:
         b6:e4:fa:d3:a9:0e:37:54:63:f5:56:c8:f0:7b:eb:42:5c:9c:
         3b:d0:3a:ed:d5:41:a5:c3:77:46:88:d2:b5:a6:a1:54:0b:23:
         42:2c:13:8e:bd:66:6d:d7:e3:c1:7f:5e:e7:a3:02:6a:f8:62:
         3d:ee:2d:62:cc:53:a3:b1:9e:60:02:0c:6d:09:4d:dd:80:c9:
         c0:62:33:0b:d7:99:2a:53:4c:67:63:5b:24:b7:b6:05:57:b9:
         3a:2c:20:11:2b:16:cb:63:96:92:87:6e:ba:d2:ea:d4:c5:3d:
         db:a4:ae:27:2d:3b:c0:cc:98:af:7d:a3:ec:1e:a7:3b:64:f1:
         a5:03:ae:c0:6c:bb:93:8c:02:f1:13:87:a8:2e:6b:a7:2b:a9:
         d3:f3:36:80:1e:20:7b:ed:af:c8:21:fe:0a:c4:ad:58:65:74:
         89:72:07:57:7c:5f:37:ed:68:78:84:11:1b:01:a8:ec:48:33:
         fd:b2:25:2a:dd:95:df:2f:67:47:17:ae:44:9d:07:26:6c:3c:
         84:7d:9c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:25:05 2026 by rpki-client