Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa
File:                     3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa (raw, json)
Hash identifier:          g1GIgk4qbyJO0ps5qw2kpstDWZqzEf0HnM4m97+LLmk=
Subject key identifier:   44:DB:8B:2C:A4:5F:1C:C8:38:82:23:01:9D:F1:9F:AD:31:0E:B4:47
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584EA5AA775E5BDE55F6DFCEEFD0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     174
IP address blocks:        66.90.100.0/24 maxlen: 24
                          66.90.103.0/24 maxlen: 24
                          67.159.10.0/24 maxlen: 24
                          198.16.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:77:5e:5b:de:55:f6:df:ce:ef:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=888e0636-eb28-4d3f-a228-0f25f2d6327b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:6f:8e:8d:a2:9d:6d:80:ee:40:d5:b6:e7:
                    2f:de:c4:ef:0c:87:03:ce:8e:13:d2:cb:68:c4:0b:
                    02:9c:4d:fc:cb:53:25:63:64:93:7b:92:17:aa:67:
                    ec:42:bd:c8:4b:4e:50:54:6f:94:7e:98:f8:e2:f9:
                    85:bd:12:94:f4:37:bc:f1:27:e8:eb:83:78:5f:99:
                    93:80:50:23:58:bc:ad:61:1a:6a:e7:b6:9c:04:32:
                    f1:ac:85:0e:90:69:ee:4b:53:ce:d7:df:2a:4d:14:
                    9f:9f:46:44:84:bc:fe:f2:aa:7f:eb:24:72:67:f8:
                    98:84:59:f2:2a:ce:23:85:5b:5d:37:f9:25:25:09:
                    cc:4e:a2:92:54:6e:42:97:33:cf:11:d2:08:b2:55:
                    1c:86:be:39:60:ff:10:f8:79:42:73:fc:b4:a9:da:
                    25:20:36:ff:fb:81:3d:88:94:54:ca:51:5b:7c:6e:
                    ad:c4:5c:6a:c8:ee:50:ae:03:76:96:c2:80:cf:84:
                    1a:a7:cb:87:06:59:0c:2a:ee:9c:e9:bd:9b:f3:89:
                    55:57:e0:32:80:89:41:5d:4c:f8:26:18:c3:c9:a5:
                    30:3e:98:6f:5b:62:e7:5a:77:d6:fe:e7:8a:cc:6e:
                    d6:de:b3:54:60:85:14:43:6f:fd:c2:49:43:7a:12:
                    94:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DB:8B:2C:A4:5F:1C:C8:38:82:23:01:9D:F1:9F:AD:31:0E:B4:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.100.0/24
                  66.90.103.0/24
                  67.159.10.0/24
                  198.16.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:95:5a:bf:f5:38:7e:e0:12:a2:3c:1e:85:7a:9e:30:0b:0a:
         e5:62:c8:a1:08:a9:24:7b:c9:98:af:2c:18:bb:41:ee:6f:63:
         61:26:ec:78:ef:89:3f:89:9d:82:b9:47:a9:9e:55:c9:3b:77:
         6f:03:13:fa:50:05:10:03:16:ca:66:ff:8a:ad:c9:a4:d9:2d:
         f5:76:bd:88:b9:2e:8f:98:13:98:52:43:92:02:15:7e:02:23:
         80:67:24:ef:95:f8:9e:96:e0:a7:b1:ab:12:4f:c6:38:a8:a6:
         45:23:a6:52:d5:e0:35:55:32:c5:2c:84:76:cd:12:45:03:60:
         fa:a6:5a:e3:66:05:9b:f3:dd:a4:30:8f:e1:58:c8:28:32:bd:
         2d:a1:5b:df:d2:c9:71:f9:65:0f:4d:7d:74:4e:40:d2:9a:db:
         77:27:f8:28:d1:a0:f6:92:ef:79:22:e4:7f:84:b8:68:ff:a6:
         3c:2c:0d:f0:7b:b0:24:a4:ea:ed:b8:a1:72:b4:3c:cd:69:db:
         37:c7:35:44:7e:8e:5c:a7:e7:92:4d:b2:c7:3e:51:ec:ca:25:
         ba:60:ec:3b:72:3a:7c:63:3c:bc:8d:55:b9:c7:03:c2:a5:56:
         8a:e4:c7:32:9f:d4:c3:15:eb:f2:7d:d0:5b:07:eb:19:a5:1f:
         e3:4c:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:45:08 2026 by rpki-client