Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4dc8b79f-42c7-3ebe-95cc-ef1c2d4bca0c.roa
File:                     4dc8b79f-42c7-3ebe-95cc-ef1c2d4bca0c.roa (raw, json)
Hash identifier:          8AyGbB7/xiPIQggSxCKPQ8J/0uJdJhjEcjgbOXVlQ/U=
Subject key identifier:   54:2E:63:46:F9:A9:E0:1E:AF:1D:9B:B0:45:D1:C9:27:9E:21:EB:3D
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584D852FD4AFF02BC91070A11B80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4dc8b79f-42c7-3ebe-95cc-ef1c2d4bca0c.roa
Signing time:             Thu 16 Apr 2026 01:00:23 +0000
ROA not before:           Thu 16 Apr 2026 01:00:23 +0000
ROA not after:            Wed 15 Jul 2026 01:00:23 +0000
asID:                     17203
IP address blocks:        66.231.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:85:2f:d4:af:f0:2b:c9:10:70:a1:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Apr 16 01:00:23 2026 GMT
            Not After : Jul 15 01:00:23 2026 GMT
        Subject: CN=72613c9b-4635-405d-b9d2-8f9c3e061dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:ee:49:e4:a6:ee:59:83:d2:f3:62:84:76:
                    36:62:60:42:df:7c:e3:71:a8:d7:8b:4c:08:7c:9d:
                    5e:5f:a6:81:2b:86:81:30:28:9d:e5:1a:c7:f3:6c:
                    93:be:fa:b4:a7:1b:20:90:11:a6:11:d6:fe:bd:61:
                    be:ff:38:11:af:e2:55:c5:e2:fb:cf:5f:9c:05:a7:
                    51:05:08:5c:b3:04:84:f9:0f:43:a7:b4:5d:12:86:
                    e8:f9:c5:5e:71:a5:59:59:f7:1a:90:a4:00:7c:fe:
                    ce:e5:5b:db:1f:04:1b:aa:cc:25:78:7f:2d:d4:8b:
                    ee:f7:33:07:83:f2:bf:0d:7e:47:43:a8:e9:3b:e6:
                    3e:59:dd:99:4a:f6:11:87:3b:0e:9e:9c:2a:cf:5a:
                    0b:de:f3:a9:f0:12:ca:77:60:f4:c2:0d:67:fe:ba:
                    e5:1c:37:fa:ac:fb:72:33:23:6f:2a:d0:75:5d:48:
                    f1:11:f6:c3:0e:4d:44:8c:e9:d1:2f:22:42:53:da:
                    7b:2a:70:e8:6d:93:f8:ec:99:5e:6d:92:53:be:27:
                    28:64:5b:17:8b:12:93:cf:52:52:11:80:45:74:ed:
                    9b:85:4c:1f:29:fb:46:db:29:17:be:f5:a6:22:2d:
                    2f:a6:f6:4d:15:43:66:b0:36:90:b6:ee:5d:77:85:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2E:63:46:F9:A9:E0:1E:AF:1D:9B:B0:45:D1:C9:27:9E:21:EB:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4dc8b79f-42c7-3ebe-95cc-ef1c2d4bca0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:0e:ed:98:06:2d:33:dd:0d:3a:b3:c0:c3:d9:b0:e0:fb:05:
         4f:a2:16:26:e4:ed:cd:81:ea:05:c1:44:e6:f6:fc:5f:3e:75:
         ad:00:ad:cb:32:a8:47:d0:28:e6:8d:52:5c:ec:94:85:15:8b:
         bb:0a:77:2b:e1:f0:54:1d:0a:1d:0f:a3:a0:41:cd:7a:c8:67:
         04:34:1b:20:0b:7e:a7:da:10:6e:98:68:14:0c:e2:0e:04:36:
         b0:8e:39:a4:f0:1d:b0:93:c7:be:7c:55:a4:cc:7a:60:15:f8:
         df:d3:98:54:31:82:ed:1f:76:46:01:d8:5c:c6:2e:3e:9c:34:
         93:22:6b:62:92:c0:cb:af:09:93:95:06:fc:9b:62:28:41:61:
         88:1c:b5:e7:a3:8c:29:6d:2a:dc:e8:11:46:07:58:a3:9b:79:
         7b:ef:3b:d3:ce:d1:83:fd:83:3e:77:ec:93:96:a8:e8:8b:48:
         e3:5f:7b:4a:d5:62:1d:97:ca:ea:bd:3a:23:07:fa:9f:a3:b3:
         fb:bf:a9:c2:63:2d:c9:51:55:25:46:e2:f6:ce:1a:e5:77:97:
         8f:2d:86:1d:9d:a2:ab:dd:86:84:cf:3a:60:c3:c1:5d:9b:72:
         38:75:9b:65:c9:75:19:14:ad:5c:65:6e:76:de:65:1f:2b:b7:
         33:38:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:35:58 2026 by rpki-client