Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98117838-8a67-4707-b40e-2973cac2229a/34f5e6fd-eacb-3842-b9f1-fe904cc09c29.roa
File:                     34f5e6fd-eacb-3842-b9f1-fe904cc09c29.roa (raw, json)
Hash identifier:          BeLf52nvI49v1VvNxEK3dDBNAQx57sjH8Y74/+BJvF4=
Subject key identifier:   D2:8C:C3:4B:1A:78:D4:0D:F4:52:52:C8:62:34:73:C6:32:2A:90:37
Certificate issuer:       /CN=98117838-8a67-4707-b40e-2973cac2229a
Certificate serial:       010D0C9F4328584D62D90FD082257A7F317C5300
Authority key identifier: D6:6E:52:82:21:AE:E5:69:3B:E0:49:AE:5F:83:02:73:39:9E:E3:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98117838-8a67-4707-b40e-2973cac2229a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98117838-8a67-4707-b40e-2973cac2229a/34f5e6fd-eacb-3842-b9f1-fe904cc09c29.roa
Signing time:             Fri 03 Apr 2026 17:48:09 +0000
ROA not before:           Fri 03 Apr 2026 17:48:09 +0000
ROA not after:            Thu 02 Jul 2026 17:48:09 +0000
asID:                     8075
IP address blocks:        66.203.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98117838-8a67-4707-b40e-2973cac2229a/98117838-8a67-4707-b40e-2973cac2229a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98117838-8a67-4707-b40e-2973cac2229a/98117838-8a67-4707-b40e-2973cac2229a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98117838-8a67-4707-b40e-2973cac2229a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:d9:0f:d0:82:25:7a:7f:31:7c:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98117838-8a67-4707-b40e-2973cac2229a
        Validity
            Not Before: Apr  3 17:48:09 2026 GMT
            Not After : Jul  2 17:48:09 2026 GMT
        Subject: CN=c60a3bf9-fb89-4506-985b-91c64dbb35f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:49:15:e0:d9:15:25:31:47:f4:92:18:1c:
                    5f:be:f2:46:16:f7:7c:82:93:0b:09:ec:fd:0e:57:
                    a9:e0:77:02:d1:a6:57:4c:a0:1f:d9:87:e6:67:53:
                    93:d2:d7:c4:bb:6f:b3:9b:7f:6d:e6:e1:c5:f4:e8:
                    3b:cb:f7:6f:d3:dc:8a:3a:08:0f:e0:be:ae:3c:50:
                    70:e3:b5:8c:24:36:2d:70:18:2a:75:28:a3:e0:72:
                    91:32:dc:7b:b0:5d:09:43:63:12:e2:e0:5f:82:21:
                    df:eb:d8:69:c2:f7:94:70:79:af:1a:ae:9e:3e:2a:
                    57:4d:67:bb:1e:60:5b:31:0d:08:00:96:d0:e2:b3:
                    da:2d:25:a7:39:ac:91:a3:53:cc:70:c5:86:e7:98:
                    88:60:82:d8:cc:ca:37:c9:db:0c:9e:ef:61:3c:88:
                    b0:dc:41:6a:97:03:2e:dd:74:af:8e:d9:32:6f:ee:
                    d3:de:20:8a:79:c6:df:2d:c2:da:e3:91:3d:47:fa:
                    e8:de:10:8e:08:24:cc:e0:fc:ed:36:cf:ae:8b:26:
                    0f:a7:b1:9e:8e:97:d7:15:ff:cb:77:95:c6:8d:91:
                    eb:e4:57:2f:62:b3:2a:ba:bf:c9:ac:ac:74:90:73:
                    ee:26:99:79:93:e1:ad:a3:fc:99:bd:64:1e:72:e3:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8C:C3:4B:1A:78:D4:0D:F4:52:52:C8:62:34:73:C6:32:2A:90:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98117838-8a67-4707-b40e-2973cac2229a/34f5e6fd-eacb-3842-b9f1-fe904cc09c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98117838-8a67-4707-b40e-2973cac2229a/98117838-8a67-4707-b40e-2973cac2229a.crl

            X509v3 Authority Key Identifier:
                keyid:D6:6E:52:82:21:AE:E5:69:3B:E0:49:AE:5F:83:02:73:39:9E:E3:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98117838-8a67-4707-b40e-2973cac2229a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:88:b8:e2:fc:73:ad:bc:64:e0:1a:9e:0c:56:63:46:d1:
         85:48:57:2c:e7:d0:7f:53:87:fc:8c:ef:91:5c:c6:37:c5:61:
         6b:c7:3d:3a:6c:95:ca:49:d2:c5:17:d2:29:ab:3a:93:59:fc:
         00:84:4c:0c:88:1f:83:5d:19:ba:b2:bb:4c:31:61:29:7e:f6:
         e0:6f:56:fd:6a:bb:ca:4a:cc:11:84:7e:fd:b8:7e:1e:e7:8e:
         b3:22:7e:ff:3c:4b:c3:9c:78:7a:9f:75:7b:bf:63:c0:a6:c6:
         79:a8:59:85:af:c9:fa:ba:a0:34:d8:ca:0a:3b:a1:a5:c5:3d:
         a5:9f:9e:a9:34:38:58:20:19:13:b1:57:d7:28:ad:83:a0:db:
         87:4b:d7:3c:84:0c:82:e5:e7:5f:6d:62:b9:8b:37:8b:a7:c6:
         e2:bd:62:cd:e6:f2:96:23:da:73:6a:16:9c:9b:5b:50:68:d8:
         27:fb:1a:4c:9a:bc:fe:36:22:08:48:44:03:80:5b:41:51:41:
         91:30:5b:7f:90:90:6f:78:86:62:7f:5e:26:ec:5e:89:af:d1:
         fc:48:8f:a4:b6:15:fa:79:b1:33:5e:96:80:ba:e2:19:b6:e5:
         84:c1:e6:0e:c8:04:4a:a1:90:5d:6d:71:56:a5:52:73:25:4c:
         07:dc:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:15 2026 by rpki-client