Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc287312-eccd-3850-9465-849bc58be72d.roa
File:                     dc287312-eccd-3850-9465-849bc58be72d.roa (raw, json)
Hash identifier:          /uLYQNYMdrNWOS9AebVBPticdLVCcoeEBPikEwubjVs=
Subject key identifier:   B1:9B:F9:BC:63:2A:F4:8C:FF:BC:EA:DB:64:18:CD:C3:33:EB:49:57
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F4328584D6AAA725832EE0C666902D600
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc287312-eccd-3850-9465-849bc58be72d.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        66.81.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:72:58:32:ee:0c:66:69:02:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=6b0a833b-6e5b-4d4d-9d5c-677c591dc33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:a5:e7:a9:d2:22:26:f6:5d:c0:b3:cd:1d:
                    d8:b8:f4:0b:45:e6:0f:f6:15:ce:0a:22:f8:d4:92:
                    82:38:42:f1:35:9f:b2:88:ff:4f:c2:30:fb:a5:43:
                    60:45:d5:b5:7f:f0:3b:99:14:51:9d:4a:84:53:e7:
                    8c:04:8f:02:01:54:00:ee:42:9e:1b:10:08:47:ac:
                    c4:42:42:c7:6f:6b:2b:51:aa:7d:cc:19:a4:8c:71:
                    5d:5b:fe:3c:bc:5e:aa:7b:75:b0:29:c1:0f:1b:19:
                    44:fc:51:80:3b:ff:c3:76:55:83:b8:7c:8a:04:89:
                    22:d2:1b:31:0f:f6:da:bb:18:60:b3:80:c9:c3:b6:
                    c9:c7:df:b8:a1:dc:3f:57:81:6a:f6:a6:aa:cc:77:
                    2d:65:f3:cd:3b:5a:2d:87:84:b9:cf:36:1b:9d:4d:
                    46:46:08:f7:35:e4:f9:b8:7a:35:5c:a5:0a:80:89:
                    f2:32:2d:46:72:05:95:df:ae:ea:3c:a4:22:45:5b:
                    bf:85:33:18:5e:11:20:c1:1b:8c:1a:67:cf:d7:22:
                    90:df:1a:30:30:7d:d0:12:21:d1:41:35:81:bc:ae:
                    52:83:a6:e7:f4:64:cb:f4:d1:9f:9f:4b:13:45:48:
                    01:76:7b:89:a2:69:0a:38:07:aa:9e:11:b7:4d:28:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9B:F9:BC:63:2A:F4:8C:FF:BC:EA:DB:64:18:CD:C3:33:EB:49:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc287312-eccd-3850-9465-849bc58be72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:15:00:5e:d8:37:54:95:79:d9:a8:a3:bc:10:c0:24:fc:c3:
         cb:49:05:89:c7:f3:a0:bd:3c:35:d7:1c:0e:60:a6:4f:fa:fa:
         21:d7:f7:78:35:10:2f:67:b3:6d:41:f2:e8:e0:25:0f:e8:b8:
         79:6e:94:9f:cc:06:84:1e:27:8e:4c:b0:fb:3e:b3:28:8f:96:
         73:3c:bb:b1:f2:6e:93:78:2e:15:0a:81:4a:fa:66:4f:e5:68:
         25:06:86:e1:56:33:c6:d5:f6:d5:6d:ac:15:9b:29:09:df:2a:
         99:e1:51:a4:1e:e4:c4:a3:0a:f5:7e:bb:02:32:d9:68:2b:99:
         6d:85:99:51:25:32:a5:df:be:1f:d1:e2:f8:e7:59:1a:4a:fe:
         c2:90:ed:da:eb:52:5b:8d:3b:a9:22:d5:ae:26:29:9f:65:5f:
         00:8d:ab:d2:08:34:e1:13:0c:1c:6c:78:a7:4a:07:25:80:7a:
         3a:ea:e9:48:30:9d:f4:2b:01:3d:ba:93:0c:fd:0d:40:e1:61:
         50:4a:72:b2:e8:2b:94:68:29:06:43:cd:23:11:d5:02:f2:0e:
         8f:b4:68:7f:3f:07:2c:b3:62:70:ad:1c:00:90:df:6c:f5:28:
         11:66:18:74:94:dd:c7:fa:9c:ff:e0:42:d5:89:5c:69:ac:66:
         1b:ef:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:42 2026 by rpki-client