Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af134b76-29a9-3cff-b138-299e8d362d30.roa
File:                     af134b76-29a9-3cff-b138-299e8d362d30.roa (raw, json)
Hash identifier:          2tm6Hy7+nZq0orRFFo0ki9ZQywE89I4p9cNbRRLpM4A=
Subject key identifier:   24:87:C3:7F:DA:E3:69:23:50:85:CC:47:4F:64:03:37:4A:EF:B9:AC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F9F38A1F21403C329A580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af134b76-29a9-3cff-b138-299e8d362d30.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     16787
IP address blocks:        66.189.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:9f:38:a1:f2:14:03:c3:29:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=1617cd23-7f08-4d41-9dc1-cf1e8cdd5841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:56:38:24:7f:34:16:f9:22:b2:22:f0:ae:1e:
                    a7:fe:a6:29:c6:9b:91:65:be:7a:f5:7d:d7:4f:52:
                    94:9a:da:b4:8b:2b:cd:71:19:a0:b7:80:00:37:57:
                    eb:6c:be:7f:0d:6f:b5:e1:9c:a7:53:7d:a8:0c:17:
                    35:48:f0:6f:b4:d8:1c:e5:22:5a:68:2d:46:5a:0f:
                    46:e0:36:ef:16:68:32:c1:ed:88:89:aa:70:64:39:
                    88:41:07:ac:03:3d:3d:10:70:75:d7:b2:37:fa:2c:
                    61:2a:67:34:8c:fb:a8:ff:1f:19:73:74:88:02:15:
                    0c:17:a3:0f:67:f0:23:1f:fa:a3:0d:f9:44:cb:01:
                    ef:e2:7f:4e:29:3c:21:f9:90:06:e3:45:88:dc:7e:
                    51:eb:c3:34:3e:c8:90:3e:e4:a7:92:97:c7:99:9b:
                    62:a8:ab:b8:9f:9e:09:3a:71:08:cd:eb:d1:05:c1:
                    c7:50:69:9e:cd:d6:14:f8:1b:3e:6c:85:6e:ac:a8:
                    ef:f8:f0:e0:dd:31:a0:3c:11:b7:a8:b3:62:8b:e3:
                    c4:d0:a9:b7:fe:b0:0a:c7:37:63:c5:d2:bf:cf:fe:
                    58:b4:43:8a:9f:03:c3:9c:64:8f:33:84:42:68:f5:
                    40:09:df:44:9d:0c:c6:69:ce:b8:ba:a1:81:d0:a6:
                    1d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:87:C3:7F:DA:E3:69:23:50:85:CC:47:4F:64:03:37:4A:EF:B9:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af134b76-29a9-3cff-b138-299e8d362d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.189.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7d:5e:ac:9d:ee:91:cc:ce:ac:e2:65:fb:af:9b:6d:23:2c:
         9b:b3:53:eb:2a:e1:0a:2e:5b:83:56:85:09:21:c0:2f:32:e0:
         cc:37:dc:0d:d4:9b:5c:35:8c:26:f5:a5:10:1e:c9:54:f3:e0:
         a4:84:2d:ed:32:d1:f1:04:3d:a8:3d:97:d8:c3:c8:73:03:d6:
         1a:69:60:e3:f3:8f:0c:4e:1f:d3:61:bc:b4:f2:89:ad:a0:4d:
         cc:fb:f3:f0:25:eb:9e:2f:e2:fa:42:6c:6d:96:7f:fc:02:de:
         b3:71:69:7a:90:9e:46:93:ea:0e:81:a8:26:ea:e8:88:27:92:
         2f:a6:6d:67:0d:9b:24:a8:71:07:43:40:04:fa:46:c9:70:46:
         c2:61:c6:b4:7a:f3:cf:60:cd:10:6d:59:f5:3a:9d:d5:f2:c7:
         2f:20:57:14:92:06:e6:e7:ae:15:bf:c1:fb:77:c4:39:42:16:
         6a:a0:04:49:72:2a:fb:e0:c1:36:f0:f7:ad:d3:5c:be:96:bd:
         0f:92:15:24:86:5b:5b:a5:54:a4:4a:05:7a:5d:c0:cc:65:22:
         2c:fc:6b:df:0b:a3:b1:3e:02:60:89:75:c2:e4:39:c9:8a:87:
         1d:44:f8:93:4c:bb:13:ac:1e:b2:e8:8d:77:ae:d1:ee:f3:6e:
         83:7b:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:13:53 2026 by rpki-client