Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f7d5ce1-176e-3e60-8937-87b82c045b10.roa
File:                     8f7d5ce1-176e-3e60-8937-87b82c045b10.roa (raw, json)
Hash identifier:          DkvCdglE6GqiOneG5hOvPqy3TvVt+Kft/AF4OG4si5s=
Subject key identifier:   C8:B5:2B:B6:50:AD:9F:A0:C8:6E:98:9C:29:FC:DA:89:20:56:02:57
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F6B442C7CB7FBC90454E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f7d5ce1-176e-3e60-8937-87b82c045b10.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     23083
IP address blocks:        66.191.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:6b:44:2c:7c:b7:fb:c9:04:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=0cff17ab-5323-48da-999a-cb280090f890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c8:f8:16:7e:40:cb:64:a8:aa:66:15:4d:a5:
                    6d:e3:37:72:fe:13:1e:a5:a5:4a:46:8d:77:93:aa:
                    58:30:69:8b:da:ea:c8:28:b1:d8:af:5c:7a:b5:e3:
                    55:50:21:c8:ab:ad:66:e6:32:82:8b:8c:ba:fa:13:
                    99:41:64:b5:bd:8a:c7:94:27:ca:c9:d8:20:05:c8:
                    07:08:7f:c5:8a:6a:9f:db:ba:b8:1b:9a:5c:c0:0e:
                    05:9d:d6:22:60:22:e3:ad:2a:77:dd:10:06:06:c8:
                    85:20:e8:54:35:1b:57:e6:a3:78:92:cf:c4:d3:ce:
                    57:ec:c8:84:48:89:e5:f7:a2:82:d2:8b:b8:33:de:
                    a5:4e:16:3a:23:11:05:c8:c9:e8:78:20:bb:a8:09:
                    ad:cd:df:5f:ad:f1:00:40:ee:43:05:8a:8e:2e:28:
                    f5:7c:84:0c:c6:44:1c:8e:f1:41:80:60:72:37:87:
                    46:d3:89:4b:24:b5:3d:76:49:dd:a6:27:2f:4d:c7:
                    9f:3e:21:1b:c4:a2:69:ad:94:63:4f:b4:d6:8e:0c:
                    1a:02:13:b0:b9:f0:96:c5:e6:fc:6e:09:10:c1:9b:
                    02:f2:11:c8:ca:8f:52:72:aa:10:1f:f4:5b:74:67:
                    fc:a3:a8:c6:fd:5e:34:b1:78:ea:65:33:04:17:48:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B5:2B:B6:50:AD:9F:A0:C8:6E:98:9C:29:FC:DA:89:20:56:02:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f7d5ce1-176e-3e60-8937-87b82c045b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d7:0c:0d:6c:0b:46:a7:bb:e8:ac:d9:ea:69:2a:f3:f6:e5:
         a7:ba:3a:2f:16:28:38:ff:47:29:51:a8:b9:01:6e:80:f0:07:
         0a:fb:ff:2e:f8:b6:cb:22:4d:cb:dd:65:67:62:ee:71:0d:70:
         6f:a6:4b:11:bc:f2:bf:13:db:50:47:fc:12:c7:9f:c3:0d:a9:
         76:de:e7:ac:9e:33:64:38:18:8c:b8:2a:c1:27:df:97:df:07:
         63:a3:92:ad:07:cb:c6:fc:6e:99:8c:85:66:6f:2b:29:b5:18:
         1b:87:ed:03:39:93:ea:95:e3:b9:62:14:9a:04:48:43:82:cc:
         aa:83:1e:cf:9d:b0:61:f5:52:8c:5d:88:41:df:ee:0e:5d:f5:
         b2:07:ee:d5:f8:82:be:04:f4:b5:d5:8b:c7:94:5c:18:0c:c6:
         cf:99:9c:4a:1d:5b:bf:af:e4:a4:fe:8b:6f:f8:63:01:22:79:
         1b:d2:5c:0c:30:0d:14:a9:08:7a:34:57:ea:48:bc:7b:64:28:
         10:c9:37:5b:4b:9b:94:e3:34:8b:16:a1:d6:c5:0b:6d:a9:c7:
         8e:74:a8:ea:ba:09:2f:17:39:e6:06:21:f0:5f:7b:cd:f5:af:
         61:73:d5:6d:7b:74:27:f0:67:90:02:f8:02:08:60:b9:c0:61:
         e5:9d:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:13:31 2026 by rpki-client